Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
File:                     6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft (raw, json)
Hash identifier:          a9/O9PuM3GuyvQIcjscp2kXnDIv/0zvfhjgp3p5KAY0=
Subject key identifier:   74:D4:FF:FC:A6:BB:E5:1F:C9:13:DE:9A:ED:98:E6:28:6C:2F:05:62
Authority key identifier: E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36
Certificate issuer:       /CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
Certificate serial:       0198D5BBF27EC03B1A6BB80DB829CA63C950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 07:02:00 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:00 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:00 +0000
Files and hashes:         1: 6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl (hash: 5y7CRF8mJRAl7GzJx2k/p+ZGarBKTQSWelsXSazTpHE=)
                          2: XGdgxOrZAEASnwG-E4mJgIZXt9A.roa (hash: r7+Ew2fux06ZFhsm5QtmYCoespwgwuFRQ3Ky/AsDSy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f2:7e:c0:3b:1a:6b:b8:0d:b8:29:ca:63:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f40902a003d8fe6f7c7742eb47d70b50ade036
        Validity
            Not Before: Aug 23 07:02:00 2025 GMT
            Not After : Aug 24 07:02:00 2025 GMT
        Subject: CN=74d4fffca6bbe51fc913de9aed98e6286c2f0562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:fd:70:e0:4a:ba:83:c5:b8:fc:42:81:dc:
                    d1:c5:e4:07:67:5b:b0:74:1e:c3:30:c6:b4:2c:95:
                    d7:0b:d3:4e:ad:44:8d:f9:9f:f3:65:fd:4e:1e:fc:
                    03:38:70:20:37:0a:23:2c:f0:c8:45:6a:16:01:9c:
                    2e:c3:b0:de:d5:15:2c:8b:b3:50:cb:a3:33:63:84:
                    9b:79:35:fa:46:bf:59:90:d4:66:71:20:1d:50:59:
                    50:ab:e0:bb:55:b5:28:b4:da:38:da:1b:cb:22:75:
                    c4:d0:f1:6a:0a:8e:4e:49:95:22:ed:0c:22:44:91:
                    48:eb:76:9d:26:6b:65:44:17:87:2a:12:db:c9:2f:
                    93:21:af:c7:12:b3:8a:7f:a1:59:7e:3f:c8:63:9b:
                    27:0f:8d:f1:50:c6:c9:6d:9a:0a:fb:91:cb:76:f3:
                    66:22:22:75:55:20:16:1e:2d:90:0d:73:6a:92:09:
                    4d:a2:fc:74:ef:5e:8b:ee:45:7c:b7:1f:e5:89:ed:
                    8c:07:6e:3d:d2:d6:ce:37:51:8b:74:cc:8d:c5:73:
                    aa:bf:60:d6:ca:28:43:ca:67:a8:00:51:b1:bf:3c:
                    5d:d5:33:02:58:b6:09:fe:d1:75:12:df:e9:e1:c7:
                    68:5e:b1:17:ec:02:8f:42:4f:89:d0:9d:5b:23:49:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D4:FF:FC:A6:BB:E5:1F:C9:13:DE:9A:ED:98:E6:28:6C:2F:05:62
            X509v3 Authority Key Identifier:
                keyid:E8:F4:09:02:A0:03:D8:FE:6F:7C:77:42:EB:47:D7:0B:50:AD:E0:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6PQJAqAD2P5vfHdC60fXC1Ct4DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/9425c6-c495-4878-a8f3-7a78c8c4e051/1/6PQJAqAD2P5vfHdC60fXC1Ct4DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:47:3a:25:07:c7:73:78:5f:e1:8f:89:43:0a:02:bf:ad:
         1d:6e:3b:32:c2:09:7f:41:97:81:75:7a:5f:c3:b6:ec:a2:39:
         2f:aa:95:09:43:2f:26:88:ab:f5:5b:94:7e:2f:18:36:80:61:
         1a:27:3b:22:1b:4c:78:49:c2:b0:d4:ab:46:7e:24:67:d1:32:
         0b:ea:83:d7:0d:9b:46:84:79:06:a1:24:9a:33:99:3d:d4:b4:
         e6:a2:14:07:e0:e3:66:9a:fe:f5:e6:47:de:9d:e3:f7:6b:9e:
         4c:64:e3:dc:9e:39:97:a9:15:d3:47:b3:09:d0:fb:f6:01:25:
         86:53:45:e1:06:79:4a:fe:0d:71:e3:6f:f2:b6:e1:d1:f3:09:
         5c:8e:5e:18:19:60:31:2d:c7:e1:d7:a7:33:29:a9:06:99:85:
         05:98:ac:18:12:fa:6e:d9:35:b7:aa:3e:a5:ef:a8:b2:54:d5:
         dc:07:93:cf:07:45:97:37:92:d0:7e:c1:38:2f:79:78:f4:55:
         70:03:d1:a0:19:b7:bb:61:ee:ca:ec:24:ff:d6:23:c1:21:c2:
         b0:69:47:20:98:95:e8:5a:d5:67:0f:a2:db:b6:83:b1:ef:38:
         25:3f:2f:6a:99:30:68:a7:0f:e6:5e:e6:b6:1a:a0:2e:3b:2b:
         49:76:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:48 2025 by rpki-client