Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
File:                     cG_6qbf85AgnGBpaoKzumaRmkVY.mft (raw, json)
Hash identifier:          VL3ewMRDAffz6rgstIe9DJLEeDuGggJkKiGqG9Bm0R8=
Subject key identifier:   08:2F:A8:14:B6:F7:91:91:0E:53:66:B7:2E:BB:F6:B7:B8:75:B2:BC
Authority key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Certificate issuer:       /CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Certificate serial:       0198D4DFCA406A981C6E376FD855CD9FF8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
Manifest number:          0B8D
Signing time:             Sat 23 Aug 2025 03:01:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:32 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:32 +0000
Files and hashes:         1: cG_6qbf85AgnGBpaoKzumaRmkVY.crl (hash: LHP1A4ewCpdWEqD8nsO99nDycIBFTIM/oM80wQxbgGw=)
                          2: wHLema0UGStCVJFXioCOp9yM9Yk.roa (hash: 9o2chTlhKcvV8PSsEOhRoW59X68c/vtOe1+mp0bUcck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:df:ca:40:6a:98:1c:6e:37:6f:d8:55:cd:9f:f8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
        Validity
            Not Before: Aug 23 03:01:32 2025 GMT
            Not After : Aug 24 03:01:32 2025 GMT
        Subject: CN=082fa814b6f791910e5366b72ebbf6b7b875b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:07:20:19:a3:2f:bf:a3:35:16:5c:d7:28:f3:
                    18:7e:60:76:f0:54:10:2d:ac:d5:05:a7:1a:f1:41:
                    63:b0:46:5d:5e:4f:bb:c3:23:d3:58:19:1d:25:1c:
                    68:df:9c:a8:3b:b8:48:37:2e:c8:f7:38:12:ce:91:
                    9d:26:2b:0d:b4:dc:99:62:4e:fd:df:14:df:b7:4a:
                    c4:cd:bb:98:5a:17:3c:26:6f:52:f9:5f:5c:35:2f:
                    5e:a9:ad:83:ab:56:5b:37:f2:1a:48:54:8e:e1:94:
                    7d:16:f2:74:b8:10:d0:89:25:9e:0d:bb:09:31:85:
                    1a:3b:f9:f4:2d:e1:2f:0e:c9:7d:dc:9b:14:c9:24:
                    66:15:c1:09:67:d7:bb:0b:53:2f:82:b9:bc:2a:fa:
                    f7:ec:f9:98:5a:83:90:63:33:7d:84:5b:d4:1a:9e:
                    0b:5f:54:d7:5f:bc:b1:30:02:cb:56:84:4b:48:07:
                    ce:04:64:40:d1:8b:6e:53:bd:15:70:70:c8:e7:55:
                    36:36:97:13:3c:18:3d:7a:dc:9a:e6:50:62:40:c8:
                    02:f3:4c:97:0c:84:05:42:f9:99:9c:e2:a5:27:21:
                    e8:48:ce:7b:61:d4:f4:9d:54:7d:57:91:23:6c:df:
                    07:b2:d4:16:5e:76:42:05:ca:fd:4f:eb:17:31:f8:
                    76:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:A8:14:B6:F7:91:91:0E:53:66:B7:2E:BB:F6:B7:B8:75:B2:BC
            X509v3 Authority Key Identifier:
                keyid:70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:23:1c:4f:15:01:6c:99:52:35:f0:f7:17:52:2b:cd:9d:d5:
         6a:d4:f7:f0:e8:0d:21:d2:ac:dd:3e:45:6b:34:37:ca:97:c6:
         3b:09:b9:ba:36:51:5f:0f:36:01:87:63:cb:41:86:70:13:0e:
         4b:ac:5e:a3:7c:c3:21:a3:99:96:eb:22:a3:dd:ec:91:50:9d:
         f7:2d:f2:39:38:cc:a2:e6:8c:f7:ed:da:06:4c:ae:64:13:45:
         77:5c:8b:37:ce:3b:16:72:99:6f:d6:e7:1a:22:c1:86:f1:53:
         06:c1:79:cb:bc:38:0e:24:f4:0b:f1:f9:75:2d:aa:a8:44:aa:
         65:83:47:7d:d6:1a:a1:c9:65:a9:3a:f2:3f:3d:6d:18:3e:4b:
         74:e9:1e:56:74:45:ce:c1:2c:92:85:39:eb:8a:36:f9:df:7b:
         90:db:1e:ee:85:a8:b9:44:57:ab:53:c5:91:d4:c8:69:03:f1:
         8a:4b:0f:7a:fe:89:66:ed:30:0f:a9:c6:3e:6f:20:99:e4:55:
         95:69:77:fc:0b:7e:87:18:75:bf:4a:26:85:3d:ad:fb:ee:4d:
         59:e6:31:d6:fe:af:0e:4a:e9:1b:4e:3e:59:b6:bb:d9:10:9b:
         ef:28:4e:d8:97:57:20:55:d7:8f:e8:1c:da:18:e2:16:69:f6:
         c4:4b:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:54:46 2025 by rpki-client