Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          r7O/Yf0x2sZukCdJo3IJExp+r0WBDcNW3O/nqX8rIrs=
Subject key identifier:   82:EF:9F:90:0E:F7:EE:44:22:86:BE:84:13:F1:22:B7:02:53:00:BB
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       0197B70ED68B8C7F5E1E24154D7974A72083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 15:01:32 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:32 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:32 +0000
Files and hashes:         1: 6jvE_XHjlnNI6-FtCPVCq0YmsqY.roa (hash: snOYWWn9LAXIRFMHKtV6wAS6uhRRwhXxfRK2VSExR1k=)
                          2: Dmq6rzRBY22zQprWtgsSucnmPfw.roa (hash: 53HdmBv78dIaQNhdTstURpa3FkH5iHS78bcTm103dts=)
                          3: Vfu8orab-u2hq4PDCFONf8-ELfY.roa (hash: 4g53e8SQJ6evWk5P2AQfilbVciXTa/dqHlUA6U7ixfc=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: w1+kXJ1C8LE1PvyNx/OniOZIw8ViW0zgCHCIDGi6794=)
                          5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=)
                          6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=)
                          7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:d6:8b:8c:7f:5e:1e:24:15:4d:79:74:a7:20:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jun 28 15:01:32 2025 GMT
            Not After : Jun 29 15:01:32 2025 GMT
        Subject: CN=82ef9f900ef7ee442286be8413f122b7025300bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:15:8a:80:91:be:44:c7:eb:09:8e:a7:a7:fc:
                    2d:37:fa:d9:66:a6:2e:e5:c9:85:e6:c9:3c:24:81:
                    fb:0d:ae:09:7d:b1:24:e5:67:01:e1:71:ef:b1:99:
                    e1:f2:be:e5:ba:cf:3c:34:19:aa:40:19:8c:51:90:
                    44:e6:ff:c2:f4:38:f7:3e:e5:a7:f4:fe:b4:75:f6:
                    36:b2:5b:65:8b:b4:69:9d:d1:f7:6a:a8:c9:14:c5:
                    f6:96:9e:2a:a1:76:61:8a:49:b5:66:b8:6c:b3:a2:
                    84:9b:d6:3c:6d:a0:c6:e6:4f:b2:d1:47:2c:db:ca:
                    d8:83:3f:91:09:af:54:20:02:b1:99:40:c1:bf:65:
                    89:dd:61:c1:ad:40:44:93:ef:55:30:55:ed:a5:ae:
                    c5:6f:bd:a0:09:e8:ac:22:ec:29:5e:3f:47:fd:fd:
                    e0:5a:d9:38:01:e2:e4:ed:10:fc:02:49:3e:8f:ec:
                    d3:32:c9:e9:11:e4:9f:28:3a:a0:3c:f6:e1:92:cb:
                    e8:5e:38:27:62:76:08:57:47:d3:10:47:59:53:68:
                    49:a8:f4:a1:aa:2f:a7:15:ba:98:d1:bd:28:3d:08:
                    39:8c:7e:70:6a:ea:d8:88:38:59:d7:63:c2:03:13:
                    a4:ba:6b:fa:b0:ba:f6:e3:c8:74:21:5b:bb:21:0c:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:EF:9F:90:0E:F7:EE:44:22:86:BE:84:13:F1:22:B7:02:53:00:BB
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:3d:d3:c8:ae:b1:04:96:3e:b5:21:6f:19:f4:34:69:0d:
         82:23:60:4c:2d:47:49:01:25:96:ce:8e:cc:da:26:28:51:b6:
         c3:ba:e8:b1:c2:f7:fd:3b:75:1a:5f:a4:f1:5f:5a:59:37:a8:
         e8:98:e9:86:64:42:c1:ac:14:6d:53:21:5b:dc:73:2e:3d:d4:
         cb:1b:3f:0c:34:91:fc:d5:39:45:6c:e1:8e:3e:47:f2:d0:ff:
         70:20:0d:15:3a:7a:c1:5f:5e:eb:02:58:c0:19:75:0f:88:43:
         46:12:fc:35:92:de:b8:a0:85:8c:a4:7f:9f:68:7b:b5:a5:6a:
         08:81:c4:46:0d:53:7f:16:c8:90:af:c3:ba:38:8e:3b:a9:03:
         90:24:9d:0d:fc:f0:a8:ea:a1:af:73:bb:e6:83:79:f0:ae:26:
         e2:b4:85:50:d9:0e:f7:1f:92:08:1f:13:4e:64:e2:9a:33:88:
         74:59:d9:b6:3e:af:1c:65:17:4d:af:ee:64:8e:35:1c:02:57:
         89:16:2c:fb:5a:6e:e6:c7:22:ec:a6:be:95:ab:19:e2:f4:ff:
         ce:89:72:a1:e5:63:2c:91:9a:96:1e:9d:a2:e7:54:de:d6:7d:
         5b:56:61:3b:97:55:f0:b5:d7:1a:16:c5:12:d3:4c:ea:be:74:
         fd:71:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:07 2025 by rpki-client