Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          3MMeBzcSwemgSxcnqzXZPNRtcpnFqsgNnByro9Boj+E=
Subject key identifier:   73:12:B0:D8:F5:BB:30:60:6B:90:06:17:35:FB:E9:11:2E:3D:EB:EC
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       0199C3EA3EBFCBED31497CA305DD6193A2EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0802
Signing time:             Wed 08 Oct 2025 13:02:12 +0000
Manifest this update:     Wed 08 Oct 2025 13:02:12 +0000
Manifest next update:     Thu 09 Oct 2025 13:02:12 +0000
Files and hashes:         1: 1-rRPCopFYmDMNDGALSnqCobspg8.roa (hash: 6hVXHifql97bRcIsJvQpXwPkBPemWPvtCyhSEbh0CDo=)
                          2: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=)
                          3: CSQOd1Ivsq7SauN1-IwPUSzYm48.roa (hash: dGIueTuGLpuTY7iHF/OWsqSj5IRgJq+ixisf6vrNlv0=)
                          4: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=)
                          5: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: dvUbqeqCnYhxVeXGkOkKnrCBBigRouTYlmguFKUxrRQ=)
                          6: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c3:ea:3e:bf:cb:ed:31:49:7c:a3:05:dd:61:93:a2:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Oct  8 13:02:12 2025 GMT
            Not After : Oct  9 13:02:12 2025 GMT
        Subject: CN=7312b0d8f5bb30606b90061735fbe9112e3debec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:ce:96:8f:9b:99:d0:4f:cd:cd:8e:7c:a0:
                    34:7d:5f:d8:2c:49:10:e7:87:7b:46:df:44:e7:44:
                    94:10:2f:47:ca:8a:9a:4f:b7:fb:f2:0e:41:6f:48:
                    fb:85:d9:b5:22:d9:42:55:7e:06:fe:5f:11:50:70:
                    d7:84:96:f6:29:2b:fc:d0:8d:cc:10:9d:c0:8e:e0:
                    08:27:a4:1a:bc:92:99:55:0c:55:5d:c8:7c:e3:d1:
                    bc:a6:c6:fa:c9:28:55:e5:cb:cf:c2:25:f4:3b:5b:
                    a0:96:6e:8b:04:40:0e:17:6f:95:af:4d:43:13:a9:
                    eb:fa:19:34:df:d2:83:d7:65:68:c9:05:ae:dc:c6:
                    1a:10:84:bf:b3:e3:c0:be:9f:db:8b:9d:e1:72:f1:
                    6d:a7:9b:16:de:66:37:79:d7:69:d1:f2:6c:ef:b2:
                    9c:b4:7c:ce:ac:03:b5:d5:1c:38:da:1a:88:7f:4c:
                    c7:24:a6:1b:a1:e1:ae:da:92:08:0f:fa:32:9c:24:
                    46:36:dd:c8:fc:61:09:f1:2e:75:ee:f8:6a:0f:2e:
                    f8:de:ee:9b:e3:b0:ff:52:07:88:63:4e:11:87:0b:
                    65:30:ae:d8:a8:8b:3b:d7:0f:a1:c1:00:9e:5a:e0:
                    1c:59:da:66:71:db:e3:42:46:05:46:64:b8:b0:2d:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:12:B0:D8:F5:BB:30:60:6B:90:06:17:35:FB:E9:11:2E:3D:EB:EC
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:01:95:c6:99:c6:a3:07:1b:71:15:2f:6a:45:c7:aa:c3:
         2e:ed:ed:26:62:f5:e7:fb:84:c5:ec:9f:cf:92:b0:25:86:85:
         94:cd:ca:7e:b7:9f:78:b1:9d:48:32:ce:db:94:e3:e0:56:f3:
         9c:00:45:66:b0:8e:ac:c4:b8:78:74:82:98:83:e4:bb:ba:8b:
         49:f8:d8:41:ba:ad:29:25:33:b2:de:56:35:c6:ee:0e:4d:f1:
         5c:d3:a4:8a:23:18:c8:5c:06:7d:bf:bd:c2:24:bf:34:23:22:
         d1:11:3b:bd:d7:49:38:81:57:1d:ea:c3:65:df:1b:06:1a:6f:
         01:10:2c:a8:32:f5:63:a7:bf:9e:e9:cc:5d:20:7d:30:97:2e:
         06:e3:fe:f7:da:14:bf:58:43:7b:68:7a:a5:9f:4b:b8:27:c1:
         c6:f7:7c:33:89:c4:3c:8d:bc:24:57:d6:fd:fb:f3:78:df:fc:
         cb:c8:54:3e:f4:06:7b:39:16:10:14:f3:65:77:b4:03:14:35:
         f7:07:3e:4b:10:5d:cf:49:c9:46:37:c3:62:5c:13:1f:3f:eb:
         f4:af:55:6b:e3:d0:47:18:80:48:ac:6e:00:0a:b9:5e:b2:bf:
         7d:22:3b:05:3f:ce:18:cc:07:f5:5e:70:39:63:95:74:c8:c2:
         4c:2a:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:31:54 2025 by rpki-client