Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
File:                     6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft (raw, json)
Hash identifier:          wpTp7tejfZ1RbMxU9o1MdzPd0dUNILfOLaQEGIIGkEA=
Subject key identifier:   FE:80:79:87:6C:80:FF:2E:02:A1:6D:AF:DD:61:C3:79:A2:0E:D6:EF
Authority key identifier: E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5
Certificate issuer:       /CN=e8477159d65b22568098b95952487300771b3ce5
Certificate serial:       0197B6D74C7617A70A3C80FFCC30C1193BCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
Manifest number:          0D49
Signing time:             Sat 28 Jun 2025 14:00:52 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:52 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:52 +0000
Files and hashes:         1: 6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl (hash: aFEsI+uIdqhGvpAb2RZbC8sSkoNaL586H62fJVUiJuQ=)
                          2: YWx5LPUxWjVFqacvQPPS5X0JnQo.roa (hash: tQhWNjB+Ou6m9KvKR4e5W4hPzK0Vwe1hIf4sW/iHBAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:4c:76:17:a7:0a:3c:80:ff:cc:30:c1:19:3b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8477159d65b22568098b95952487300771b3ce5
        Validity
            Not Before: Jun 28 14:00:52 2025 GMT
            Not After : Jun 29 14:00:52 2025 GMT
        Subject: CN=fe8079876c80ff2e02a16dafdd61c379a20ed6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:04:c2:03:ca:b4:8c:fa:1a:ee:c2:fe:96:
                    68:12:65:ba:51:fb:11:e8:cc:3f:c7:aa:02:ae:72:
                    25:3b:c2:91:d2:b5:dd:47:8c:98:be:6e:35:6c:b3:
                    79:59:85:df:5c:f3:77:1d:8c:8f:0d:0b:1e:fc:20:
                    71:3e:0f:99:74:a8:2d:67:a5:cb:b5:6c:a6:3e:88:
                    89:f2:1b:d7:bb:17:4e:87:7c:7c:25:c9:ab:82:1e:
                    4e:00:06:ee:44:6c:9a:c8:fe:6d:e3:25:14:44:21:
                    da:08:df:4a:a8:5f:5e:04:aa:be:f1:93:8a:fe:b7:
                    dc:22:81:c1:94:d7:05:aa:d2:25:2d:79:df:23:3b:
                    fc:24:c1:34:61:c3:40:7f:85:80:db:f6:3f:f3:71:
                    f1:61:95:c8:6e:a2:49:77:39:d3:7f:db:0e:84:c0:
                    f6:5a:ad:e4:37:d5:cd:b1:da:ca:e3:72:46:c5:4c:
                    78:be:b7:a9:f3:56:54:2e:f1:f1:9f:d9:b9:34:f2:
                    33:80:e3:f0:43:eb:c0:2a:58:a3:ce:b1:75:d2:c3:
                    76:5e:7b:dd:25:9f:8b:db:bb:bf:89:ed:7e:ac:02:
                    88:63:2e:3c:81:94:a9:34:22:e2:cf:e2:a0:c6:df:
                    69:94:f4:f2:e6:e0:c1:d1:82:c5:ab:b4:c5:fe:e2:
                    4d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:80:79:87:6C:80:FF:2E:02:A1:6D:AF:DD:61:C3:79:A2:0E:D6:EF
            X509v3 Authority Key Identifier:
                keyid:E8:47:71:59:D6:5B:22:56:80:98:B9:59:52:48:73:00:77:1B:3C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EdxWdZbIlaAmLlZUkhzAHcbPOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/eb0792-843a-46b6-b0da-f468b8c4651a/1/6EdxWdZbIlaAmLlZUkhzAHcbPOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0d:c6:97:96:a1:5e:71:ab:b3:ba:c9:66:dd:c5:d9:a3:03:
         c5:1a:a8:97:21:0d:04:0d:70:d4:cf:44:8f:ec:a9:d3:84:74:
         52:41:72:e9:70:23:b6:24:f1:fd:32:7c:92:9a:14:e6:a8:2b:
         95:4f:c6:f5:09:5d:40:3e:f7:a3:6a:c4:1d:c0:08:ea:ca:24:
         63:00:85:5e:89:53:27:fc:ff:44:63:75:bb:e4:2e:3b:e1:47:
         a8:00:91:0f:20:ae:dd:6a:09:25:e6:48:65:60:1d:21:4d:83:
         cf:83:bf:e7:d7:4c:7c:bc:ff:61:6c:aa:f8:31:d9:18:68:ea:
         b4:a2:7a:ff:e2:91:98:4c:23:b9:c2:b9:2d:23:ab:1d:18:79:
         67:69:b4:18:a7:7d:cf:3c:f3:75:49:40:87:e3:a4:eb:60:09:
         90:12:5a:7a:cd:3d:7f:9d:20:cb:0e:3b:b9:ed:cd:3a:18:6e:
         13:e8:c4:0d:eb:8a:0a:98:e7:a5:93:a0:cd:aa:8e:e7:87:d2:
         ec:89:a7:fe:a9:fe:59:c4:79:47:6f:42:b9:7a:e6:cf:4b:2e:
         d9:fd:a7:3c:40:84:a5:e7:bf:e6:79:a4:fa:c3:09:5a:db:64:
         ba:7c:bb:cc:20:0c:06:57:9f:f7:21:43:46:6c:dd:08:b4:dc:
         94:67:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:51 2025 by rpki-client