Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File:                     g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier:          KGjO/WcHOqJqazaaw42vefjKU3kiFe5ubBDwyevxWu8=
Subject key identifier:   69:BC:6B:D7:E4:D1:6F:52:9B:BC:61:3A:20:37:5B:D0:B7:4B:29:57
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer:       /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial:       0197C07F90D3819EE815724BEAF62B6C6415
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number:          154E
Signing time:             Mon 30 Jun 2025 11:01:14 +0000
Manifest this update:     Mon 30 Jun 2025 11:01:14 +0000
Manifest next update:     Tue 01 Jul 2025 11:01:14 +0000
Files and hashes:         1: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (hash: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=)
                          2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: 0cb3fdhUgHfksIlEBfWkkj2Q7m9z8XNlNP1daUyYdjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:7f:90:d3:81:9e:e8:15:72:4b:ea:f6:2b:6c:64:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
        Validity
            Not Before: Jun 30 11:01:14 2025 GMT
            Not After : Jul  1 11:01:14 2025 GMT
        Subject: CN=69bc6bd7e4d16f529bbc613a20375bd0b74b2957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:7c:17:a2:f8:10:69:0d:96:d6:e1:8a:e7:
                    10:c2:33:df:50:98:33:bd:37:68:1f:3e:97:bd:d7:
                    28:24:12:ce:80:92:30:b8:ba:6c:24:0f:4a:a0:c0:
                    3b:ec:56:1c:d6:63:d9:10:d1:fb:83:ed:0c:7d:74:
                    59:64:f8:30:e7:cb:f6:8f:20:fd:c1:f2:7f:1c:c6:
                    b3:39:a3:89:56:6c:57:6c:51:e7:03:f8:ed:4e:e6:
                    0e:36:55:e8:44:b5:45:2c:21:dd:e7:ac:ef:74:e3:
                    40:33:43:b4:f7:b5:47:d5:25:f1:ad:ba:65:aa:fb:
                    21:e7:85:ad:dc:10:59:2d:29:52:ed:cf:97:d1:96:
                    c0:45:95:55:82:92:2d:56:32:dc:09:8d:26:da:fa:
                    f3:69:aa:5d:3d:a4:ae:5e:5a:86:17:8d:99:c4:ca:
                    e2:7a:4f:c1:3c:d1:9b:70:86:74:7e:00:96:30:8f:
                    94:1d:ec:4b:63:16:15:43:79:fa:87:14:6e:82:04:
                    f3:dd:4c:0b:0b:35:56:a8:04:7f:e0:ae:25:3e:0e:
                    b3:52:11:b3:24:89:fb:30:51:20:9a:7f:fc:fe:0d:
                    38:97:ea:21:9e:45:bf:cc:b0:c4:7c:4a:8c:4c:e5:
                    da:4e:c3:c5:50:63:21:05:3d:f9:39:a4:92:7f:c8:
                    14:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BC:6B:D7:E4:D1:6F:52:9B:BC:61:3A:20:37:5B:D0:B7:4B:29:57
            X509v3 Authority Key Identifier:
                keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:53:59:3c:db:16:b5:ba:22:29:97:2d:fa:ee:fb:95:ac:59:
         80:a5:dc:ad:cb:d4:08:91:ec:e3:d8:b0:1d:61:0a:55:b7:5a:
         f4:af:5b:9a:59:a9:8e:4c:1a:2e:7d:43:7b:87:a2:0b:b3:e3:
         a8:1c:48:4e:e2:88:c2:46:b1:36:01:d6:5d:ba:dc:ca:df:69:
         47:1a:d4:fc:c4:09:d0:25:6d:77:6f:2d:ed:74:bc:6e:92:6f:
         68:d3:a5:e1:cc:cc:df:af:ff:ae:5b:68:e1:84:2c:e8:49:27:
         82:bc:3a:88:8b:bb:ec:77:29:c6:32:a3:1d:b9:e4:fd:fe:d0:
         ff:42:e7:a8:ab:70:0e:21:a5:a1:50:e6:f2:c8:a2:f3:43:3f:
         f4:4c:c5:3d:53:b8:38:90:5c:8f:c7:0e:5e:34:38:65:db:9d:
         6e:5b:78:66:3f:0b:19:32:e8:8b:e9:cb:65:5d:08:72:e1:4e:
         b0:23:9c:8b:73:d4:a5:72:26:3b:e4:df:2f:43:e4:31:e5:82:
         c5:2d:c0:66:97:c3:63:22:1b:66:3d:5f:36:77:8a:0d:65:62:
         d9:1e:b7:9c:ea:16:27:2d:1e:f3:84:cd:af:b8:bd:e5:9f:72:
         33:5b:4c:0d:ff:75:9d:5e:97:79:84:94:29:ae:7f:90:cb:77:
         f4:16:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:06:16 2025 by rpki-client