Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          D2v6rcWEG+PrLJv96xxoDbplP0kPxAMRFnhMwYFT0iA=
Subject key identifier:   4B:DB:F6:47:E1:39:29:54:94:23:E9:FE:71:21:C5:A6:7D:67:3E:C1
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       0198D4E0772FE46686A02C7D21029829141A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          0601
Signing time:             Sat 23 Aug 2025 03:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:17 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: uLcd9WXaMx1qoleQ2mQlkKcoVjccpAGTNn/EDzChi5Y=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:77:2f:e4:66:86:a0:2c:7d:21:02:98:29:14:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Aug 23 03:02:17 2025 GMT
            Not After : Aug 24 03:02:17 2025 GMT
        Subject: CN=4bdbf647e13929549423e9fe7121c5a67d673ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:a1:6d:29:34:75:3a:60:2c:a0:a3:8b:ac:
                    44:73:41:52:01:94:5f:99:75:f5:cf:38:3b:06:19:
                    6a:85:1e:28:ff:6c:a9:63:d2:fd:91:d7:bc:1a:66:
                    65:59:28:a7:56:b9:11:68:a3:e8:41:ad:ce:9c:48:
                    4d:25:90:1d:34:9c:3a:7b:30:1a:5a:94:11:f0:a7:
                    e9:61:8b:24:1d:c4:0d:57:8f:fb:bd:2e:e0:2d:10:
                    76:c3:05:60:1f:5c:be:be:7e:aa:aa:cf:c3:da:28:
                    bf:11:4f:69:c9:f9:ce:97:19:70:b6:30:2e:18:77:
                    3e:fa:4a:c7:4c:19:2c:8c:85:79:7d:bb:3e:03:ad:
                    b4:de:2f:65:fc:26:e9:f5:fc:e8:7d:bd:76:b6:65:
                    e9:ec:cd:6d:bb:a3:c0:d3:0d:f6:99:6d:7c:a1:17:
                    a8:10:dc:07:81:15:ae:e2:e6:46:4e:89:86:f7:bc:
                    a9:c8:9d:8a:3b:a0:c1:6a:16:18:ca:42:cb:39:a8:
                    d7:27:bc:f8:6a:8c:e9:77:31:63:21:f4:fd:f1:33:
                    cb:eb:bd:73:78:28:9e:2a:b7:43:8b:aa:a4:a4:07:
                    80:bb:18:28:e6:88:be:21:80:36:d2:53:6a:72:81:
                    de:1f:68:2e:58:c6:fa:08:29:f9:27:af:f1:2c:31:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DB:F6:47:E1:39:29:54:94:23:E9:FE:71:21:C5:A6:7D:67:3E:C1
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:ff:cd:94:96:1f:97:35:7a:26:9b:d8:98:14:aa:69:d9:
         a7:1d:01:4c:57:be:b7:ec:37:e9:20:52:9f:58:13:de:3b:70:
         4a:ae:d1:f5:9a:39:2e:6a:77:f5:1d:09:58:7d:d5:4c:fc:48:
         ba:fe:9a:7c:eb:62:9f:28:fe:0e:58:4f:33:a5:4b:90:88:a9:
         c8:d8:b2:86:64:6f:f9:92:12:74:f3:06:cb:91:5b:54:ff:e1:
         f2:9c:92:aa:4c:1f:bf:b4:bb:a6:11:48:7e:ba:be:45:ff:cf:
         e2:a0:8d:e0:f6:f5:71:d9:d7:11:16:31:ac:fd:b0:fa:53:38:
         ee:b4:61:b6:c8:8b:6d:7d:f4:77:36:10:25:9e:ed:3b:c9:26:
         14:fa:b7:ee:34:af:da:f1:82:5f:c2:d8:f4:dd:f5:4a:d5:16:
         76:c3:62:2f:7b:d2:66:80:ca:26:bc:58:d5:d8:1b:15:67:50:
         83:16:e7:a6:e6:70:db:66:01:18:6a:ae:85:18:3d:8c:3e:14:
         06:92:7b:21:10:a9:37:cd:d5:c4:ce:59:e8:bd:78:a0:e4:19:
         cc:fc:2c:83:85:4a:c1:35:44:ee:a9:7b:98:39:5c:e5:fa:30:
         22:0e:2a:f5:f1:20:fd:17:f0:80:c8:5d:5f:3f:51:38:be:57:
         1c:65:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:23 2025 by rpki-client