Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
File:                     6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft (raw, json)
Hash identifier:          0Ank533BhdWvTuFvloYWXq07iDLBfjM8yER7qs6Asx4=
Subject key identifier:   AC:AB:4F:FE:DB:8B:BA:E7:7F:DF:0C:CB:E5:30:F7:AB:C8:0E:EB:FC
Authority key identifier: E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1
Certificate issuer:       /CN=e96a769beca3b1932955158135596365c43c83b1
Certificate serial:       0197C3B7493FFF694885F41BFF7749029570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
Manifest number:          0D36
Signing time:             Tue 01 Jul 2025 02:00:58 +0000
Manifest this update:     Tue 01 Jul 2025 02:00:58 +0000
Manifest next update:     Wed 02 Jul 2025 02:00:58 +0000
Files and hashes:         1: 6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl (hash: EiSOkkcMfgS4c7vQi+xf9F/H38fKA5ciuXLUR8MCOaA=)
                          2: Qt-NHTWPG9Blnlp9KwVRBT4_TNs.roa (hash: iMKB/O68vIbAIcl8B86g//4tQCSnWahP5EtY42n7PM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 02:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c3:b7:49:3f:ff:69:48:85:f4:1b:ff:77:49:02:95:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96a769beca3b1932955158135596365c43c83b1
        Validity
            Not Before: Jul  1 02:00:58 2025 GMT
            Not After : Jul  2 02:00:58 2025 GMT
        Subject: CN=acab4ffedb8bbae77fdf0ccbe530f7abc80eebfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7c:ff:75:e5:a9:3e:b3:91:04:02:97:a3:2b:
                    03:42:c8:8b:3b:23:50:52:37:f5:d9:15:88:37:32:
                    62:b2:08:b9:a7:59:05:57:9f:b0:62:f8:08:c4:be:
                    20:67:85:9d:30:ce:e0:6c:54:fa:94:67:bb:d2:d0:
                    c0:7c:91:c4:68:62:ce:ea:ab:1f:26:9e:48:e3:15:
                    e2:12:09:b0:c0:73:ae:62:be:f6:b3:7a:c3:44:e8:
                    0e:c8:c9:73:8b:1c:15:b5:3e:5b:d7:ee:90:a1:e1:
                    ff:81:02:ba:20:b2:db:05:15:21:ab:27:ba:0b:2e:
                    13:5c:ba:5b:59:ae:97:2b:07:b7:a2:fb:77:57:90:
                    33:cf:a4:5f:fd:0f:36:d6:a1:72:92:68:39:35:fc:
                    55:bb:91:dc:68:44:0e:db:2c:ad:4d:16:c3:e0:28:
                    df:4a:2f:64:3f:43:14:45:bd:76:0b:2e:ab:ef:f4:
                    06:49:90:d9:32:f9:91:69:81:ea:20:33:de:65:12:
                    7a:18:73:10:c2:f6:e0:cf:6b:34:aa:5e:6c:c6:29:
                    36:dd:9d:6e:0b:5e:01:1d:b1:8c:c8:42:4e:b8:05:
                    21:f2:0c:fd:89:4b:22:e4:35:71:1d:4e:45:10:54:
                    a6:64:4e:bd:1e:f7:c1:db:7f:7d:9f:e1:ef:cf:ea:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AB:4F:FE:DB:8B:BA:E7:7F:DF:0C:CB:E5:30:F7:AB:C8:0E:EB:FC
            X509v3 Authority Key Identifier:
                keyid:E9:6A:76:9B:EC:A3:B1:93:29:55:15:81:35:59:63:65:C4:3C:83:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/cae91b-9e0e-4d5c-afc4-55118f8bd5f2/1/6Wp2m-yjsZMpVRWBNVljZcQ8g7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f7:47:24:8e:6e:bc:c2:5a:22:16:93:1c:71:da:e1:50:f7:
         7a:c7:b4:d6:8a:dc:0a:9a:e3:a6:80:39:bc:b9:22:88:b8:fa:
         22:2b:3d:1e:00:c5:b1:c2:3f:bf:81:4a:a6:fb:eb:ed:6f:78:
         d9:c9:85:4d:24:38:0e:e7:c8:32:bd:3c:99:d0:44:c9:0c:1b:
         ce:60:fd:88:b8:d3:49:dc:c1:cf:57:cb:91:14:57:74:e0:83:
         c6:a3:b6:44:15:b9:8f:85:fa:f3:52:1a:ff:ce:a5:fc:50:ee:
         a3:fc:fe:b8:3b:7b:90:f7:43:26:d6:a9:48:56:01:e1:cb:df:
         47:e1:bc:4a:b5:26:b5:2d:b0:d9:bf:9a:85:27:65:48:e7:a9:
         b7:29:9a:54:13:b0:08:d5:a4:5c:46:3e:6a:d2:82:99:74:98:
         6d:fe:fc:b2:24:93:f5:dc:3c:bb:8c:62:24:a3:1f:4f:24:c4:
         f0:f5:0a:23:22:ae:63:af:03:6b:57:1e:3e:04:0c:72:21:c0:
         fb:67:a4:95:fb:97:99:0a:b0:92:a1:9b:2d:99:15:89:8a:4b:
         c6:fa:7a:6f:41:77:1b:00:ac:e0:4b:69:41:92:8d:ab:26:24:
         21:ed:ba:78:94:ea:f1:f8:f4:f0:51:0e:b3:f0:3e:f3:ba:9a:
         59:ab:05:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:19 2025 by rpki-client