Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
File:                     E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft (raw, json)
Hash identifier:          OcG7DHJ3R3cioVW2DydIudI3a38fcLS0NQ9jIY5mk9U=
Subject key identifier:   86:85:34:1F:79:90:16:CD:01:5A:AD:04:13:E1:CC:55:9F:99:F0:7B
Authority key identifier: 13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99
Certificate issuer:       /CN=13a8bfb3f54754bd329180e593750265ef7e3999
Certificate serial:       0198D54E2FCFFD13F308D43A55DB439A9F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
Manifest number:          103D
Signing time:             Sat 23 Aug 2025 05:02:07 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:07 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:07 +0000
Files and hashes:         1: E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl (hash: iuaNw0xLiMxN/T45YOFZaAvcV31HHkrxUcnkVbzbFFI=)
                          2: SA2FPjcpG1kQYsbun59Q7-Ncc5U.roa (hash: sLqwzq191GZfL/xfEdWZKrffVvqlf65Ic2rl/WtgP8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:2f:cf:fd:13:f3:08:d4:3a:55:db:43:9a:9f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13a8bfb3f54754bd329180e593750265ef7e3999
        Validity
            Not Before: Aug 23 05:02:07 2025 GMT
            Not After : Aug 24 05:02:07 2025 GMT
        Subject: CN=8685341f799016cd015aad0413e1cc559f99f07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:62:b3:08:b9:16:e0:42:f5:88:cb:b2:1b:
                    24:7b:3a:45:ee:79:21:01:40:30:ab:3e:85:04:23:
                    7a:79:1a:b1:0d:66:eb:20:7f:97:0a:bc:5c:73:00:
                    94:f5:43:a8:7d:76:7f:71:5e:52:11:bd:96:6d:65:
                    0c:a4:53:e9:c6:d9:2f:7d:93:7e:e3:ee:c1:80:28:
                    b8:74:ee:58:77:9a:c1:55:42:65:1b:f6:e3:ed:b4:
                    dd:07:dc:aa:bb:1e:41:87:3c:21:89:a9:ae:62:08:
                    85:ce:56:a3:71:09:31:e5:b7:e7:3d:17:44:34:96:
                    85:b2:33:b5:a2:76:dc:f2:02:ea:ce:46:22:03:a9:
                    c3:91:66:c4:a3:ff:1c:f3:cb:15:08:71:c1:9e:f9:
                    76:50:20:3c:e7:5c:a4:74:4d:f8:9e:e4:ef:1c:71:
                    66:7a:ec:e6:e2:e1:c0:86:56:52:a5:f7:62:20:37:
                    84:b6:bf:3f:35:d3:34:59:37:74:4e:33:ef:a0:e2:
                    6e:70:a7:03:e2:2b:43:ec:a1:3f:bf:13:60:98:f3:
                    d4:ac:2c:75:fb:75:61:9d:c2:29:7a:a2:a8:cd:f7:
                    22:8a:0d:ef:cd:32:72:5d:d5:ce:9f:72:ae:f9:2a:
                    92:0f:a6:f4:5a:0e:02:aa:3b:bd:e7:77:40:ec:6b:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:34:1F:79:90:16:CD:01:5A:AD:04:13:E1:CC:55:9F:99:F0:7B
            X509v3 Authority Key Identifier:
                keyid:13:A8:BF:B3:F5:47:54:BD:32:91:80:E5:93:75:02:65:EF:7E:39:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E6i_s_VHVL0ykYDlk3UCZe9-OZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d76585-95fc-4803-ba6e-75c0d78eb07d/1/E6i_s_VHVL0ykYDlk3UCZe9-OZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:b5:48:65:12:27:4a:7d:cf:20:65:5f:ff:d0:91:a4:53:
         44:ec:97:7b:ec:6d:e2:04:0f:fd:ea:2d:1c:73:e2:31:6e:62:
         91:f3:ab:99:72:45:b8:8c:6d:a9:cc:2f:ea:3a:8e:f2:9e:be:
         17:66:62:86:aa:a5:3c:14:2a:4d:da:42:13:20:ed:00:aa:10:
         18:47:ba:1f:4b:cd:3a:52:1e:0b:4d:db:d2:0f:7e:73:70:ac:
         af:f1:28:9f:2a:b1:2c:86:09:84:5f:89:4a:91:43:d7:f1:77:
         50:0d:7f:a3:37:a3:26:d4:2a:1e:17:2f:84:80:91:4e:22:9a:
         07:9e:14:a3:30:8f:5f:7c:96:85:7c:0f:bf:d5:0b:37:ad:16:
         e6:d4:aa:01:b2:a1:e2:a8:ed:f9:87:a5:4a:b1:45:7a:53:81:
         79:07:83:c4:4b:c0:d2:6c:76:68:dc:3c:9c:d9:56:32:3f:4c:
         21:d8:5d:f0:22:68:bf:18:be:e4:8a:bc:dc:8b:8d:dd:ea:71:
         b3:0a:60:b1:be:f8:1d:26:cb:06:fb:c4:80:9f:ef:7d:16:4a:
         86:da:e4:b5:70:77:1f:50:ba:cf:7d:5f:27:34:b7:e3:24:2e:
         6d:a4:1e:fe:3a:6b:31:0e:f5:d5:af:98:6f:b8:ab:62:fd:f2:
         49:c7:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:24 2025 by rpki-client