Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
File:                     6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft (raw, json)
Hash identifier:          yk7ctQdvp+KqR7U1RZliVuX1ejUA2kUmPZK8HvdOVxE=
Subject key identifier:   55:59:CA:89:CF:4D:E9:78:41:42:07:95:DE:51:D4:1E:7B:D8:03:6A
Authority key identifier: E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8
Certificate issuer:       /CN=e930b76e721f5d834ed53e49284d9790339211c8
Certificate serial:       0197B6A0BC72D2272D96240CE74F3D3AA43E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
Manifest number:          7E
Signing time:             Sat 28 Jun 2025 13:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:16 +0000
Files and hashes:         1: 6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl (hash: H0wqN1N3YhnpZiyhXnG+ARo19vVxN+cco4oFj1Hn2X0=)
                          2: xQC18Di_ctqtLNxYWbMtSnGwz5c.roa (hash: KunZ5Y32qy4l7Ei6v6cWQmt4QYuY/vwQLNAYzWY5uXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:bc:72:d2:27:2d:96:24:0c:e7:4f:3d:3a:a4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e930b76e721f5d834ed53e49284d9790339211c8
        Validity
            Not Before: Jun 28 13:01:16 2025 GMT
            Not After : Jun 29 13:01:16 2025 GMT
        Subject: CN=5559ca89cf4de97841420795de51d41e7bd8036a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:da:3e:00:24:f5:d3:00:31:2d:2c:19:86:fc:
                    23:f1:8d:70:ae:e2:50:ef:c7:06:ee:5c:70:c8:e2:
                    2b:93:28:0e:28:76:37:0a:5d:e1:b5:10:2d:3b:55:
                    61:9d:aa:11:54:b9:3c:0c:78:71:a6:e0:8a:af:fa:
                    0d:26:70:be:49:e9:e2:d9:c9:91:4b:ef:f8:17:4a:
                    13:0e:d1:2e:ee:98:47:fa:fa:8e:5e:5c:b8:bb:00:
                    50:02:b1:8d:85:c9:6f:7e:c0:ff:04:f0:29:82:70:
                    e2:6d:ce:8a:46:ac:6e:00:6b:e7:9d:1c:96:b9:cb:
                    60:c6:f8:26:ed:56:eb:3d:b6:e4:da:a2:c9:24:85:
                    76:3d:8e:b6:fb:17:4d:78:87:c4:ab:ea:e3:d7:45:
                    eb:3c:a0:0e:8a:f4:df:db:15:b8:92:76:1b:a8:04:
                    d4:4d:f9:13:e4:31:53:01:c3:95:1f:7d:5e:d3:88:
                    58:f8:2b:61:10:78:25:60:35:bd:6b:5b:84:5c:01:
                    09:66:c1:28:25:47:66:66:f3:71:51:8b:cc:f6:ab:
                    da:9f:40:d6:64:9f:e2:3c:9a:cb:94:2a:da:84:18:
                    a3:85:7c:7c:6b:c1:ba:bc:14:7f:74:9f:81:4a:9f:
                    97:5a:e9:b1:d1:36:1d:a4:a9:c1:28:db:e3:16:d8:
                    70:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:59:CA:89:CF:4D:E9:78:41:42:07:95:DE:51:D4:1E:7B:D8:03:6A
            X509v3 Authority Key Identifier:
                keyid:E9:30:B7:6E:72:1F:5D:83:4E:D5:3E:49:28:4D:97:90:33:92:11:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TC3bnIfXYNO1T5JKE2XkDOSEcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a9db23-a67c-4f8b-8adf-70522d814e0c/1/6TC3bnIfXYNO1T5JKE2XkDOSEcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ae:07:81:67:9b:98:3c:89:5d:23:82:61:a1:b9:09:c2:0e:
         dd:84:4e:22:8c:f8:a8:f8:b4:79:8f:f5:a2:17:14:e9:11:70:
         f6:0c:6a:a4:66:70:eb:58:21:83:d5:48:0f:90:42:df:29:ca:
         7c:27:d6:46:71:c0:d5:aa:64:9d:52:a5:6d:4e:27:f2:15:d8:
         e6:74:3b:76:21:f2:9a:04:f7:15:3f:a6:0e:77:bd:66:7f:0a:
         94:14:34:b0:16:bb:60:81:ba:51:35:a4:9a:f3:d9:b4:3f:4a:
         61:b0:8d:4d:b4:c6:c6:4b:65:20:d0:44:0a:03:da:34:e9:76:
         0e:d6:20:ea:19:37:ff:57:dc:f6:93:1f:e4:a5:7f:49:6e:73:
         29:ac:6e:9a:35:b8:12:1c:f4:63:3d:00:69:0f:b9:cc:9d:0f:
         9e:82:ff:ce:b1:00:bf:e1:ac:6e:f0:46:58:d6:fc:c8:ea:a6:
         23:0d:77:25:12:fa:5e:4b:28:e0:c2:33:23:48:f6:20:23:d8:
         17:86:4e:4e:f3:79:bc:d5:2b:08:06:d1:78:44:7b:6e:27:c1:
         17:1d:4f:c9:d7:b7:e0:b9:9b:e6:10:c1:7a:a4:b1:8a:74:be:
         21:11:33:a7:d4:fe:83:82:1c:26:ea:7e:03:9a:52:a5:a1:2b:
         4b:9b:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:40 2025 by rpki-client