Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
File:                     6lGHy_c4wOnXo-2b_LLEpnciZIM.mft (raw, json)
Hash identifier:          evCp2JLgcxmDolxillN0PVe7R5k76IPGHZMKZ7V/jxs=
Subject key identifier:   56:5D:A3:79:43:FC:BD:4C:9E:A9:1C:0A:0D:6E:10:F9:98:49:73:74
Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83
Certificate issuer:       /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
Certificate serial:       0198D583F38BBE7D05807994F1F85549020C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
Manifest number:          164C
Signing time:             Sat 23 Aug 2025 06:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:51 +0000
Files and hashes:         1: 6lGHy_c4wOnXo-2b_LLEpnciZIM.crl (hash: vgPL9qsO9Hti5B4Pe/ETydI40CiZafJjyLIqCMIzCcw=)
                          2: vZG9jNJvpP2dQTHDHjZo_HSuUlM.roa (hash: l7IzR2g9EaxDuqo4eOsNuovFYqnZrK9ipQBej6WUnUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:f3:8b:be:7d:05:80:79:94:f1:f8:55:49:02:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483
        Validity
            Not Before: Aug 23 06:00:51 2025 GMT
            Not After : Aug 24 06:00:51 2025 GMT
        Subject: CN=565da37943fcbd4c9ea91c0a0d6e10f998497374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:c3:73:40:3a:c9:99:11:5f:51:c0:4a:19:
                    75:6b:9a:c7:0e:8d:56:2e:8d:50:55:94:08:f2:8c:
                    ad:26:7b:32:c7:41:6d:d3:32:ff:7c:e0:8f:96:22:
                    f9:45:d9:07:42:7c:6b:be:17:71:84:47:39:83:4a:
                    0b:bc:a6:e2:eb:ec:dd:ba:ed:1f:ad:7d:65:fe:47:
                    e8:af:17:96:09:fb:4c:b8:76:82:9f:99:b3:2c:d9:
                    5c:68:da:ca:32:76:8d:43:af:a6:4c:1d:42:76:4e:
                    9b:a7:49:7c:de:a2:49:6a:92:8b:2d:9a:67:b5:fd:
                    26:a2:a6:f5:07:c2:3f:5e:e3:7d:b3:03:28:56:ca:
                    87:f0:09:95:2d:3d:ce:c3:c9:0a:77:da:4b:d9:fa:
                    f8:be:c9:67:8e:16:61:2a:ed:a9:c6:1a:8d:cd:2b:
                    f3:50:8c:5c:ba:bc:c0:af:bd:75:5a:f0:3e:74:ff:
                    25:73:4b:4d:ef:ed:5c:62:d5:d7:02:6b:ac:dc:22:
                    e4:6d:e4:29:93:cc:39:fd:d2:3a:2e:9a:97:5e:00:
                    75:c4:e0:ab:85:ab:41:3b:1e:e4:9c:ef:6d:1e:91:
                    23:67:de:5f:6c:18:9d:6c:ae:a9:00:5f:f7:0c:b1:
                    2e:63:fd:77:7a:dc:58:96:ac:c7:55:6e:a8:77:30:
                    a2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5D:A3:79:43:FC:BD:4C:9E:A9:1C:0A:0D:6E:10:F9:98:49:73:74
            X509v3 Authority Key Identifier:
                keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:7c:b7:13:bf:a9:33:c5:b3:27:7a:c2:10:dd:7d:18:b3:27:
         e6:11:92:84:5b:81:fe:97:42:91:b2:65:bc:82:ed:9e:54:51:
         b1:c2:8c:34:7a:8f:04:ce:49:3b:ab:61:02:3d:2d:1d:ea:5e:
         60:63:ed:91:e9:5f:10:d0:1f:5b:cd:1e:93:4e:21:87:59:54:
         e7:64:73:51:48:fe:03:c5:21:a0:49:1a:9d:98:43:af:7a:28:
         a4:7c:9d:6f:b4:f1:ff:67:dd:38:a9:79:48:57:3e:f5:ca:52:
         27:9e:35:79:f3:13:fe:17:f5:91:64:6d:c3:34:78:02:d8:49:
         d6:78:ff:8a:71:ba:08:37:22:c0:7d:95:dc:fe:b2:83:28:9f:
         00:d0:e7:61:c5:bc:c9:af:7f:ad:b5:d0:c8:fd:63:4a:b3:37:
         4a:a8:35:5a:61:b1:c5:18:ff:5d:28:54:c9:1b:48:dc:4d:99:
         25:aa:41:30:ce:61:f8:dd:92:7a:44:97:d9:01:89:e0:ef:0d:
         31:8d:0b:aa:73:7a:2f:2d:ca:6d:53:5f:62:c7:b2:8b:71:af:
         0e:99:be:01:fe:b6:77:b2:c7:37:9e:c3:7e:ff:95:52:a9:7a:
         34:8b:73:d3:99:a5:d9:b8:f9:f6:94:e2:a6:f6:65:2f:e0:21:
         ad:35:aa:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:13 2025 by rpki-client