Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
File:                     6ixOp53bewA94B8dBfbb9xaxEzY.mft (raw, json)
Hash identifier:          1sC5YjZwccKNlGghpDEqHmeRmRpFj5uxzZZqTArV05M=
Subject key identifier:   3D:45:0E:E7:BC:03:9A:E4:3D:6E:08:30:37:A2:53:2D:66:EB:1E:A9
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Certificate issuer:       /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial:       0198D660EA49376C137CFC20E7443909508E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
Manifest number:          15DC
Signing time:             Sat 23 Aug 2025 10:02:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:12 +0000
Files and hashes:         1: 6ixOp53bewA94B8dBfbb9xaxEzY.crl (hash: LPCKbXZD07dqZoNr1QuVDOpwMA4STbfYQKRxDJ4MlFw=)
                          2: UBg5H2PYYwmFwtuuB5TxJD258zc.roa (hash: mETMUQGm3Ge4vPrABQSGfrYWzYlfLqVqloDe3yUr+lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:ea:49:37:6c:13:7c:fc:20:e7:44:39:09:50:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
        Validity
            Not Before: Aug 23 10:02:12 2025 GMT
            Not After : Aug 24 10:02:12 2025 GMT
        Subject: CN=3d450ee7bc039ae43d6e083037a2532d66eb1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:61:4a:ef:9f:97:35:7f:9a:97:f3:44:a1:
                    b1:41:7e:c9:d3:67:e9:22:64:14:d8:61:f4:cf:ea:
                    3a:42:37:83:ce:ea:cc:3a:bd:62:9f:27:e2:65:12:
                    0b:ee:6b:9d:ec:3b:8f:cf:b6:64:08:25:1f:a0:1f:
                    3e:1e:31:04:92:35:ac:59:72:95:90:79:45:ae:8a:
                    fb:47:08:fe:3f:36:c1:16:aa:eb:bc:30:f3:ed:28:
                    d7:cc:52:60:78:1b:f9:f1:05:ac:1e:e6:88:b9:d2:
                    3e:3d:2d:90:e3:54:76:2f:59:f6:aa:b4:5b:60:0c:
                    7f:c4:92:89:dd:b7:2c:73:1a:99:d0:41:db:8d:da:
                    8b:08:ff:13:ef:51:66:3f:86:c0:cb:7a:ef:ab:78:
                    13:1b:ff:95:ff:62:da:85:b8:ae:b7:4f:37:bc:8b:
                    a8:24:90:28:a8:89:ad:d3:c3:7f:3b:b8:dc:0e:00:
                    88:39:b8:c1:86:e5:ad:01:51:08:87:97:bd:04:c4:
                    a6:b3:1e:8d:59:fb:7d:98:a5:f0:a1:35:fe:13:49:
                    a3:16:f0:74:19:2f:7e:89:f0:2b:5a:9c:00:f5:07:
                    ee:0a:48:43:84:34:e4:4e:fd:f7:d4:c5:5d:ee:64:
                    e3:05:e2:f4:c1:6f:d5:9a:28:07:4c:8b:5d:6e:07:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:0E:E7:BC:03:9A:E4:3D:6E:08:30:37:A2:53:2D:66:EB:1E:A9
            X509v3 Authority Key Identifier:
                keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:32:ca:18:ec:f9:94:c1:d2:f1:64:e7:be:b8:1b:45:9d:
         b1:aa:ca:f9:82:41:27:28:04:69:2b:7b:0d:18:93:16:ea:c1:
         18:99:ff:d5:04:56:c1:25:25:7e:c6:5c:d1:d9:0b:7d:9a:36:
         f9:9b:96:8b:72:04:d8:48:25:35:bc:fb:82:e6:f9:e2:44:cd:
         c3:93:58:e2:e7:86:0a:13:57:d2:04:9d:11:4c:61:53:f4:12:
         82:f5:9e:b7:fb:e1:5b:3c:5f:ea:ff:21:e4:a7:7e:42:99:aa:
         91:6d:5b:5f:f9:8f:1e:c3:d7:9b:18:9c:f5:0f:4c:72:d2:c3:
         31:99:c8:3e:2f:9a:e1:29:b2:5a:ab:fd:67:d4:fd:5c:51:98:
         89:cb:a9:e5:de:66:ef:e6:5f:d2:70:eb:44:13:66:a4:cf:d6:
         60:91:e2:a4:48:c9:06:37:68:e1:1d:1e:bf:3c:87:62:a3:36:
         e1:82:e9:72:7b:6d:ae:9f:75:51:1d:2a:e8:04:dd:8a:fd:14:
         01:92:c6:e6:5e:0d:2c:e5:73:ea:8b:f2:b6:37:83:32:62:42:
         16:9a:e4:36:1c:92:fc:98:fa:6e:57:db:af:25:ed:56:90:b7:
         ac:95:1e:85:69:c5:4e:e1:dd:05:a7:13:99:f5:be:13:fc:d9:
         94:b4:c7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:59 2025 by rpki-client