Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File:                     tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier:          Cv6AuEa0/KEJ8Pc37Rjr1mIumFHOVxnRmlbnteYLQQo=
Subject key identifier:   F7:7A:12:82:3F:77:CF:69:68:15:F4:D8:19:EF:CF:93:8D:B6:98:39
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer:       /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial:       0198D5BC5E71F42398E570FEDD872DC93223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number:          06C5
Signing time:             Sat 23 Aug 2025 07:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:28 +0000
Files and hashes:         1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
                          2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: dlCblkUb2bL/mcaS4swYwHnB7cLUFu1g3YuPoz277/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:5e:71:f4:23:98:e5:70:fe:dd:87:2d:c9:32:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
        Validity
            Not Before: Aug 23 07:02:28 2025 GMT
            Not After : Aug 24 07:02:28 2025 GMT
        Subject: CN=f77a12823f77cf696815f4d819efcf938db69839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:15:00:3e:18:4e:ae:34:37:34:0b:c0:03:5d:
                    3b:54:51:f0:7d:f7:9d:0f:27:0b:55:c4:b3:0a:ce:
                    58:dd:ca:ba:1d:6d:85:0f:f2:c1:8a:c2:11:d8:f5:
                    48:7b:b3:f7:22:23:7c:6d:e6:0d:3d:a5:13:37:f6:
                    d1:83:f4:3d:2f:71:cd:bb:f6:c4:59:25:83:77:66:
                    4f:07:b4:2a:15:c6:9a:de:7e:1e:8b:54:a8:aa:41:
                    be:b2:d4:e6:41:9c:db:d4:12:bc:d9:d6:03:f1:45:
                    9e:cd:92:91:e6:70:1b:ee:55:91:8f:3e:23:5c:65:
                    76:bd:6f:51:2a:4c:5c:4d:18:f8:3f:5d:85:78:78:
                    22:f9:b2:ca:e1:78:1b:59:97:4b:ee:6b:9d:7d:1b:
                    e4:ba:21:3d:36:3f:20:77:a6:10:1e:7f:24:71:4a:
                    90:6b:14:f6:97:1e:33:94:c1:3a:98:60:45:aa:29:
                    fd:89:b5:10:53:60:7d:98:3d:99:0a:e2:3f:af:87:
                    46:ff:c0:78:ab:a7:f1:e7:18:c0:67:b3:e0:6e:1e:
                    1f:21:76:ac:e7:9c:bd:82:2b:c4:17:98:9d:27:f9:
                    b3:07:97:64:e3:cd:3c:cd:3c:16:ff:e5:d7:eb:e1:
                    e0:11:0d:33:95:4b:29:aa:30:3c:bd:29:5d:fe:2b:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7A:12:82:3F:77:CF:69:68:15:F4:D8:19:EF:CF:93:8D:B6:98:39
            X509v3 Authority Key Identifier:
                keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:81:0c:0f:9d:e5:54:6d:44:0d:84:d7:d2:dd:23:5c:e4:
         d5:11:e9:c3:8b:46:d4:99:9f:44:22:9e:2b:12:ef:3c:a5:87:
         fa:f8:ed:c0:5b:9e:2a:13:16:1e:33:7f:77:f0:eb:90:81:84:
         60:cd:f3:f2:52:5f:0b:73:63:6d:bf:cf:63:84:a4:41:7c:a1:
         16:6e:36:30:85:dc:65:45:81:45:75:54:b9:b7:78:d5:1c:c9:
         2f:08:51:44:35:6f:a4:04:cd:51:2d:76:83:a9:69:55:7e:5c:
         ba:ba:41:b1:57:ea:26:5a:47:1d:b6:7b:db:16:94:24:6e:06:
         32:48:19:34:38:ad:17:be:05:03:bd:df:4c:86:da:54:2b:e5:
         60:f7:f8:a1:44:5d:4d:40:fc:ff:68:2d:33:be:fa:75:81:3d:
         68:d3:6f:3c:67:50:9f:f2:c9:45:e0:cb:9f:6b:9c:83:e9:f3:
         0d:47:c4:80:17:4c:cd:d6:43:75:39:b9:57:9c:29:5a:1c:0b:
         19:f8:cc:41:26:a7:59:17:6f:e9:2c:4e:a0:97:f0:e4:69:06:
         78:34:90:88:25:cc:58:7e:d9:bd:5c:cc:cb:c8:c9:9d:ba:4b:
         c0:ca:31:96:03:df:5c:1f:fa:fc:03:05:d2:11:12:b2:0f:51:
         80:fc:a1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:40 2025 by rpki-client