Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
File:                     a16LBwHjXWapeHbYBVASqJaC_cM.mft (raw, json)
Hash identifier:          J1k8RkwKajetfvlNkJ420Nq2jTzWhpVlChDpbivWgYI=
Subject key identifier:   DC:E3:08:68:16:23:B6:69:62:8C:6C:7B:D0:70:2B:F9:DE:CB:86:A7
Authority key identifier: 6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3
Certificate issuer:       /CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
Certificate serial:       0198D6CCEC87339F81332DCE0A17AE4EDA6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
Manifest number:          151E
Signing time:             Sat 23 Aug 2025 12:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:10 +0000
Files and hashes:         1: a16LBwHjXWapeHbYBVASqJaC_cM.crl (hash: I+lB8b3mVI6TtXRqvAM4peEgayY/+EbsawUsUv/Ha+I=)
                          2: aFCOTElnBLsNf9Ly_hbmm8JGZvk.roa (hash: MGWHqg1x0uZrRis7Xazn4JBDX59gH8eSl4RHJngdXlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:ec:87:33:9f:81:33:2d:ce:0a:17:ae:4e:da:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b5e8b0701e35d66a97876d8055012a89682fdc3
        Validity
            Not Before: Aug 23 12:00:10 2025 GMT
            Not After : Aug 24 12:00:10 2025 GMT
        Subject: CN=dce308681623b669628c6c7bd0702bf9decb86a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:58:ea:bf:e0:3f:d3:9c:bf:d2:13:a1:56:
                    10:b6:fc:c5:47:d0:ef:17:0e:88:6c:f8:02:f5:7b:
                    b0:d0:86:b4:54:a1:ca:1d:9b:26:83:c8:50:09:8c:
                    07:aa:1f:6f:90:52:98:c0:55:bf:23:05:e7:46:0d:
                    71:bc:1f:67:02:98:5f:e4:20:03:7b:ca:9b:54:1c:
                    b5:99:93:d1:15:02:5c:32:8b:0c:f3:bc:aa:ed:97:
                    e1:b4:c2:c6:f6:3a:0e:7c:2a:f9:2a:78:1d:af:f7:
                    e7:95:98:d9:4f:5d:c7:c7:cc:28:57:81:67:cd:63:
                    63:84:7e:90:5d:e9:95:08:1e:b8:c1:ed:ee:66:2c:
                    2e:30:30:92:80:85:05:90:1a:ab:66:47:21:da:bc:
                    07:67:bb:81:a9:0f:82:50:64:6a:02:0f:16:de:30:
                    fc:4b:42:f0:b6:b5:a5:01:25:af:1c:e1:14:5d:fe:
                    01:57:1e:e4:2d:c0:58:39:d8:8d:25:38:1e:9a:63:
                    c7:c2:6a:1b:5c:e5:ae:3c:64:6c:ef:ad:56:93:59:
                    7c:30:c5:fe:4a:ee:35:45:1a:17:a9:de:de:d1:e2:
                    74:15:3c:b5:03:3e:92:7a:82:64:1e:1b:ed:1b:45:
                    8d:b4:fb:03:bc:08:79:3e:e2:98:46:a1:51:73:29:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:08:68:16:23:B6:69:62:8C:6C:7B:D0:70:2B:F9:DE:CB:86:A7
            X509v3 Authority Key Identifier:
                keyid:6B:5E:8B:07:01:E3:5D:66:A9:78:76:D8:05:50:12:A8:96:82:FD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a16LBwHjXWapeHbYBVASqJaC_cM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/02aa3b-e3a8-4c69-82ce-d957264653e2/1/a16LBwHjXWapeHbYBVASqJaC_cM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:63:e8:d1:75:96:2f:4a:30:31:75:47:eb:09:13:cc:f3:4b:
         2a:dc:9e:fe:36:c0:0f:a0:c1:ec:ae:1d:d4:8f:70:c4:56:b1:
         0e:cd:01:2d:7c:c2:07:22:7d:cc:52:55:c2:18:f4:4d:fe:29:
         33:ed:c2:7f:fc:7b:99:50:e4:cd:7e:b0:1f:34:f8:71:a0:83:
         c4:9c:fe:4a:f3:43:02:ca:b9:78:f4:8e:e6:5b:49:39:ff:49:
         0c:e5:b9:dd:a2:fd:66:5c:d3:a1:30:5e:79:43:17:bd:74:99:
         b0:4c:92:d9:41:11:0d:50:c6:56:d7:cb:da:41:8b:3f:8e:99:
         e0:28:ae:4d:90:ca:0a:8f:13:c6:ce:cd:b4:00:da:8f:18:0f:
         aa:c4:84:20:f0:d6:0b:3b:7a:e0:f7:77:9d:b9:b8:f8:a8:00:
         79:7c:3d:f6:70:72:a2:d0:2f:a6:44:71:87:b0:20:c9:d6:3e:
         a5:3d:a0:18:77:b6:bd:f9:3c:d7:4a:5b:80:e2:44:02:76:64:
         31:da:16:76:9f:9f:cc:ca:66:45:09:ac:f3:a1:04:f0:ba:c8:
         e2:fd:87:93:41:6d:92:c3:43:f1:bd:16:11:9c:53:8a:9a:85:
         be:cc:14:3c:51:98:f6:cf:15:46:5f:8e:8a:b6:76:c4:2c:63:
         97:b7:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:20 2025 by rpki-client