Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File:                     Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier:          Va3QpDzzqSkrAw/PrncKbatq0uey7lZThTEUshUgARg=
Subject key identifier:   2F:88:E8:21:F4:B4:B5:7A:86:E4:EA:7D:D7:5C:7C:F9:F4:FE:F9:A4
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer:       /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial:       0197B5C4C523E508798846B045D5898EF930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number:          C6
Signing time:             Sat 28 Jun 2025 09:01:00 +0000
Manifest this update:     Sat 28 Jun 2025 09:01:00 +0000
Manifest next update:     Sun 29 Jun 2025 09:01:00 +0000
Files and hashes:         1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
                          2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: /But4fB/+ys0mjtnWaAk9aruNh1oPkozCxY/xU5zZNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:c4:c5:23:e5:08:79:88:46:b0:45:d5:89:8e:f9:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
        Validity
            Not Before: Jun 28 09:01:00 2025 GMT
            Not After : Jun 29 09:01:00 2025 GMT
        Subject: CN=2f88e821f4b4b57a86e4ea7dd75c7cf9f4fef9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4a:38:3f:13:e7:15:ae:0e:6f:b2:5c:8e:b4:
                    8d:cb:df:e2:0a:fb:ad:34:03:ab:72:8a:65:6a:1f:
                    0a:37:f1:61:e4:01:4a:13:72:2f:3f:16:8c:2b:52:
                    ec:b1:8c:d4:7b:ed:3a:41:7e:29:e8:6c:28:48:81:
                    7f:9d:da:c0:4b:36:0d:8f:9e:47:b7:25:0c:2d:65:
                    be:d3:92:e1:9b:03:b2:82:3e:6a:1e:25:47:74:eb:
                    20:c6:1d:8b:e4:11:5b:6e:41:f4:d0:ad:a4:38:9b:
                    a6:a1:ef:4c:4f:5d:05:93:77:2a:31:cf:2a:27:8d:
                    28:62:fa:10:29:4e:45:b5:96:80:cf:2e:3f:32:e3:
                    a0:87:df:0a:4d:2c:81:96:03:df:11:32:d5:8a:55:
                    a7:9f:95:ae:9e:a7:c7:ee:3b:d8:39:7e:e5:d4:ee:
                    d4:93:07:f1:19:81:95:e9:58:56:f3:61:04:20:92:
                    32:d8:d6:51:69:c5:64:aa:9f:71:c2:bf:76:5f:6b:
                    e4:74:3b:69:8f:93:7c:f9:d5:67:50:14:06:27:a3:
                    4d:c3:61:b5:84:31:42:fd:64:85:7c:f6:fd:38:42:
                    17:61:5a:64:58:dc:66:f7:a0:d8:de:47:98:bc:47:
                    9d:89:59:63:50:8d:98:0b:54:a6:f3:a2:6b:d1:23:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:88:E8:21:F4:B4:B5:7A:86:E4:EA:7D:D7:5C:7C:F9:F4:FE:F9:A4
            X509v3 Authority Key Identifier:
                keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:e0:fc:14:c9:8f:23:91:96:06:76:44:f3:59:97:43:a4:
         80:0b:30:98:ba:e8:57:a1:14:e7:98:ae:42:bb:55:87:1e:f3:
         b5:82:14:cf:b7:df:08:82:6c:48:54:a7:d2:68:7b:c2:b8:8a:
         58:46:26:58:bd:4c:74:3c:f5:f2:24:24:d4:1a:90:aa:23:82:
         af:a1:b1:38:2c:26:a6:61:f2:7d:78:79:26:a1:f9:7c:62:21:
         f7:52:67:af:f5:64:19:bd:40:84:71:f3:00:e2:b5:7b:08:af:
         ea:8f:85:80:1c:e7:0e:59:97:98:67:d5:db:86:16:de:84:de:
         49:9f:df:50:89:56:48:2b:e3:d9:68:d5:1d:79:1d:e9:19:10:
         15:f1:65:31:08:33:25:64:e5:9d:30:90:7d:ca:6c:24:ae:eb:
         6d:4e:27:f2:bd:2f:83:68:27:20:23:f6:c4:d7:95:76:52:d7:
         4b:a0:74:7c:df:a1:d2:23:ad:fb:c2:e2:59:89:56:ca:53:27:
         b5:2b:80:c4:a3:cf:e7:15:04:eb:66:9b:de:85:20:41:71:fe:
         b3:f3:7c:0c:09:97:9b:83:8c:26:04:47:5d:7a:3b:53:5c:dc:
         d4:02:89:00:80:6c:c0:3b:ad:95:35:d5:80:b3:ee:8f:5e:27:
         12:ad:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:35 2025 by rpki-client