Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
File:                     6B4yXNISZiXGbUadtk5O-aqw3GM.mft (raw, json)
Hash identifier:          icOVeU3gr5NdOgr4clqDtFuERZpPZq6wf/tXEw3wTrg=
Subject key identifier:   5F:36:8C:FD:C6:FA:52:96:7C:8F:A8:C1:CF:62:97:2B:33:BA:53:E3
Authority key identifier: E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63
Certificate issuer:       /CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
Certificate serial:       0197B6D7B70029315C373DA7EB8FE0975E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
Manifest number:          0D16
Signing time:             Sat 28 Jun 2025 14:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:19 +0000
Files and hashes:         1: 6B4yXNISZiXGbUadtk5O-aqw3GM.crl (hash: yrgHETa1CrPf8AchhqRBnj4ewpSePPlLUr6odSn8qjE=)
                          2: guRa0ry_XeErXAXDimQX6nD8r-o.roa (hash: HkTFHVv5bF3CwAvh/UV6s5H3UbyzToqbz92TpMOY9SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b7:00:29:31:5c:37:3d:a7:eb:8f:e0:97:5e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81e325cd2126625c66d469db64e4ef9aab0dc63
        Validity
            Not Before: Jun 28 14:01:19 2025 GMT
            Not After : Jun 29 14:01:19 2025 GMT
        Subject: CN=5f368cfdc6fa52967c8fa8c1cf62972b33ba53e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:12:0e:ab:07:36:68:94:84:91:6c:95:2c:dc:
                    b8:bb:1f:74:70:2e:0d:2f:3f:8d:77:58:f1:b6:9d:
                    36:ff:18:fb:84:bb:fe:f7:e1:d7:a4:89:e5:21:ad:
                    b8:0d:5a:74:eb:ba:48:92:a0:a0:d0:b8:34:4a:06:
                    06:0c:f4:86:8f:a1:28:32:cb:51:2b:bc:ce:71:19:
                    b5:09:17:37:34:20:57:36:46:89:bc:78:d8:35:8b:
                    fc:b5:29:d0:df:6b:4c:1f:4b:e4:76:d7:c5:9a:cd:
                    ad:a0:e4:39:27:ec:5c:2b:e8:31:ff:c3:f2:08:e5:
                    22:bf:7c:64:a4:8a:41:32:33:32:20:80:f9:3f:98:
                    38:70:ca:49:1d:f5:1c:1c:c5:75:c9:8b:b8:00:51:
                    e1:9a:55:02:bd:88:a3:32:9e:04:cf:73:29:9f:be:
                    33:23:57:6a:46:b7:11:a7:16:85:c7:0b:77:cd:f7:
                    96:f5:84:5f:bc:44:91:fd:dd:82:f4:70:d9:13:e1:
                    96:0b:03:a5:62:1a:77:81:ce:05:49:68:51:be:e3:
                    dd:7c:c6:13:34:d0:c6:45:b1:c5:07:de:5a:91:9e:
                    e1:63:97:ae:ab:75:17:e5:36:33:66:86:f2:56:99:
                    7d:f2:5e:53:bd:1c:9f:29:da:60:05:8d:fb:79:69:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:36:8C:FD:C6:FA:52:96:7C:8F:A8:C1:CF:62:97:2B:33:BA:53:E3
            X509v3 Authority Key Identifier:
                keyid:E8:1E:32:5C:D2:12:66:25:C6:6D:46:9D:B6:4E:4E:F9:AA:B0:DC:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B4yXNISZiXGbUadtk5O-aqw3GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/af78c9-999d-4651-b21e-f95cd36bf91a/1/6B4yXNISZiXGbUadtk5O-aqw3GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:10:65:e2:5c:a9:f3:6c:97:e6:ca:1e:77:bf:ed:9d:63:27:
         84:21:a2:6c:56:0b:af:a3:78:5d:39:c8:28:5b:d2:7f:f2:f9:
         4b:7d:4d:a7:09:02:cb:0d:d8:83:15:7a:73:ac:fc:c6:42:eb:
         23:cc:74:fb:73:ab:df:a9:01:69:f6:a6:0a:4a:2f:0c:3c:92:
         c9:0a:6a:4f:54:15:6f:56:27:b4:2d:ab:77:77:6a:30:ba:8f:
         f4:b9:12:c9:05:2c:e4:9b:8d:e2:e5:54:be:4a:2c:a5:55:1c:
         ca:10:f4:44:0a:7f:75:36:f0:e3:d5:b5:d9:35:cd:08:a8:56:
         92:36:a7:68:06:10:87:78:a4:2e:3f:5b:5f:d6:c0:14:7f:40:
         e3:4b:75:9f:f8:37:65:63:5e:ac:d4:e2:35:ca:bd:ea:4c:30:
         6e:83:71:59:1d:30:e0:85:22:11:c4:d8:5f:35:fb:90:f8:06:
         35:97:18:d4:92:23:a2:13:fa:8c:19:b5:15:ea:14:2d:9a:18:
         00:d4:b1:79:56:ea:c4:73:c7:c9:db:78:43:85:9e:98:b7:59:
         cb:6e:05:86:b1:36:80:cb:bd:96:89:ed:00:79:0c:df:87:71:
         e8:4a:e3:97:d0:c0:8d:ae:cb:de:10:54:98:37:d5:c2:ea:11:
         f1:30:31:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:29 2025 by rpki-client