Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
File:                     h6Tl13JcWGiqvqAluDjcwjPG_8k.mft (raw, json)
Hash identifier:          G29LSKqiCRT5ls+q1fYOU4NAl4jui1j7SYG756BaUWo=
Subject key identifier:   61:C5:8E:07:E3:12:DD:EA:B3:7A:BE:B7:FC:26:47:B4:22:05:24:2B
Authority key identifier: 87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9
Certificate issuer:       /CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
Certificate serial:       0197CB7124C616ACE2021A8A5E397BA6EE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
Manifest number:          12F6
Signing time:             Wed 02 Jul 2025 14:01:19 +0000
Manifest this update:     Wed 02 Jul 2025 14:01:19 +0000
Manifest next update:     Thu 03 Jul 2025 14:01:19 +0000
Files and hashes:         1: 326zxIS7flVicYpYeyjZhIJPEQc.roa (hash: 7OXoJx4K7+k1nQ/ABjRnbXIbMj5YXCBVmfp1DpVjQws=)
                          2: h6Tl13JcWGiqvqAluDjcwjPG_8k.crl (hash: lsKIyosXtHB69JCZdclOzSzm9hxFYBQavqzy9jK6saA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cb:71:24:c6:16:ac:e2:02:1a:8a:5e:39:7b:a6:ee:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a4e5d7725c5868aabea025b838dcc233c6ffc9
        Validity
            Not Before: Jul  2 14:01:19 2025 GMT
            Not After : Jul  3 14:01:19 2025 GMT
        Subject: CN=61c58e07e312ddeab37abeb7fc2647b42205242b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:23:e3:6f:7f:40:48:35:be:77:d4:93:bd:
                    83:73:ec:2b:08:4e:df:a1:c1:6d:be:50:0a:9e:8e:
                    3c:ea:0d:d3:9d:2a:c5:40:9a:66:4d:21:9f:b1:22:
                    b2:80:95:9e:4e:82:5f:e3:9b:db:0b:cc:6b:d2:25:
                    99:59:45:e5:d6:53:d2:e9:3a:74:36:b0:f1:fe:99:
                    f7:bf:66:db:5c:88:98:36:f7:b5:33:d8:de:0b:87:
                    bc:85:f4:5f:69:de:da:11:6c:01:1e:11:54:31:02:
                    36:8f:1f:8b:2f:16:5e:69:c4:cc:33:d7:b9:11:18:
                    81:7b:ba:23:4a:8f:a5:45:37:b6:ed:a1:1f:bd:87:
                    a7:9c:50:77:14:98:1a:fd:13:d7:27:83:06:f6:21:
                    df:f1:03:9c:6f:a6:a9:99:13:fd:24:25:fa:aa:61:
                    a2:29:67:cb:1f:96:9b:a4:d3:74:e6:f2:68:85:b8:
                    bb:f9:fe:ce:31:ab:76:5f:af:66:b3:0b:28:f4:17:
                    4a:9b:75:68:02:07:f8:b6:f4:fd:eb:db:ba:7a:93:
                    1b:df:56:b6:40:db:96:45:0e:8c:ce:c5:f2:9f:23:
                    04:ae:cc:e6:8d:de:84:5e:d6:0a:4e:1c:4e:6c:5d:
                    d8:94:62:08:c5:b6:13:d6:05:8f:f5:88:2c:6f:a0:
                    84:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C5:8E:07:E3:12:DD:EA:B3:7A:BE:B7:FC:26:47:B4:22:05:24:2B
            X509v3 Authority Key Identifier:
                keyid:87:A4:E5:D7:72:5C:58:68:AA:BE:A0:25:B8:38:DC:C2:33:C6:FF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h6Tl13JcWGiqvqAluDjcwjPG_8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/6555c3-0546-4eef-8648-506a21595cb8/1/h6Tl13JcWGiqvqAluDjcwjPG_8k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:75:2f:ec:f4:d6:77:65:14:da:be:9b:15:d1:f2:38:91:
         ed:b0:e2:aa:ad:3e:83:da:9b:c7:9f:d9:66:35:99:0f:bc:1e:
         6b:1e:a0:d9:e4:6c:50:b3:50:6b:b7:37:ac:d2:81:73:90:12:
         3b:ba:39:2d:eb:42:1f:c0:e5:7f:74:1e:fc:cf:1f:3f:83:a3:
         79:c0:d7:3b:04:b9:dc:8b:42:25:1d:a1:05:59:c1:a2:18:ff:
         2f:94:b9:bb:bd:5e:bf:fa:d9:09:20:33:f4:1b:6e:d3:44:79:
         03:e3:44:3d:65:86:95:5f:4f:5b:4b:ac:79:2f:d8:a0:7d:79:
         fb:77:64:88:9f:cf:43:0b:7f:e9:d0:ca:fb:33:4e:0d:8a:68:
         a6:73:39:a9:40:df:5d:08:2b:9c:2d:19:3b:85:62:bf:55:a5:
         0a:65:6f:77:1c:d0:35:50:0d:05:c5:8c:10:2e:69:38:4c:e8:
         d6:1c:d3:c1:17:14:a7:63:b2:1b:63:e0:91:82:70:ab:a5:ec:
         51:02:04:1d:db:93:3b:8f:3f:c2:d3:a4:bb:ba:3e:18:34:65:
         b2:12:b0:9d:a3:be:d6:12:5b:74:8a:a1:f7:46:90:eb:cf:6b:
         11:55:66:2c:bd:18:f5:e6:c1:32:d7:ec:2d:7a:6d:3f:3f:61:
         2a:bc:44:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:24:02 2025 by rpki-client