Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File:                     6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier:          733KHjQb9Hma0/eNOOl0xFlMznRX3vRgATrgAxEYuok=
Subject key identifier:   0A:63:25:36:21:F9:EE:4A:7E:78:9B:F5:3A:4C:51:8B:F5:83:47:1E
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer:       /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial:       0199FE4711EC21CF689E733EE9BFD11A4FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number:          074E
Signing time:             Sun 19 Oct 2025 21:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:34 +0000
Files and hashes:         1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: yT5gvNrQ1AJRqEYyc0lcUZXvjrpavIzsHcDur32/mPw=)
                          2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
                          3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:11:ec:21:cf:68:9e:73:3e:e9:bf:d1:1a:4f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
        Validity
            Not Before: Oct 19 21:01:34 2025 GMT
            Not After : Oct 20 21:01:34 2025 GMT
        Subject: CN=0a63253621f9ee4a7e789bf53a4c518bf583471e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:ca:b7:f4:c5:c9:f0:12:64:df:30:45:69:
                    11:24:80:c7:67:60:9a:5a:4d:a9:dc:8c:34:67:30:
                    a8:23:5f:47:4d:ed:1c:51:59:6b:34:ec:d9:e8:89:
                    36:68:c2:fc:8f:bc:2d:99:33:bd:47:39:c9:9e:d4:
                    43:de:d3:c8:54:55:e6:4a:c1:59:db:3a:6f:18:43:
                    49:e6:e3:3b:36:7b:62:55:05:d3:c8:93:9d:76:18:
                    08:1b:e6:c6:c0:93:8b:a3:03:87:8c:08:f4:8f:79:
                    06:3a:cd:22:94:a1:49:e9:8a:ba:f8:c4:c7:1a:61:
                    d4:08:03:4b:cc:0b:d3:b7:94:c9:1f:e3:2a:19:91:
                    f0:dc:f9:1d:12:3b:ea:ea:d6:d8:be:59:73:d7:fa:
                    fc:6e:c9:cb:38:53:fa:09:66:81:b1:79:10:e6:b7:
                    b9:63:3f:8b:46:c8:db:e9:41:de:a0:d5:4f:de:40:
                    c5:95:3a:65:a2:e6:89:ae:22:f2:d6:33:5c:4a:64:
                    b0:a8:6f:16:3c:6e:a8:9d:54:c7:f3:fe:4e:35:83:
                    ee:95:4a:b0:5c:2f:35:df:db:37:e7:cc:da:55:f9:
                    2c:8c:c0:46:7e:55:4d:79:9f:0e:c0:8c:f7:80:e6:
                    e1:3e:5f:24:b1:b2:75:91:5f:56:4d:62:0c:e3:a6:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:63:25:36:21:F9:EE:4A:7E:78:9B:F5:3A:4C:51:8B:F5:83:47:1E
            X509v3 Authority Key Identifier:
                keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ff:22:46:7d:ea:b5:92:5d:49:4f:e4:12:6b:4e:81:0b:38:
         7e:32:a7:fc:b6:8f:50:e1:85:e9:6f:b1:f3:d9:68:c1:10:3d:
         27:cb:ec:28:21:bd:0d:af:1b:79:05:9e:d3:27:90:6e:9f:54:
         0f:67:79:7b:86:e0:dc:ff:40:63:f9:41:5b:43:f7:92:35:7f:
         41:fa:94:a9:8d:b2:e7:8d:47:04:ab:bf:bd:e7:7a:4d:c4:f4:
         49:e4:d1:52:97:3a:e3:75:65:b7:45:aa:82:70:72:30:a9:99:
         ce:a1:7e:e0:08:7b:4d:82:d1:12:3f:88:dd:af:04:be:ac:db:
         84:eb:56:3a:7c:90:f6:ea:d5:aa:71:d1:fb:60:30:64:ed:d9:
         a2:df:2e:5b:6f:17:19:29:cb:91:ed:57:2e:48:38:1c:5d:d5:
         c3:38:10:11:aa:63:15:b7:a9:8f:7e:45:a8:c8:19:e1:18:7a:
         0d:a0:8d:40:86:a0:c6:7e:e9:63:0e:f3:ff:35:2b:05:c4:b4:
         4e:3d:33:8a:b9:45:e3:a1:df:54:7a:13:6e:2f:e2:22:5a:17:
         97:fc:c5:03:45:8e:b3:0a:67:27:ea:f3:c6:70:cd:90:5b:24:
         e4:3e:29:fd:10:dd:84:4d:bc:0d:3e:44:9a:20:2d:c1:b3:45:
         33:10:ac:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:51:35 2025 by rpki-client