Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
File:                     6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft (raw, json)
Hash identifier:          dOWDHFse/r2a/gyPMiAh10vCeMmgwaAp0FFOKVYuC+0=
Subject key identifier:   8D:74:8A:5A:C0:EB:AF:A4:3E:1E:24:96:82:08:FD:A6:97:E3:FA:17
Authority key identifier: E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83
Certificate issuer:       /CN=e9938a1e9011f2269e67a63da380019d296d9983
Certificate serial:       0197B7EA82C36242F862DEE6A09EB1D899E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
Manifest number:          0B2A
Signing time:             Sat 28 Jun 2025 19:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:28 +0000
Files and hashes:         1: 6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl (hash: Snp9BfWEOZgZPWg3S/IYu6PFIRCXtxmm70ut9iKVI2o=)
                          2: nZ86ecfoxVaYdUOOxkglMxbKvX0.roa (hash: fT87ThsPBrWvOzVvu1MJiqKVPeHA17ObJUBDMM+0zB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:82:c3:62:42:f8:62:de:e6:a0:9e:b1:d8:99:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9938a1e9011f2269e67a63da380019d296d9983
        Validity
            Not Before: Jun 28 19:01:28 2025 GMT
            Not After : Jun 29 19:01:28 2025 GMT
        Subject: CN=8d748a5ac0ebafa43e1e24968208fda697e3fa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:ee:cb:bf:d2:06:40:bc:58:e2:aa:99:51:
                    8e:46:8e:0b:ea:71:c9:37:78:32:cc:23:86:2e:6b:
                    18:09:91:f0:a9:dc:65:91:e6:59:6e:7c:3b:4e:35:
                    7a:85:45:4e:50:c9:44:20:74:56:0c:d2:66:3b:91:
                    68:6b:c4:b1:ed:a6:a1:87:aa:e1:94:af:71:68:a9:
                    bb:1d:27:09:f9:e5:87:31:f6:20:89:71:1f:6d:e3:
                    b4:df:41:1c:7c:47:f4:c9:be:09:0f:17:ed:92:8b:
                    3f:c2:ca:1b:c8:e5:56:2b:00:d6:2e:25:e0:54:a8:
                    41:e1:6f:1b:f5:64:31:b4:8a:f0:1b:e1:d3:2c:d6:
                    00:52:67:07:ad:3d:24:7e:61:4f:70:f5:30:e2:15:
                    64:ef:c4:1f:32:7a:28:9d:d9:0c:01:d6:8c:4f:e7:
                    aa:3f:e5:ea:87:15:56:15:a0:58:bd:8a:67:7f:1f:
                    10:51:ef:9a:11:81:cc:56:63:a4:f5:19:47:02:1b:
                    19:d5:8d:a3:95:95:ee:18:05:42:d3:08:0f:6b:4c:
                    cb:9e:b5:4b:42:2f:07:df:11:35:b1:ef:9a:60:d3:
                    96:19:4d:83:09:d8:7f:ab:c6:49:fc:46:42:cd:1b:
                    1d:22:5b:18:83:e0:8b:62:ec:9c:23:70:41:22:9f:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:74:8A:5A:C0:EB:AF:A4:3E:1E:24:96:82:08:FD:A6:97:E3:FA:17
            X509v3 Authority Key Identifier:
                keyid:E9:93:8A:1E:90:11:F2:26:9E:67:A6:3D:A3:80:01:9D:29:6D:99:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b6002c-ef1f-48bb-8f50-5f10b42ec8cb/1/6ZOKHpAR8iaeZ6Y9o4ABnSltmYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:e8:f5:b0:8f:0e:be:41:e6:e9:d0:ef:f6:e3:f0:50:33:
         39:49:4f:3f:fd:ac:f3:a6:f8:07:53:52:c9:4f:c0:d8:57:d4:
         a3:19:08:19:8d:a9:84:2c:6e:2d:6b:e2:ec:ac:b0:3e:55:a6:
         87:67:20:69:e5:f2:0e:cf:af:0b:1f:26:4d:6d:a9:d2:4d:75:
         1e:5a:bb:e1:7c:49:9e:8b:6b:44:ed:3f:d0:ca:2d:06:a1:56:
         8c:16:e3:99:d3:a6:29:fb:03:a8:23:59:30:59:7e:f8:41:4b:
         a8:9c:71:a2:65:99:2a:4a:8b:ad:75:3f:c4:12:68:f8:96:0d:
         d9:74:6f:2d:5b:73:5a:06:3b:a9:84:7d:9a:55:0e:2d:70:49:
         86:77:b6:46:9a:bc:32:1d:6b:3e:33:da:4f:e6:0b:c7:fe:0f:
         5d:d9:21:88:ef:2f:ca:68:95:96:2c:d4:35:6b:1a:01:31:c6:
         f9:b3:1f:5a:e2:cb:3b:da:fe:b4:a0:4f:a1:67:f4:0b:bf:2d:
         2b:11:ce:48:6c:3b:41:3f:75:c5:66:9a:11:e7:f8:c7:a7:4d:
         fa:ba:9d:32:7c:87:1b:b5:4a:c4:b3:67:00:c8:2c:0b:61:5f:
         f3:87:b3:b2:d4:b1:78:2a:83:25:89:d1:0e:17:cc:c8:12:aa:
         8a:d5:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:01 2025 by rpki-client