Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
File:                     a6acO9yS1oEUijWKE6bm9T37d1g.mft (raw, json)
Hash identifier:          NiTG/q9UBjCvvPxwcPWcoeKzQk4h0Vq32ym7sCuXgaA=
Subject key identifier:   04:2C:C4:18:58:02:6B:B7:27:41:ED:45:3B:68:14:AA:3B:00:17:AA
Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58
Certificate issuer:       /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
Certificate serial:       0198D54E7859415A3EE7729739466B9904FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
Manifest number:          0515
Signing time:             Sat 23 Aug 2025 05:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:26 +0000
Files and hashes:         1: 0bVZzhMFVS1g8jzWdISxg74CDIY.roa (hash: 0CO5Cokq43YXaFcPiFBIU+s3WfK4TaB7E8kyWwFMXGc=)
                          2: a6acO9yS1oEUijWKE6bm9T37d1g.crl (hash: HgaaKZgttsBa1KM6zKHQEMfMV1hF9GQIPCt0tCh8W2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:78:59:41:5a:3e:e7:72:97:39:46:6b:99:04:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758
        Validity
            Not Before: Aug 23 05:02:26 2025 GMT
            Not After : Aug 24 05:02:26 2025 GMT
        Subject: CN=042cc41858026bb72741ed453b6814aa3b0017aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:49:90:40:e1:9b:da:43:83:e0:48:19:7d:
                    86:1c:eb:8d:53:83:fa:53:d0:da:8a:b6:36:27:b3:
                    e9:de:84:f6:6c:c7:81:ac:df:c0:a6:43:42:6c:5f:
                    b1:86:5d:6c:62:86:49:2b:3b:cb:3d:e1:c0:5a:22:
                    b0:2d:e5:75:50:e2:b3:56:73:8d:de:46:8c:4d:dd:
                    d5:b4:3a:ce:34:52:dc:32:f4:8f:c7:e7:06:54:fb:
                    66:36:ac:9f:49:97:2c:7f:68:2d:51:68:23:24:65:
                    72:51:26:f7:d0:de:d7:57:ea:43:95:87:44:d2:49:
                    54:51:a8:59:7d:0b:3e:1d:0a:4d:bb:c4:0b:bc:14:
                    c9:1e:95:87:2b:66:c6:fc:dd:df:6a:dc:d0:e8:0e:
                    05:77:bf:1a:dd:f2:08:f5:63:65:f0:ce:f5:b8:c5:
                    be:13:bc:da:ea:0d:c7:b4:47:39:9a:0f:d1:5e:12:
                    19:8c:ef:01:d3:b4:b1:fb:ad:a5:be:27:a1:4c:b7:
                    6b:a9:76:7b:47:1d:cc:fe:7f:11:9e:f7:2c:65:2a:
                    c6:ff:06:8c:45:d5:fd:ae:67:b2:b6:24:af:a2:b4:
                    6e:32:88:28:2e:4a:f0:cb:a2:10:1b:84:fb:76:54:
                    28:8c:cf:8c:5a:a1:a5:47:1d:f8:12:08:4c:d1:98:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:C4:18:58:02:6B:B7:27:41:ED:45:3B:68:14:AA:3B:00:17:AA
            X509v3 Authority Key Identifier:
                keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:f6:16:51:70:eb:8b:b4:e2:32:0c:5c:e6:8d:38:8d:2f:
         17:62:3c:2f:2c:ba:da:ea:60:70:78:dc:03:74:f8:bb:88:02:
         7d:76:d1:cf:3a:48:52:96:02:9a:e9:67:d6:33:b6:99:1a:1f:
         a9:dd:47:66:11:e6:a1:a6:4a:f2:4a:e6:d2:d5:21:13:c6:d0:
         bf:70:b0:32:0a:74:77:0b:85:f3:d7:d5:46:8d:5d:89:26:1f:
         ab:61:d8:86:78:9f:8e:2c:41:91:85:d6:36:af:8a:79:21:99:
         14:92:b4:b9:73:8d:ae:b9:67:76:0f:dd:24:8c:55:7e:27:1c:
         3b:41:d6:7b:49:a3:7c:13:9c:da:ff:96:01:58:cd:ec:f5:f2:
         bb:d5:01:79:43:aa:e9:67:9f:bd:26:a8:4e:90:ca:da:c0:a1:
         68:0f:7e:60:32:89:6c:8b:17:ce:20:6d:b6:69:38:e5:7d:9e:
         ae:e1:49:04:66:cc:4f:61:8c:ce:dd:d2:e1:04:48:39:b4:a8:
         a0:d1:3f:8f:5b:a6:eb:76:f6:94:d5:db:0a:25:ca:cb:ef:8b:
         16:d1:13:67:c2:ca:85:50:48:97:8a:a8:bb:00:1c:60:8d:a4:
         f5:fc:0b:e7:9d:84:4d:f2:ed:19:85:a4:d6:ab:dc:da:52:ac:
         f7:dc:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:54 2025 by rpki-client