Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
File:                     6lg9YfLlemsW6ksanKJ7slDXSO8.mft (raw, json)
Hash identifier:          VSoAmZ+OWCsm+RH35dKGf477ZYUEGghvtzBAai48Eao=
Subject key identifier:   DD:D3:E4:FD:CF:E0:A6:A2:C8:24:D5:0B:5E:A9:47:C7:44:A4:0D:52
Authority key identifier: EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF
Certificate issuer:       /CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
Certificate serial:       0197B6D7B566132B9A9F181DD8530C4236A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
Manifest number:          15B8
Signing time:             Sat 28 Jun 2025 14:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:19 +0000
Files and hashes:         1: 6lg9YfLlemsW6ksanKJ7slDXSO8.crl (hash: j0/LqJVfAYkc0/SeroJFurPlIo+qpu80ZrGLayeAin8=)
                          2: BDcWEX2jsziWI3BwAdwXDgVlUUs.roa (hash: ohMsIfsvhMfjPWnDhvdOtdCZBCwqZ7Awj2tCgJhUEaE=)
                          3: YZeqBXKQFmXRNEkSHxYTd5FtBG8.roa (hash: H2qTKciVzX2Iz/NfWeOKudVbBEab6voHC2+59WhtYSU=)
                          4: eIUbhEvS312QdpTsSOJbOfKRhjg.roa (hash: TDTdEPNKnFdTs1u7Iy6p2CE/KWnf5yhsocLiaVIOsqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b5:66:13:2b:9a:9f:18:1d:d8:53:0c:42:36:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea583d61f2e57a6b16ea4b1a9ca27bb250d748ef
        Validity
            Not Before: Jun 28 14:01:19 2025 GMT
            Not After : Jun 29 14:01:19 2025 GMT
        Subject: CN=ddd3e4fdcfe0a6a2c824d50b5ea947c744a40d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:97:41:f7:99:d3:91:e3:16:f3:63:01:11:65:
                    f4:09:21:9c:e0:e6:d4:c2:60:77:76:99:c0:29:71:
                    9b:cc:b9:88:da:13:1e:ff:70:d4:30:06:58:89:fd:
                    44:13:4c:b2:47:b2:8c:9b:61:35:d4:7d:e9:36:8c:
                    2e:9c:0f:ba:d6:f2:c3:d8:8e:38:2e:e0:8b:98:4e:
                    d9:51:4f:29:8d:8e:d8:8d:4b:71:84:c3:a2:57:5a:
                    46:4b:24:63:b7:74:4d:7d:bc:31:30:77:94:f8:83:
                    a5:90:5e:47:2a:9e:05:69:2c:39:37:8c:2f:37:f0:
                    73:37:97:7e:0c:d0:3b:5a:17:ab:ff:e4:ae:8d:5a:
                    2e:c6:54:91:be:42:7c:2b:d0:80:4a:a1:eb:8f:4b:
                    f1:0c:f5:48:0d:9e:bd:2d:51:b1:33:1a:dc:ec:8b:
                    0a:bd:d6:0c:f9:9e:5c:96:0c:e5:47:e5:36:7c:7b:
                    48:07:a0:22:3c:f2:5e:c2:e2:9d:5b:79:5c:ee:03:
                    43:ab:70:59:4c:00:8f:ee:b7:fc:a9:7b:82:24:aa:
                    b2:01:c7:a7:67:ac:6b:c2:59:4f:37:93:63:5f:12:
                    fa:42:3d:31:c1:eb:87:0a:b9:4f:a0:3e:26:27:d2:
                    49:a7:80:fa:a2:fd:32:bc:79:35:c8:f1:04:aa:6b:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D3:E4:FD:CF:E0:A6:A2:C8:24:D5:0B:5E:A9:47:C7:44:A4:0D:52
            X509v3 Authority Key Identifier:
                keyid:EA:58:3D:61:F2:E5:7A:6B:16:EA:4B:1A:9C:A2:7B:B2:50:D7:48:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lg9YfLlemsW6ksanKJ7slDXSO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6f5128-7cba-49c5-9b25-99c1b0cfc3a8/1/6lg9YfLlemsW6ksanKJ7slDXSO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:19:28:ee:33:22:7f:74:55:64:30:d1:10:f0:67:ba:73:01:
         a5:ca:f7:5a:ef:88:02:f7:e4:59:21:08:19:99:59:57:30:88:
         f2:a6:73:24:1c:b1:1d:e3:b8:9d:5f:2b:61:fa:7b:ca:fb:b5:
         22:3f:84:a2:cd:0b:77:21:4f:f3:ff:f3:4f:77:0b:23:58:82:
         2f:b6:af:56:99:ef:bc:fa:ff:26:e4:66:76:be:da:1e:11:f9:
         e7:96:c7:63:f8:11:3d:2b:bc:22:a6:94:9b:ec:d5:cf:b4:db:
         bd:29:36:41:75:55:22:d9:95:5e:77:3a:88:bf:27:6a:44:27:
         14:12:3a:f6:6c:61:0a:f0:50:52:d1:a7:de:0e:98:c7:75:1d:
         ee:67:58:4f:95:81:4f:64:60:fa:e3:42:a6:d1:8a:e1:98:3e:
         6d:5d:d2:57:0e:15:c3:2a:fc:1a:11:22:8c:ec:ce:ab:45:a0:
         ca:86:3a:62:d2:3e:44:c9:5a:a9:84:2a:c0:e7:ea:70:94:6a:
         e0:ca:07:c6:dc:4c:07:66:37:26:6f:f0:48:0b:46:6a:77:48:
         40:42:d3:7c:64:fc:bb:81:a2:56:c2:b2:5f:0c:4f:5c:ca:22:
         d4:ab:43:3a:8d:4e:56:ba:41:36:db:7a:26:23:44:30:c4:87:
         44:7f:25:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:47 2025 by rpki-client