Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          +Kph5aRIg+trgVvAIlb4SmKHSdE4BsnLc1qLeSC78nw=
Subject key identifier:   1E:AE:5D:F3:10:53:11:05:C8:C8:FF:A7:28:46:5C:A6:D5:00:CF:83
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       0198D583A09C1EDDE018393B1A20F8D3E070
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          1098
Signing time:             Sat 23 Aug 2025 06:00:30 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:30 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:30 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: 8NhYxHCn8rZc543dtwWSHcqnR67S+5GFMEhKdS9tejg=)
                          2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
                          3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
                          4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
                          5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
                          6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:a0:9c:1e:dd:e0:18:39:3b:1a:20:f8:d3:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Aug 23 06:00:30 2025 GMT
            Not After : Aug 24 06:00:30 2025 GMT
        Subject: CN=1eae5df310531105c8c8ffa728465ca6d500cf83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:8e:bc:52:65:0d:56:50:72:bd:44:38:c3:
                    28:20:ea:ac:d9:f4:ac:f6:6a:92:c5:c2:1c:ea:db:
                    e6:9a:37:1c:b3:0b:bc:d4:d4:66:7c:a4:49:79:0b:
                    33:5c:1e:d2:61:43:05:3c:c8:2d:ca:db:6e:15:c0:
                    f5:77:79:56:9b:60:5f:94:87:a7:b4:bc:4b:6d:62:
                    24:58:74:0c:40:44:32:54:34:08:61:2f:1e:58:9b:
                    f6:96:38:7f:3b:8f:37:d3:ad:9e:a8:e3:02:d0:cb:
                    ad:62:54:f6:d4:17:3b:ea:5a:3f:eb:8e:78:17:0a:
                    c9:6b:1e:70:01:e5:a8:91:82:94:5a:41:3c:44:e1:
                    54:77:e5:06:20:60:45:f5:60:0c:df:0d:17:44:cd:
                    53:71:d4:48:a0:63:65:f4:b8:0b:3b:51:54:46:03:
                    73:64:bc:27:2c:c5:c6:92:a8:89:0b:e0:79:da:61:
                    eb:0e:c9:29:f5:5d:c9:b3:6e:1e:cd:b0:19:9d:cd:
                    d6:96:0a:7b:36:f5:9f:6a:e1:a4:9e:1c:3f:c7:a0:
                    9c:1f:c1:bf:1b:7d:7f:da:37:36:19:fd:e0:fd:7f:
                    62:c4:bb:4b:71:a3:e0:7d:9e:8f:1c:74:6a:23:b4:
                    28:f9:41:ea:38:f6:c6:41:c9:2c:ae:d5:cd:fe:9f:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:5D:F3:10:53:11:05:C8:C8:FF:A7:28:46:5C:A6:D5:00:CF:83
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:0a:d9:ec:c4:38:6e:9b:1b:3a:c6:58:8e:52:e6:5c:0a:
         fc:eb:c1:ab:0e:9b:e3:a2:bd:fe:9c:c7:68:b0:c5:f2:7d:ec:
         65:b1:78:b4:3b:3f:63:f4:20:17:d0:81:5d:ce:dc:c8:eb:12:
         e9:97:04:cc:fe:19:cf:f6:f2:b3:7d:2b:63:f4:20:db:d4:e0:
         d9:df:22:02:84:40:d0:01:9e:d9:45:17:53:d5:bc:a6:d2:02:
         75:79:da:85:aa:3e:37:7b:c4:4e:98:e8:84:81:b3:93:5a:8e:
         12:c6:6e:41:f7:ec:c7:c8:66:c7:6e:2a:bd:29:a6:0c:6a:5b:
         58:85:18:e5:68:1a:9e:65:be:28:4a:5f:44:15:41:95:6d:74:
         1f:a3:c3:3a:34:a6:38:89:28:91:3b:de:06:a4:84:2c:04:76:
         6b:17:1a:fe:84:e1:aa:7f:d8:1f:ad:e1:16:b0:d3:0f:87:c2:
         a9:ee:43:41:91:e5:0b:7b:40:6c:c2:df:6c:d0:d0:d1:d2:09:
         34:0e:94:f3:ac:2c:df:18:6a:16:29:3f:bc:bb:82:eb:af:2f:
         12:a4:29:17:e6:e9:4a:e7:17:f5:2a:ab:d0:7e:7d:11:07:b6:
         fd:e8:93:6d:25:85:1a:f2:c1:b9:6a:51:4f:ff:eb:eb:ff:46:
         4d:11:6e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:54 2025 by rpki-client