Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File:                     exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier:          ATboNEftPRYwZUGfcYpH/IUbNQO4Hbv2/DN3CFyn5Ac=
Subject key identifier:   6F:C4:5E:D7:86:60:AA:3E:E2:2E:C2:3F:C1:5D:76:DB:C4:AE:AE:59
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer:       /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial:       0198D5BB7C0FFF9AEFA32523C71BB2322608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number:          0D2A
Signing time:             Sat 23 Aug 2025 07:01:30 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:30 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:30 +0000
Files and hashes:         1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
                          2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: k+bgAZOsmSCWE/nU5RczrFuJgYHrujt8gsSLGDlacRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7c:0f:ff:9a:ef:a3:25:23:c7:1b:b2:32:26:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
        Validity
            Not Before: Aug 23 07:01:30 2025 GMT
            Not After : Aug 24 07:01:30 2025 GMT
        Subject: CN=6fc45ed78660aa3ee22ec23fc15d76dbc4aeae59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:36:4e:50:d3:cd:85:43:a0:81:96:e8:4e:
                    72:62:7c:b8:d8:7d:22:88:79:03:e6:cd:bb:ed:3d:
                    57:fc:7a:b6:f1:e9:33:57:c2:87:f1:40:17:25:23:
                    e7:2d:8e:b6:b5:56:c6:62:af:aa:89:99:8a:a6:c8:
                    f3:74:9c:01:71:b3:7d:4d:0a:f2:48:10:9a:dc:82:
                    16:2e:90:b2:ec:fe:76:ac:e8:3d:96:00:67:ff:60:
                    4e:80:87:41:81:45:24:97:fe:bf:62:50:66:29:f0:
                    00:39:9b:73:64:8a:b2:16:6d:10:dd:bd:72:6e:0f:
                    03:16:c0:e1:fc:68:e4:1d:65:be:11:9e:56:f1:d5:
                    a8:8d:f1:f2:d8:58:ff:92:e1:3c:85:50:02:a7:c5:
                    92:39:82:02:f4:22:be:bd:e6:b0:60:94:f4:5a:6c:
                    6e:cc:c0:fb:aa:6e:a3:bc:bb:d2:36:a2:13:22:11:
                    46:e8:5a:eb:f4:19:d8:ab:66:d0:eb:7b:37:4f:00:
                    92:f5:fa:eb:a1:9a:df:9a:a4:67:ce:c4:b9:b3:a1:
                    27:00:79:88:2a:a0:d9:0b:83:2b:91:38:05:3a:cb:
                    e6:6d:4a:44:fd:f3:9d:94:43:34:a2:a4:14:74:d7:
                    44:21:07:ff:05:fe:79:d0:07:39:1e:9b:dc:25:9a:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C4:5E:D7:86:60:AA:3E:E2:2E:C2:3F:C1:5D:76:DB:C4:AE:AE:59
            X509v3 Authority Key Identifier:
                keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:e1:ca:9f:56:71:65:ed:06:df:8d:e3:39:47:2b:4b:47:
         d3:61:c1:da:ad:d8:07:d0:35:8c:0e:2e:0b:6b:9a:36:8e:58:
         f8:29:a2:b7:2f:d2:fb:cb:15:6f:eb:5a:3d:d6:dd:b3:04:2f:
         7b:7b:8d:9d:34:8f:52:cf:82:fe:60:34:00:7b:90:e7:b4:c4:
         f7:cc:5d:35:5e:89:91:ec:0b:01:ed:82:3e:0f:e3:4b:72:42:
         35:31:03:5d:02:89:20:0b:aa:75:23:a0:59:f9:32:01:3f:00:
         ff:3f:2e:71:48:82:6d:8c:71:18:30:2b:f0:39:55:b8:6a:a4:
         dc:d5:27:c6:35:54:c4:34:83:00:4c:8c:57:4f:95:30:98:df:
         dc:11:98:7d:c6:f3:b4:80:0b:5e:5a:0e:3d:8f:af:2a:00:94:
         6e:62:27:96:b9:81:1a:83:ac:c8:35:ae:36:12:59:02:43:51:
         1e:7a:d0:d9:f2:e0:0d:51:47:f9:83:87:f1:92:06:00:a9:53:
         26:e1:52:49:67:1e:7a:04:89:bd:4c:c1:36:46:13:c5:45:89:
         48:fe:7f:62:94:02:bd:47:57:c8:2b:85:8e:24:52:6a:71:2e:
         f7:8e:48:d6:a5:43:9a:80:39:18:f9:13:db:22:99:94:8d:12:
         97:91:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:04 2025 by rpki-client