Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
File:                     6lUOVOR2bVdl0PPQYd8ddNpViXM.mft (raw, json)
Hash identifier:          4ruZOsWzXTb8jxqIrhz8K+ve/F6oCyuWxTrqmrc0ZVU=
Subject key identifier:   B2:B0:15:15:9F:72:9D:B1:D5:2C:71:E4:BD:79:21:FD:4A:35:10:B8
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Certificate issuer:       /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial:       0198D54ECF340FE7532C7082E63E00C74864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
Manifest number:          0D9A
Signing time:             Sat 23 Aug 2025 05:02:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:48 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:48 +0000
Files and hashes:         1: 6lUOVOR2bVdl0PPQYd8ddNpViXM.crl (hash: 29F9VpRPIfcvYENmnGAVLSOqESO6JEqS5K0EH5BV1gQ=)
                          2: SOLF2PkE720JgjOdf1KwRyDMoVU.roa (hash: xFpd4K6CQn8K2Nx3S7ipIBzbB30czEVkqtv2sS8du2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:cf:34:0f:e7:53:2c:70:82:e6:3e:00:c7:48:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
        Validity
            Not Before: Aug 23 05:02:48 2025 GMT
            Not After : Aug 24 05:02:48 2025 GMT
        Subject: CN=b2b015159f729db1d52c71e4bd7921fd4a3510b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:44:a3:fd:c3:36:1b:23:58:ae:e8:f2:08:
                    fb:7b:ca:28:dd:c9:70:d7:a8:b8:b2:27:52:37:d0:
                    3d:e3:34:79:c9:1e:4c:95:68:c8:c6:78:68:83:f7:
                    f6:27:e9:f7:4c:9e:1b:c4:43:4a:b8:bd:ff:66:1c:
                    3c:f8:bd:ea:b2:ab:0d:e3:a6:67:2e:25:af:97:0a:
                    34:4d:1e:1b:52:27:6f:f3:71:2f:23:49:0f:4c:1c:
                    ac:f1:89:56:bf:1c:ec:16:c2:97:10:f1:b6:fc:ff:
                    a5:84:c3:b7:6d:56:d9:df:17:6f:c5:f3:ca:c4:1c:
                    fe:18:43:0e:fe:52:c1:01:fe:aa:56:a7:48:dc:d0:
                    f0:a5:24:b4:f3:4c:b8:db:b0:15:f7:e6:8c:2b:7d:
                    dc:f7:6b:ec:f3:a2:f7:3e:01:ac:24:40:5f:20:00:
                    44:b7:56:44:2f:ad:bb:1d:cd:9d:1f:bb:a9:f5:8f:
                    8a:a6:1f:65:f7:db:a6:f6:82:8b:22:b9:06:60:5f:
                    c3:14:85:8e:f1:3a:1a:b5:8b:64:3c:cf:55:f5:03:
                    cb:39:78:fa:83:a4:65:5e:26:7f:41:0c:7b:35:6f:
                    b9:72:a0:2d:58:eb:9b:6e:50:a3:cc:56:88:63:d2:
                    13:bc:3c:07:af:87:1a:1c:5d:01:2b:cd:0b:2f:c7:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:15:15:9F:72:9D:B1:D5:2C:71:E4:BD:79:21:FD:4A:35:10:B8
            X509v3 Authority Key Identifier:
                keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:ac:c7:4a:94:0e:1b:02:48:ac:09:5b:1e:6e:c7:4f:44:
         b6:dd:3b:13:bc:24:61:2a:de:1d:ef:62:48:f1:e9:5d:58:8a:
         35:50:ac:75:52:79:0b:3e:83:f8:85:ca:c8:51:7e:96:6d:10:
         29:ce:58:29:c1:b7:1b:3f:af:86:ec:c4:6b:24:6e:5e:1c:7c:
         10:cb:c5:c0:89:67:2f:c2:6e:02:bb:f7:3f:ae:45:2e:df:e9:
         0e:14:d3:d5:eb:25:0a:92:af:0e:39:d6:3c:a9:f1:4d:68:4f:
         e4:8b:28:5f:1b:cd:f5:e0:f4:f7:fa:25:9b:33:a8:f9:56:bb:
         e6:3f:39:35:38:89:80:ae:44:f4:ee:66:c3:f8:c4:fa:fb:94:
         74:e2:3d:b3:5e:32:ae:94:5e:49:3a:81:f5:da:a4:09:24:36:
         0c:f6:87:0e:72:a4:34:c0:15:35:60:75:c2:20:e3:be:50:bb:
         4e:6c:71:a9:24:98:f8:97:78:61:58:9b:28:2c:d3:b4:e8:59:
         25:24:ae:8a:e1:46:c6:a2:56:8b:da:86:bb:2e:1c:52:cb:68:
         eb:59:b6:21:9b:e0:71:9f:37:d3:3a:7a:96:1c:28:e4:70:ee:
         e6:98:8b:c4:d1:4d:c0:30:b2:00:99:7d:e6:1a:6b:42:5e:63:
         eb:a1:e0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:43 2025 by rpki-client