Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          1JPa3od9Fs3aJSRr/KZneQUY2Fa1EeiW6gRTwuJqnpY=
Subject key identifier:   F3:8F:DB:CC:2C:3D:8B:19:80:82:A5:B4:20:C5:A7:A4:0E:56:BD:AD
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       0198D5F1760EBA6B59C005375EDFBA82825C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          0A32
Signing time:             Sat 23 Aug 2025 08:00:28 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:28 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:28 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: e+teAFcRk08mJpKH0HuP0K87/4yi50w5LHj93SRksPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:76:0e:ba:6b:59:c0:05:37:5e:df:ba:82:82:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: Aug 23 08:00:28 2025 GMT
            Not After : Aug 24 08:00:28 2025 GMT
        Subject: CN=f38fdbcc2c3d8b198082a5b420c5a7a40e56bdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:29:7d:5e:a4:50:ad:d5:34:cc:67:88:d4:70:
                    c2:7c:c9:a0:19:4a:7f:ba:d6:61:49:86:96:53:da:
                    d4:7b:f0:21:1e:83:e5:fc:e2:f3:a2:3d:a8:a0:a7:
                    2b:87:d8:dd:9c:a0:58:19:fd:63:73:ec:30:09:1e:
                    01:48:dd:5c:d4:16:13:29:aa:2b:bc:e0:eb:83:b5:
                    8a:de:2a:3d:f5:2a:0f:05:c5:bb:17:b4:5c:84:23:
                    81:35:16:2e:12:5b:52:a7:d9:cb:6b:46:cb:1f:e2:
                    c0:4a:87:8d:8d:59:0e:7e:47:78:17:e9:36:7d:5a:
                    6b:45:6e:00:4a:ec:6e:f5:7b:3d:ab:8c:1a:89:e0:
                    b4:84:fd:9e:e1:a5:bd:16:31:2b:1b:1d:54:f0:05:
                    f3:e2:6b:1f:02:91:b2:3a:f8:98:c2:23:62:32:f5:
                    30:fd:7e:a3:3f:58:99:e4:5c:66:99:67:dc:f5:76:
                    66:d8:6b:91:a0:02:d7:7d:78:b5:ca:10:74:e8:08:
                    04:08:77:ab:c2:c9:f0:6e:67:83:e1:c9:37:06:0c:
                    c2:76:b9:1f:be:30:81:ce:08:32:ea:57:3a:de:ea:
                    35:5f:c9:66:04:42:b4:96:c3:15:3f:29:f9:0d:1a:
                    ae:e9:8f:c4:d6:1b:68:84:e8:f2:bf:d4:e9:8a:5a:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8F:DB:CC:2C:3D:8B:19:80:82:A5:B4:20:C5:A7:A4:0E:56:BD:AD
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:28:61:5b:f4:55:67:64:2b:6f:e0:68:95:62:75:2d:a9:
         a4:68:3f:72:7e:38:0b:c3:57:8c:12:4c:78:0f:40:5f:c2:f3:
         6d:3e:17:44:82:19:b3:5b:1e:d2:8d:d1:22:d1:17:e5:22:f9:
         db:58:88:64:55:90:24:38:d3:cc:ec:ce:89:3e:10:f5:7b:ad:
         7a:8e:03:31:2c:29:14:4c:f0:6e:38:40:d5:c1:ae:2b:53:9e:
         b7:ae:9d:44:a5:07:5c:10:05:65:d1:ad:6b:0a:73:40:85:1b:
         75:cb:4d:c4:55:a4:4b:7c:ea:94:5d:01:b4:8c:ea:a5:70:32:
         fe:e3:25:2f:66:12:93:79:f5:68:2f:b6:b4:f6:72:05:a7:c4:
         5d:f6:b1:51:86:f8:86:41:0d:ab:3c:01:68:9c:5c:7d:a9:0a:
         ed:74:92:34:3b:c9:8f:ed:60:ae:68:a1:8c:d9:01:2a:8b:44:
         5a:9a:32:69:c0:4a:30:63:fb:0f:09:1c:36:9c:27:ab:d2:8c:
         eb:20:88:02:58:16:d7:e8:d8:db:27:b9:04:79:e0:9b:91:34:
         65:1e:bc:e0:42:a0:8a:91:3c:86:d1:12:a3:26:4b:97:f2:b2:
         5d:75:cc:73:98:b9:61:71:82:78:f4:84:db:9e:80:e1:b3:9e:
         e6:ae:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:28:08 2025 by rpki-client