Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
File:                     d6ssFiF5lXMJnEAq6R_8V5ada5s.mft (raw, json)
Hash identifier:          qq5Qq6VQZ9cV+s3Y5VohATlIy4FoR2WuGEBysQpA0kY=
Subject key identifier:   8C:10:D6:25:F1:C7:98:FD:08:F1:67:AE:AF:A5:B4:E9:08:03:65:CA
Authority key identifier: 77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B
Certificate issuer:       /CN=77ab2c1621799573099c402ae91ffc57969d6b9b
Certificate serial:       0198D6986F29F2474C6419D429D3A1E0540B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
Manifest number:          06
Signing time:             Sat 23 Aug 2025 11:02:50 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:50 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:50 +0000
Files and hashes:         1: d6ssFiF5lXMJnEAq6R_8V5ada5s.crl (hash: T5aHXg2Q54e5D8fdIVno7qJDj2HMlN6CHoe4DS90tj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:6f:29:f2:47:4c:64:19:d4:29:d3:a1:e0:54:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ab2c1621799573099c402ae91ffc57969d6b9b
        Validity
            Not Before: Aug 23 11:02:50 2025 GMT
            Not After : Aug 24 11:02:50 2025 GMT
        Subject: CN=8c10d625f1c798fd08f167aeafa5b4e9080365ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:55:f1:63:49:f0:b3:be:91:d3:38:a0:61:76:
                    ee:6a:4e:66:f9:6f:b4:92:90:c3:fa:a8:b2:e1:59:
                    53:27:70:2e:60:26:b0:8e:50:6c:58:ab:a5:8e:1d:
                    00:11:15:c9:27:c2:6c:7c:7f:95:b3:f5:e7:15:62:
                    a1:8f:54:1d:91:18:44:12:de:c6:d9:49:3e:af:98:
                    77:74:a2:88:97:59:92:44:7a:59:dc:d4:40:6a:5c:
                    53:e9:a5:75:d2:da:49:55:30:10:73:80:e2:ae:ed:
                    f5:0d:81:10:a2:20:bc:2b:19:fa:a1:31:a0:80:4a:
                    b6:3e:1b:39:08:1a:19:93:cf:0f:15:ed:34:15:4f:
                    1c:c2:4f:22:61:81:10:ac:89:71:a8:34:97:58:42:
                    39:e4:c9:9b:e7:a1:84:f6:63:5f:74:27:29:17:03:
                    c7:25:6d:95:3d:fd:73:76:43:d4:dd:3d:05:67:8c:
                    29:6a:d3:39:2f:b9:f6:da:d8:d6:13:af:ef:75:41:
                    af:69:bb:95:43:7a:5a:e4:f8:2a:e7:9e:fb:29:4c:
                    00:49:44:bf:8b:5b:46:60:ec:35:eb:9b:9e:6f:03:
                    e7:3b:3f:54:e3:42:d6:a1:55:7e:16:2c:5d:ec:35:
                    ce:fc:92:bf:3f:a0:22:8f:77:ce:3f:6c:47:e6:f6:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:10:D6:25:F1:C7:98:FD:08:F1:67:AE:AF:A5:B4:E9:08:03:65:CA
            X509v3 Authority Key Identifier:
                keyid:77:AB:2C:16:21:79:95:73:09:9C:40:2A:E9:1F:FC:57:96:9D:6B:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6ssFiF5lXMJnEAq6R_8V5ada5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/30655f-59c3-4dc5-ab2c-397bc4031594/1/d6ssFiF5lXMJnEAq6R_8V5ada5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:dc:02:8c:57:0c:97:fe:23:ba:f6:fe:10:cb:29:91:cd:57:
         e1:74:b2:04:af:cf:2f:b3:2e:cb:56:6b:bc:1d:36:1b:c9:a3:
         c0:5d:26:a5:a1:56:b2:59:b8:96:4e:83:37:89:bd:62:82:6b:
         ee:77:58:c0:f3:eb:03:db:4f:dd:d2:61:38:24:92:a8:3c:d6:
         7c:9f:bb:1f:2f:d2:4f:5a:12:dc:b1:e0:8f:2a:5a:f7:68:8a:
         58:9d:44:92:6a:86:46:80:02:0c:b9:15:30:27:de:cc:50:8b:
         f2:9a:b8:d7:83:1f:82:f3:21:21:39:f7:32:c2:24:43:95:85:
         bc:c9:b8:04:94:d4:30:8a:95:6c:b9:ea:a0:4c:d9:7a:d1:8e:
         86:ad:63:0c:18:e6:41:94:b3:54:2e:01:cc:b4:77:bf:c1:16:
         48:96:2c:5e:a3:22:27:0f:26:b7:f4:6e:6d:99:41:33:d6:34:
         a0:77:7c:1d:4a:77:64:13:16:2e:77:6f:23:82:53:30:56:93:
         5b:9d:7e:fd:70:c0:c0:7f:ce:b5:49:c8:c7:f4:65:c3:d5:47:
         40:13:4c:08:80:3d:d5:25:25:ea:67:a4:a6:db:6e:cb:7a:6b:
         85:91:f7:cc:70:7d:6f:6a:58:31:ed:07:ff:4c:1c:d1:35:d9:
         79:90:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:35 2025 by rpki-client