Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
File:                     C6C-CUpak9B84Z5GvmL5_85jRYM.mft (raw, json)
Hash identifier:          yWQr+10z5ZjkM6ns8gl9KmyJsMEcqbsqDiaQ42IsviY=
Subject key identifier:   2D:B5:58:F4:28:D9:6E:D5:F8:82:FE:0B:AD:7D:DD:5D:B1:D1:03:38
Authority key identifier: 0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83
Certificate issuer:       /CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
Certificate serial:       0198D5BBA9A68FD37EEB2B76EB974C04A499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
Manifest number:          0D29
Signing time:             Sat 23 Aug 2025 07:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:42 +0000
Files and hashes:         1: C6C-CUpak9B84Z5GvmL5_85jRYM.crl (hash: tamPbBhCGCkCE6AsdePDbQkUYPCejxSPeWEMpz9aZbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:a9:a6:8f:d3:7e:eb:2b:76:eb:97:4c:04:a4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba0be094a5a93d07ce19e46be62f9ffce634583
        Validity
            Not Before: Aug 23 07:01:42 2025 GMT
            Not After : Aug 24 07:01:42 2025 GMT
        Subject: CN=2db558f428d96ed5f882fe0bad7ddd5db1d10338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:70:27:1c:d9:7a:24:05:4d:ac:aa:25:fd:
                    dc:e2:b3:f9:3d:66:48:bf:ad:04:ff:48:57:4a:0f:
                    ea:a3:cb:e6:1a:3c:95:f8:5c:4d:a1:04:20:d0:b8:
                    01:ce:b2:16:4c:ba:49:11:b6:ac:ef:e2:ad:d5:6f:
                    d1:e1:d8:61:49:c1:04:b8:b9:40:a5:ad:5b:21:36:
                    dd:5e:57:e8:e1:4c:78:31:d9:d5:20:dd:10:8f:be:
                    d7:f0:ee:f3:54:fb:3d:b3:d8:af:0b:d1:43:80:1e:
                    7d:4d:e1:23:5b:90:14:b9:dd:b1:60:a6:8e:bb:14:
                    db:40:f6:94:38:38:71:2f:34:81:a5:59:1c:69:97:
                    e5:ac:6b:c7:19:1f:a4:14:d1:4e:f3:ca:71:70:d6:
                    80:c7:c8:c8:89:1c:b7:03:4b:1f:90:01:92:09:85:
                    a2:1f:9b:6d:20:a1:49:20:ed:22:6f:d7:ff:23:fd:
                    5d:4c:33:44:fa:cb:c8:2b:38:19:35:4a:fe:a5:1c:
                    d8:f9:ea:5e:af:bd:bd:5a:b7:94:29:0c:ea:80:25:
                    3b:96:59:20:c7:09:21:ad:00:f5:28:b8:9c:70:af:
                    86:99:b0:ac:3f:e5:a5:6f:24:26:a8:16:cb:c7:ba:
                    4f:41:6a:83:90:38:f5:af:d8:ff:60:56:31:5c:81:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:B5:58:F4:28:D9:6E:D5:F8:82:FE:0B:AD:7D:DD:5D:B1:D1:03:38
            X509v3 Authority Key Identifier:
                keyid:0B:A0:BE:09:4A:5A:93:D0:7C:E1:9E:46:BE:62:F9:FF:CE:63:45:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6C-CUpak9B84Z5GvmL5_85jRYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e9152a-1bf6-4609-b641-bfcab32dafc6/1/C6C-CUpak9B84Z5GvmL5_85jRYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:77:23:d1:30:8e:93:9f:75:c7:71:87:62:64:a3:a5:9c:
         a7:64:38:0c:b1:58:fd:19:2d:72:4b:18:a6:bc:d3:f1:42:dd:
         da:01:21:de:a6:65:a9:b8:a3:b0:ab:38:76:63:49:34:d2:a8:
         5b:cb:b3:49:db:ea:f6:90:3f:9c:3d:c5:a6:a1:00:08:6c:3c:
         ca:67:b6:87:6e:e4:e5:b0:a3:8d:f4:fd:0c:34:13:e5:b0:6e:
         32:a5:45:fe:27:c5:39:5f:6d:3c:de:a1:19:cc:8b:75:3d:2c:
         36:04:07:a5:52:20:a0:73:71:65:d1:3d:20:13:06:d5:41:1f:
         a4:24:42:ad:ba:c1:f7:3b:6f:0b:31:48:31:44:92:72:2e:d6:
         c9:e4:5a:e6:34:6a:26:98:4e:67:b5:21:3e:19:9b:0f:71:5f:
         d4:fb:6e:fd:d0:02:0e:b7:f8:62:34:2b:24:9b:b2:fe:47:06:
         a5:2f:9e:34:27:28:7b:44:39:43:e4:78:3e:ed:37:e1:34:f5:
         d4:d9:d3:f2:9b:d3:84:80:fb:b2:a1:10:51:9f:e3:91:ea:98:
         af:bd:1c:8f:d7:59:7a:20:28:ed:3f:19:7e:b0:4b:1e:ef:04:
         cd:f0:62:18:b8:34:3f:ee:6d:b3:f8:a8:75:61:6b:78:e0:e9:
         8d:e0:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:55 2025 by rpki-client