Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
File:                     6_QugGAq7fWKPHqBiDwaNPadL7Q.mft (raw, json)
Hash identifier:          3iyxivoX4ZE0QSKOMDb0KurkrC4Bexf+SmFelwzUxeU=
Subject key identifier:   35:B4:55:94:60:F3:71:66:04:47:B6:C8:17:42:83:9C:CB:6A:5E:74
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Certificate issuer:       /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial:       019847AD75C67F48F133F53E5860EC57D378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
Manifest number:          1609
Signing time:             Sat 26 Jul 2025 17:00:06 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:06 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:06 +0000
Files and hashes:         1: 1-FAoR0vAZm3dzG0um_3k65SL5TI.roa (hash: Z7jt+DdbWf3pwnfnzk8lFhhbswv5u6TZqI6guWDiRjQ=)
                          2: 3QxI6To-uBD8VNFlEhdssjXoWrI.roa (hash: HmjDXwUNgzxXtwwpdO5VKAGMQ32bThuniB8/ERpMEkQ=)
                          3: 6_QugGAq7fWKPHqBiDwaNPadL7Q.crl (hash: YNrSbpz+SvRO8CuExeft0iPQgnwZgCK2vvN1NhbrOF0=)
                          4: 77N0kmrV8mibL0ZZuY__E5caV3Q.roa (hash: 7FreglCopyDmY0fkGei7tZ4UAKD5765zaWn0X7I2nXQ=)
                          5: 8_8saIG1ORSm_YCA9iSYkOyNtG8.roa (hash: h1qskB6Go3quKENj6oML6S5bD/J6RTaHlI5gK7XGo5U=)
                          6: FlMwpVhhzOnlI98FCuuPuGot9bQ.roa (hash: /BsQPEbTnqDnW/pY6NV7HtiCNmoT7eOQLfGKTzTDd9Y=)
                          7: IrmBgkgcgkreze6614a3_bfIQpY.roa (hash: +7FInOTr287RxeFcE2HI5uBa//SqE2joxbyN0vKhyng=)
                          8: MT573pEq_RyXUUcfGIbwT1pD_Hs.roa (hash: NuUZy/HbToN9OY8Rgu/IY49OOt82oEzND1AOE6oFvMc=)
                          9: OmcfFFZzPunpA0JKxY5aSHlIdLs.roa (hash: jiXiSxHvIeL7aXpkY1YBlUxCKFy/UT0TwfOxJINxL44=)
                          10: R-zlTRCJQKSl_ewTqXfOSc7Vtqg.roa (hash: XFEzs0M4a9iEaS9JRy7Vq8jW1pcSigBA3pXsUq6EUXE=)
                          11: Ti07Uyiwydtx70Fo4ZSOknQDq74.roa (hash: neZXH2Iv0AXdAdXicGtr3TbVbV4P5M8haxVZ5CVBdJE=)
                          12: UimCrRoW77_TuE98ROM6a4r3M7k.roa (hash: 5uqrCJNuVVErs9qDZ0SX3YHeKjIrW7sTvt0m5uxJW80=)
                          13: ce7bRJLV8rerlyXCA59ggsuaJJ4.roa (hash: D1jC3YawC6llHDKXJqNdtBd6CMif5efjxFmdAEH9kG0=)
                          14: sFxhOh1PlCNNPaAQedPBLR7rPuc.roa (hash: vfIIhwyxG18L5/cjteWvpMiwzteNdc0nLyk3uUG6qQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:75:c6:7f:48:f1:33:f5:3e:58:60:ec:57:d3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
        Validity
            Not Before: Jul 26 17:00:06 2025 GMT
            Not After : Jul 27 17:00:06 2025 GMT
        Subject: CN=35b4559460f371660447b6c81742839ccb6a5e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:74:17:34:cc:f5:3f:88:04:7f:04:0f:c3:63:
                    6b:ed:0b:35:a4:5e:af:06:f3:43:f1:2a:48:f5:05:
                    a9:70:47:42:3e:37:87:ed:2a:ff:2a:dc:5a:25:3d:
                    ee:70:31:85:0f:ff:b1:1b:f9:ac:a6:53:3c:fc:a5:
                    45:ac:53:30:cb:6d:a3:6c:00:8e:90:e4:85:22:7c:
                    4f:ee:8f:22:90:58:4c:5a:23:81:57:b6:84:55:5b:
                    22:3b:24:fe:c5:ac:c9:b3:1b:0f:c5:6b:39:5f:9f:
                    c0:ff:19:ce:ac:0b:23:59:8d:bc:9a:84:fa:e7:45:
                    13:65:8b:df:23:25:4d:16:2f:92:b3:b3:08:37:3d:
                    ec:a1:ea:14:ce:dd:8d:2a:ff:d7:c5:46:03:37:be:
                    64:b7:4e:2b:fd:1c:dd:de:a2:ae:b7:85:35:30:91:
                    db:df:1b:18:80:8d:7c:66:e9:80:05:50:c1:89:c2:
                    87:3e:65:83:6a:22:ef:3f:d5:c2:3a:ee:43:80:0c:
                    6f:84:21:42:dd:f7:d1:e1:be:9e:9e:09:4c:34:af:
                    cc:ea:98:c4:48:6d:8d:5a:0c:4c:f7:88:a5:a5:6e:
                    f8:1d:51:72:d4:02:ae:b0:c7:86:5d:af:bb:85:fa:
                    c5:b1:90:ee:0d:64:66:7e:34:4a:42:0f:67:60:6c:
                    b3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B4:55:94:60:F3:71:66:04:47:B6:C8:17:42:83:9C:CB:6A:5E:74
            X509v3 Authority Key Identifier:
                keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0a:c1:16:f6:55:1b:51:c1:f7:10:2d:30:6c:19:bc:27:e5:
         80:58:4f:d7:e9:33:a9:b8:23:26:ef:8b:35:ea:5a:0a:ae:83:
         d8:ca:96:e3:44:e7:b6:a9:6c:87:0a:53:c8:04:36:42:d1:24:
         3a:87:5e:5d:51:47:be:8b:6b:54:49:01:07:e8:bc:58:b8:ad:
         de:ac:8d:99:ac:d9:af:0f:4b:a1:68:e8:fb:d9:8c:d6:d4:27:
         5c:d3:22:29:4d:1e:66:20:87:71:ba:3e:8d:16:89:b3:be:21:
         4e:89:c7:bd:68:bf:02:6e:a9:ee:3d:63:0e:16:83:12:e7:74:
         d3:7c:7f:fc:d5:ab:b6:50:e3:c5:fc:2b:8b:41:be:16:91:c8:
         fa:3b:40:24:9d:c5:7c:57:fc:72:0d:bb:b9:bd:1c:7f:fe:c6:
         70:21:0c:8b:18:7a:d2:6f:b7:51:41:ae:a7:1e:f3:bc:12:76:
         7c:f5:ee:21:f9:91:24:57:97:81:ca:73:a6:97:bf:31:f9:26:
         ee:ab:8e:cc:6e:88:28:81:11:3e:88:39:9d:8b:3a:cb:e6:3a:
         7b:be:ad:1e:61:11:c1:6c:b0:78:b8:b0:5e:59:80:99:1f:d8:
         80:f8:13:ad:33:17:af:e1:70:1f:ce:3f:dd:7e:6f:25:68:b0:
         2a:39:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:16 2025 by rpki-client