Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
File:                     6teZAmCU1gUWtSfYQrYWaAVmjp4.mft (raw, json)
Hash identifier:          ryogW/wYRua3rm+mi/VW5wlIePBpe/WjS+nJ/5TfP+o=
Subject key identifier:   68:0B:6D:DB:92:33:5B:F1:FB:AA:1C:9C:47:9E:74:7B:95:5F:0F:CE
Authority key identifier: EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E
Certificate issuer:       /CN=ead799026094d60516b527d842b6166805668e9e
Certificate serial:       0197BA0FB31CBBB06FF96A759D63987733A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
Manifest number:          0D7D
Signing time:             Sun 29 Jun 2025 05:01:20 +0000
Manifest this update:     Sun 29 Jun 2025 05:01:20 +0000
Manifest next update:     Mon 30 Jun 2025 05:01:20 +0000
Files and hashes:         1: 5aygAvRHvqbLOoouc05NtgFPpPw.roa (hash: nc/AUfAwizBzWy5VZJ5QLuJbsORBSE2Jd11+BO+dk20=)
                          2: 6teZAmCU1gUWtSfYQrYWaAVmjp4.crl (hash: qaUVeLJhj/3Uu77it8QUCbmmT9eumdFuB7xV86MNYu0=)
                          3: BPsnbAY736rnhOpsb-LvumDRDKU.roa (hash: cw3wTRQFmbNQL+CajFjokOu1YYlX4dB+lTPSJQ2O5Dw=)
                          4: EnjDxu_vHCgcm-y7S37DtQI-yYs.roa (hash: mSpjCGbl0mXY7o0fO/n2Ugdj5zu8mv9H47MGOXxK1tE=)
                          5: HYeDmbdQhvQkQGQQjytVT5KaIk0.roa (hash: gUo2OrQBZcWScCEhPqgX5mozISY2y0CI2WMSkoRlQ8Y=)
                          6: _f_Xv9ycUf0HBKupRr9Uzw8Ddxw.roa (hash: uERbdquO58tMxnwfWXwlVsjH2jwzHyFovdXzONM6qxQ=)
                          7: li6EOX-FGf3c-oOCqBpKv79mkaM.roa (hash: xaHho81zT1YRg1xd9w2yG7jCepIsSXFmop1/GMvnuFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:b3:1c:bb:b0:6f:f9:6a:75:9d:63:98:77:33:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ead799026094d60516b527d842b6166805668e9e
        Validity
            Not Before: Jun 29 05:01:20 2025 GMT
            Not After : Jun 30 05:01:20 2025 GMT
        Subject: CN=680b6ddb92335bf1fbaa1c9c479e747b955f0fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d8:cf:57:c0:88:2a:68:51:53:98:bc:5c:74:
                    23:53:d9:13:97:c0:7f:b3:19:b1:91:68:9d:b7:0e:
                    02:81:26:a1:0a:1e:22:4e:d2:60:67:91:a5:4d:39:
                    c2:8b:00:bf:33:49:67:fe:f4:47:cd:ad:1a:f0:a1:
                    dc:27:6e:2d:09:05:38:06:d3:e1:b2:bf:16:06:48:
                    d4:74:f5:87:fa:83:7e:26:cf:d0:48:1a:28:c3:e8:
                    f3:e6:82:1c:f0:7a:30:7f:43:44:f4:75:8b:52:22:
                    a2:9d:bc:92:bf:38:19:5a:98:6c:7a:5c:86:b1:0a:
                    e1:cb:fb:a3:37:e7:1d:5f:ab:f6:f9:b6:28:83:4c:
                    cb:4a:eb:0b:e9:87:94:a0:09:ca:2a:3f:43:b2:fa:
                    cf:1c:a5:f3:ce:e1:c5:00:3a:7e:47:00:75:f9:fc:
                    32:0d:84:5f:4c:c6:88:b5:8c:f8:05:bf:aa:b0:09:
                    4d:c0:de:d4:b9:43:f3:b7:5a:2d:c5:f1:2e:d1:01:
                    ce:8f:1b:d0:58:86:ac:41:1e:7e:52:55:6c:de:c7:
                    03:05:0c:d8:2b:af:2c:f5:61:23:53:9e:7a:90:62:
                    13:39:be:e6:0b:6b:3f:db:e7:a0:3d:07:48:eb:e4:
                    94:a6:d5:d9:c1:26:40:09:4f:04:77:da:6f:cb:f6:
                    3c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0B:6D:DB:92:33:5B:F1:FB:AA:1C:9C:47:9E:74:7B:95:5F:0F:CE
            X509v3 Authority Key Identifier:
                keyid:EA:D7:99:02:60:94:D6:05:16:B5:27:D8:42:B6:16:68:05:66:8E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6teZAmCU1gUWtSfYQrYWaAVmjp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/19870f-866c-4420-ad08-30c9e202e995/1/6teZAmCU1gUWtSfYQrYWaAVmjp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:d4:fb:13:0e:d8:f3:1d:dc:62:ca:7c:8b:59:e2:da:b3:
         31:4c:a5:ef:a1:fe:ac:1c:63:a7:c8:86:b2:9a:ca:f4:67:4a:
         b9:6b:1d:e2:93:df:96:96:4c:8b:45:e8:96:a9:cd:99:4d:90:
         05:ab:7e:af:c2:ca:92:91:1c:b8:11:fb:48:52:91:d1:67:6c:
         71:7c:4f:91:62:f3:11:3d:d7:7d:d6:d4:76:e4:c7:e0:8d:42:
         62:d4:46:cf:8b:10:98:0b:4d:ea:32:da:03:5c:fc:54:f1:68:
         07:ab:f6:e2:bf:f4:b3:8b:89:b4:e0:ad:f5:f9:a7:f1:00:58:
         94:b6:66:c9:ff:b6:30:ae:e4:e3:31:9b:a3:8d:f3:2b:14:a1:
         b9:48:25:53:a2:d5:8c:12:f9:af:04:0f:f0:e7:e6:b6:26:a4:
         5b:cc:b4:39:34:ab:31:69:97:bc:24:7f:a4:7f:b7:fd:9e:c5:
         e9:b4:aa:e6:f4:28:e8:d2:4d:2d:4a:11:14:77:62:b0:dc:8c:
         19:88:27:5a:25:05:11:bc:fa:97:15:07:cd:5a:96:5c:6c:8f:
         8b:33:fb:77:93:71:7a:2f:16:3b:83:0c:84:46:01:9c:24:45:
         d4:7c:8f:f6:94:e7:0f:98:b6:52:fb:6a:38:86:b1:a4:a4:43:
         ea:2b:8c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:14 2025 by rpki-client