Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File:                     7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier:          t4sjaoAq2P7ZEn6RrWGF2tMdrM1R5xuTIQHHs+imTac=
Subject key identifier:   AF:F0:E9:0E:99:82:3F:45:1D:A4:C7:8F:8A:04:0D:B9:E0:AB:16:59
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer:       /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial:       0198D660F869D83354F3B18DB0CAE7949FB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number:          118E
Signing time:             Sat 23 Aug 2025 10:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:15 +0000
Files and hashes:         1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: X6Kj5yUqaWl0+/3PFFCM1JQZwA3nSNpQTgIVTb2InBo=)
                          2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:f8:69:d8:33:54:f3:b1:8d:b0:ca:e7:94:9f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
        Validity
            Not Before: Aug 23 10:02:15 2025 GMT
            Not After : Aug 24 10:02:15 2025 GMT
        Subject: CN=aff0e90e99823f451da4c78f8a040db9e0ab1659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:89:90:f7:10:b7:da:eb:36:22:97:4a:eb:
                    7a:c9:41:d6:11:7f:39:48:82:f1:7f:9b:9c:96:a5:
                    86:12:39:af:bb:d5:38:52:65:28:a8:1d:09:f0:b4:
                    85:7b:58:24:1d:33:5d:48:5e:de:74:cf:0b:bf:15:
                    da:4e:9a:44:d9:a2:be:9e:51:ed:95:f3:3d:f9:2a:
                    2f:a0:a5:ac:e2:85:6a:ab:e4:ff:60:56:7e:bb:6b:
                    b5:83:d8:db:0b:a0:d7:22:73:1c:c7:14:38:c1:91:
                    72:db:a3:62:20:18:d2:c6:0d:bf:15:40:19:cc:d1:
                    f7:44:8a:da:ce:ec:96:e1:0d:27:91:c8:92:a4:e5:
                    f8:40:48:d8:fa:c1:63:fe:77:d9:f5:e3:28:94:3b:
                    61:dc:d7:39:5a:5f:2f:be:53:c8:c7:65:cf:bc:3e:
                    77:67:21:0e:ce:a4:45:e0:68:bf:3d:6d:73:c8:b1:
                    06:4f:28:b0:7c:e0:8c:f7:f9:80:2e:a0:d7:e6:ab:
                    a7:4f:3d:fe:9b:94:a4:56:66:d6:a6:80:38:1e:b1:
                    79:86:1d:2b:86:46:9f:9b:e8:a4:a2:dd:93:53:88:
                    e7:4a:57:a8:1e:94:55:cd:7e:1a:9d:8b:d2:1f:3e:
                    a5:f6:bf:63:17:62:45:bb:d0:d6:dc:9e:a7:fd:79:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F0:E9:0E:99:82:3F:45:1D:A4:C7:8F:8A:04:0D:B9:E0:AB:16:59
            X509v3 Authority Key Identifier:
                keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5e:1c:09:76:fb:c6:11:c9:13:d6:c2:89:44:bb:07:1d:78:
         f4:39:9a:20:43:9d:58:05:a5:c8:9f:8e:e7:8f:29:f5:8c:41:
         80:0b:d9:de:52:9b:a3:27:79:1b:59:1a:8b:e8:c9:c1:96:36:
         d4:0a:43:07:1f:46:09:89:37:37:db:52:76:cb:3f:e0:a1:3d:
         66:2a:61:5e:a5:07:98:2a:7d:65:a7:7f:6f:eb:89:11:8b:64:
         23:e4:62:c1:5e:8e:c0:81:17:9e:4d:d9:5f:b8:1c:3c:23:b7:
         2c:a2:7b:2a:75:d7:28:a5:9b:67:a8:ae:86:d1:85:af:fb:00:
         73:bf:7f:05:d0:89:43:2d:00:ad:4e:85:5f:22:b3:35:1b:fe:
         ff:b9:88:22:cd:c6:fd:89:5e:84:16:b2:41:87:38:53:74:51:
         69:31:80:de:55:4b:d4:0b:cd:2a:20:38:86:14:c7:3c:05:34:
         e9:99:e0:81:0a:77:2b:40:6f:4d:86:81:42:b2:41:d7:d8:ed:
         3b:da:5c:f5:72:e8:1a:61:7b:79:4e:90:0a:19:d7:15:e8:28:
         24:2d:e6:4a:a4:2a:f6:69:14:40:51:98:c5:f9:81:f2:b8:67:
         8b:7e:2f:95:7e:78:fa:1c:75:46:e8:a0:fb:d6:65:f2:66:8d:
         86:1c:c7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:27 2025 by rpki-client