Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          ec6Q+vhvDQoNYCvvRBPRzVR2r6u+iox6+7Pvf3nBxZ8=
Subject key identifier:   10:EC:97:D4:34:CF:EE:D4:D9:7B:B2:36:68:E3:C0:6C:DC:F6:19:F2
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       0197CB39BA59931C50A59D8906362A01C246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          13C3
Signing time:             Wed 02 Jul 2025 13:00:47 +0000
Manifest this update:     Wed 02 Jul 2025 13:00:47 +0000
Manifest next update:     Thu 03 Jul 2025 13:00:47 +0000
Files and hashes:         1: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (hash: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=)
                          2: gwXTY0LJ22_8yhfOOeJP7JMePkA.roa (hash: C8Ad/tS32eCjtx+fJLVbrf6IcLPHhfeHNWH2HlHojI4=)
                          3: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: QKI4Lcc1i0de2BmVYwIMlpURthSpY4US0u+/57QD1WE=)
                          4: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:39:ba:59:93:1c:50:a5:9d:89:06:36:2a:01:c2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: Jul  2 13:00:47 2025 GMT
            Not After : Jul  3 13:00:47 2025 GMT
        Subject: CN=10ec97d434cfeed4d97bb23668e3c06cdcf619f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:89:c9:61:36:cd:1e:80:af:84:aa:ee:93:
                    4f:2a:4f:e9:8f:e2:45:1f:34:bd:aa:39:1c:e1:e8:
                    00:92:23:cc:88:aa:ac:76:75:0b:92:0d:81:7a:01:
                    54:c2:1f:b8:2c:b2:6f:80:a2:ea:b2:3c:18:fd:2e:
                    89:19:98:e4:1a:3e:83:6d:c9:3f:fb:4c:72:be:a7:
                    b1:48:64:05:07:7d:62:fe:c0:f9:c9:fc:15:61:57:
                    f0:35:d5:f6:9f:51:ee:d7:23:45:68:af:34:1c:ea:
                    ec:ff:ba:bb:f2:cb:e4:b5:b5:58:bc:e0:f3:33:af:
                    f2:62:83:70:67:ff:0e:8b:85:e0:98:6a:60:94:ff:
                    da:c5:06:8f:c1:93:52:e7:f7:4a:36:ae:61:34:b2:
                    4c:f4:17:ba:ab:7a:c1:b7:60:75:6b:d7:ed:c7:5e:
                    f9:99:8d:92:61:21:06:42:e6:45:b0:f6:a9:ee:24:
                    2e:da:26:c1:0a:95:06:ee:b7:9f:d1:0f:5e:58:64:
                    56:d1:db:8c:fd:0e:e4:df:86:44:b7:45:ca:18:63:
                    ad:0c:73:2b:3b:42:38:c9:38:71:ce:58:7e:49:32:
                    30:ba:0f:ee:cd:18:2f:f1:0c:b2:ad:f7:a2:05:07:
                    7b:3a:1f:31:40:81:03:05:55:5b:01:e7:94:ab:25:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EC:97:D4:34:CF:EE:D4:D9:7B:B2:36:68:E3:C0:6C:DC:F6:19:F2
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e1:00:e7:cc:1f:be:02:5e:9e:07:03:94:d3:3b:c9:d5:59:
         d2:6f:f7:69:4c:dd:5a:ce:39:c4:e5:37:75:d0:4c:69:aa:65:
         18:e3:45:ba:3e:5b:56:ea:f5:46:18:59:ee:82:54:e1:69:bb:
         74:99:d3:63:e2:e3:68:32:30:a7:ed:7b:22:88:bb:1b:f3:63:
         4b:fa:ee:bf:3b:1f:9b:c7:24:a7:33:5b:02:ad:be:64:82:11:
         04:a2:c7:87:39:da:66:29:06:84:f1:26:50:ad:81:bd:39:1a:
         03:4e:0d:78:5e:f5:8a:b6:8a:55:4f:c9:0f:85:17:2b:f6:72:
         26:86:90:3b:07:05:ec:59:fa:b4:2c:91:c6:05:6d:9a:43:fe:
         6d:d4:c2:3b:3d:4f:b0:a3:b5:52:b6:6e:f3:1f:5c:9d:c9:53:
         de:f0:23:26:66:c5:67:7f:06:24:24:a6:8c:c3:dc:58:6d:60:
         66:8f:88:4c:68:0b:8a:60:d0:26:b3:b4:48:82:bd:d6:b4:e6:
         12:69:79:ba:3f:3c:86:9a:46:f1:68:8f:61:77:75:ac:58:e1:
         41:1c:e3:7b:95:ae:66:9f:c0:b6:8b:a8:78:3b:85:e5:01:15:
         72:dc:05:fb:b7:93:a9:9e:05:14:35:e0:63:d0:c8:c2:ed:00:
         8f:6d:cd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 16:00:38 2025 by rpki-client