Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          vSmHlpQR47ULNL8Z9ffUCNnzdSpv4BLKOPhVjPWF8PA=
Subject key identifier:   B8:A7:8A:8C:13:03:80:52:1E:36:27:5E:87:31:18:DB:F9:AB:B9:4F
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       0198D65FFF7ADF36A4403D31DF6076968292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          0ECB
Signing time:             Sat 23 Aug 2025 10:01:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:12 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: irEnWhnz+oNFJWKHRQOpbogn5WfxBvZnCGfAB5iGUaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:ff:7a:df:36:a4:40:3d:31:df:60:76:96:82:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Aug 23 10:01:12 2025 GMT
            Not After : Aug 24 10:01:12 2025 GMT
        Subject: CN=b8a78a8c130380521e36275e873118dbf9abb94f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7f:1b:3e:ef:71:f3:a6:20:ff:45:ec:09:21:
                    18:d0:57:04:18:ff:8e:63:b2:d4:4e:6f:0e:bc:ec:
                    d5:c7:bd:47:e8:ed:2a:88:7e:e5:2f:b4:25:84:72:
                    1d:44:a7:79:35:3c:2c:57:9c:6e:79:ab:e9:dd:89:
                    81:47:d3:1e:f4:57:a9:d1:ab:2c:00:27:fe:db:96:
                    80:9f:ef:c3:47:b8:dd:87:69:0c:17:be:13:f9:6c:
                    1a:06:5f:70:7f:b1:d6:49:e6:58:b0:e9:df:66:1a:
                    b6:60:56:ed:db:27:5a:52:4c:2b:2f:ac:e0:dc:a0:
                    c3:94:29:aa:cc:ba:5c:59:ee:67:02:50:ad:57:8e:
                    45:7c:4d:7a:52:c1:f5:e5:ed:eb:76:5c:6e:f9:be:
                    94:79:30:33:ac:0f:d7:cc:e5:16:79:0f:b6:97:cc:
                    3d:ce:95:44:32:c2:10:e9:09:8a:65:c7:71:46:87:
                    9c:4d:a6:fc:d7:7f:42:b7:7b:2c:23:34:8c:ac:a8:
                    51:6c:73:73:7d:e0:f8:08:ed:cc:c9:a4:45:7a:1e:
                    1c:33:62:84:a7:66:c8:55:5c:18:c6:32:1d:fe:01:
                    b8:92:43:6c:55:02:fc:9d:8b:dc:bf:d9:1f:54:d9:
                    40:49:2b:7a:d5:94:de:01:19:52:93:03:ce:5f:c6:
                    b0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:8A:8C:13:03:80:52:1E:36:27:5E:87:31:18:DB:F9:AB:B9:4F
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:47:73:e6:20:6a:37:15:93:05:43:44:5a:63:84:55:e9:40:
         0e:0d:56:61:47:11:86:3f:ce:e0:7b:81:80:eb:2d:aa:4f:89:
         6f:46:21:6a:f1:40:31:8b:14:fa:7f:2a:68:85:e0:58:7c:05:
         e5:bb:70:e3:3c:31:cc:16:2d:6e:7e:ba:77:89:fa:2d:c0:6c:
         d1:93:89:88:06:12:c6:f7:43:ba:d2:0d:a4:98:36:81:97:f5:
         0f:6e:36:e6:d4:6f:73:73:c1:57:eb:73:28:f2:e8:e6:9e:bf:
         24:12:e4:27:37:02:aa:d3:43:b4:c3:ca:b4:de:e8:da:ba:ba:
         3d:53:5b:1d:5a:d0:66:5c:00:af:a7:19:32:76:f3:a9:bb:a6:
         dd:9a:81:80:56:a9:87:36:67:bf:e5:30:b7:c2:2e:9c:15:bd:
         7b:1c:94:63:68:d5:cb:b3:0e:ea:e9:59:a2:5b:23:b3:ee:12:
         d3:3c:28:0a:de:9a:00:86:60:28:21:b2:5e:a5:63:5f:11:d3:
         c9:2d:96:b5:2a:00:b0:f1:d4:ee:dc:fb:6d:48:e6:8e:44:46:
         f7:ae:32:f6:17:d3:f0:ef:91:e2:4c:78:bc:d8:69:d8:38:37:
         a8:a1:fa:9d:d7:4e:dd:cf:2a:06:36:84:51:98:3d:e5:05:15:
         0d:f3:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:35:45 2025 by rpki-client