Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          HxZI/8UrNAGyD0nBDi0vcA/oVYblYyMhGDgXf3XwP/k=
Subject key identifier:   30:B1:9B:B7:61:74:BE:DE:F6:3B:4D:B4:82:38:6E:3B:22:EB:8A:8C
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       0198D47405CFB79F0BB296A83154E6505101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0DDF
Signing time:             Sat 23 Aug 2025 01:03:49 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:49 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:49 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: LYNd1IFG8ZzZij/jgKrAiEz3LkISU22nrPD3glhtZ30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:05:cf:b7:9f:0b:b2:96:a8:31:54:e6:50:51:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Aug 23 01:03:49 2025 GMT
            Not After : Aug 24 01:03:49 2025 GMT
        Subject: CN=30b19bb76174bedef63b4db482386e3b22eb8a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:52:9c:e8:2e:25:36:8b:92:45:51:69:d5:
                    44:ac:9a:6c:83:20:1c:9d:80:c1:ea:cf:e2:39:1c:
                    94:ac:4b:0e:f2:9e:65:73:3c:73:3b:bd:54:45:62:
                    06:4f:f0:07:25:3e:44:93:af:f9:68:41:1c:cf:32:
                    1b:24:94:8e:fe:e9:74:d7:1d:d1:6e:d6:6b:8d:43:
                    3a:34:cf:f6:de:3b:5b:dc:5c:d4:20:2e:24:92:cd:
                    f6:a2:7c:d1:36:65:43:a4:9e:8a:99:c0:fe:fe:6b:
                    ec:94:d9:60:58:7a:92:76:61:50:c6:e9:84:92:99:
                    ce:77:6a:d5:ec:31:1e:f1:bc:75:ce:2e:b6:c6:f2:
                    36:69:db:2a:7b:08:60:56:0b:a0:d4:0c:e6:18:ea:
                    e1:bd:41:a7:0c:0c:cd:d1:a3:39:e0:c3:d1:39:12:
                    5c:d1:96:3d:4b:ca:57:a3:40:ba:a3:23:5a:d9:38:
                    79:ab:e5:bd:49:15:61:27:82:c6:2a:6f:72:80:5f:
                    66:43:01:e7:cc:d8:cd:81:7b:18:63:66:18:fc:db:
                    f1:72:22:e2:38:80:13:d6:51:23:34:0b:ad:fe:a7:
                    8f:b1:53:26:55:f1:dc:59:fc:61:8d:f4:6d:73:28:
                    dd:78:91:82:15:c4:d9:5f:09:11:b2:62:35:59:56:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B1:9B:B7:61:74:BE:DE:F6:3B:4D:B4:82:38:6E:3B:22:EB:8A:8C
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:2c:85:b5:e4:7c:7f:05:be:35:73:39:c3:b6:90:11:e2:07:
         4c:f3:51:e0:a1:60:95:c7:ae:92:c5:0a:6f:c0:56:f6:be:a3:
         84:ca:4f:f0:b2:cb:e2:d3:d2:82:3a:7f:3f:2a:1f:12:3e:a1:
         91:52:6a:0e:f1:1f:4c:e4:e0:7e:2d:2f:9e:6d:f5:30:c8:41:
         04:10:20:b1:a9:10:2a:a7:2d:0a:7a:9e:60:dd:6f:57:be:1f:
         6e:bc:58:49:a5:e9:72:eb:08:18:4e:d1:82:e8:6c:56:39:35:
         1c:87:f7:39:c5:60:32:92:dc:7f:4b:61:ea:62:39:b7:a2:bb:
         35:de:f8:38:7d:f2:7a:88:ab:03:44:74:23:6a:5e:d4:c7:d6:
         89:b5:17:ae:94:71:c8:be:52:8b:ec:79:fd:2f:09:1f:b1:e7:
         30:cd:e0:9c:6a:d9:fd:49:f0:d5:f3:04:f3:3f:95:35:32:47:
         7f:9b:08:9c:04:33:02:cb:ae:86:20:d8:69:47:b7:da:c7:39:
         fa:9c:1f:27:e1:9d:77:3d:b6:68:04:a3:ff:a7:4f:6a:65:47:
         a9:66:33:4f:e2:f8:da:52:d5:a0:e0:42:81:d0:ab:76:32:85:
         c7:3b:96:4a:8d:c6:18:d8:d0:0f:a9:67:d7:dd:cc:ba:85:ae:
         ca:20:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:07:00 2025 by rpki-client