Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          +U2/ZViMwHYnagD2U4ZwkeOPr5ZtbdwrTpwCdunNI90=
Subject key identifier:   2F:A1:F0:42:C3:CB:44:0A:F4:61:90:0A:40:BA:E5:A8:3A:96:FA:96
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       01984AE5A104DFB14DA373A5281CEEF3270B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          10AC
Signing time:             Sun 27 Jul 2025 08:00:19 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:19 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:19 +0000
Files and hashes:         1: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (hash: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=)
                          2: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: tkem6hMWONU3eOoRRV+FSo5AK29aFIu22jG/jxavAJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:a1:04:df:b1:4d:a3:73:a5:28:1c:ee:f3:27:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Jul 27 08:00:19 2025 GMT
            Not After : Jul 28 08:00:19 2025 GMT
        Subject: CN=2fa1f042c3cb440af461900a40bae5a83a96fa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8e:0a:7b:a6:5c:09:24:ab:16:90:00:22:aa:
                    93:1c:da:de:15:8f:5d:6a:6b:09:b5:7f:e8:97:8a:
                    dc:4e:b8:07:da:ae:bf:17:3e:86:d9:02:51:cf:ac:
                    b4:75:56:5f:c8:3b:46:e1:52:09:64:b9:87:af:61:
                    6d:a4:16:48:c0:4d:4e:fb:70:03:f9:84:1f:7c:50:
                    cf:f0:4c:51:69:fc:12:c5:ef:fc:fa:84:60:85:98:
                    a1:6b:05:d6:18:6c:84:d9:e8:3c:d5:58:bc:60:97:
                    74:ec:7a:92:47:63:88:80:2a:1c:26:22:3a:b9:14:
                    13:3f:67:07:30:92:f7:7b:16:01:ed:b3:ee:b5:53:
                    4e:58:ee:84:15:07:58:ee:3a:7d:f7:52:41:ac:a6:
                    dc:c7:fb:20:be:bc:96:a1:7f:22:e9:ee:65:a5:b7:
                    43:16:f9:93:95:f1:ad:fb:dd:09:c7:9d:ee:e4:3a:
                    e1:7a:ea:34:39:08:c4:9a:b6:4b:c9:20:aa:c5:57:
                    ed:24:b3:05:53:a2:7d:15:d2:bc:f9:95:68:53:60:
                    ff:27:96:3e:b3:f7:7f:67:54:70:1d:97:26:17:45:
                    e3:b9:59:32:ad:82:10:ca:d0:40:70:56:2b:0c:47:
                    64:3b:c8:da:be:19:7b:08:02:5b:52:f1:64:55:1a:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A1:F0:42:C3:CB:44:0A:F4:61:90:0A:40:BA:E5:A8:3A:96:FA:96
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:25:79:32:ce:e0:4e:6c:b6:cf:9c:d0:ea:32:74:20:5a:29:
         91:cf:2e:d1:bc:a5:67:6a:9d:d9:5d:bb:6a:1b:cc:1d:e1:70:
         41:61:82:f8:3c:5e:22:a8:e1:e2:4b:e5:1a:32:fc:7b:13:e2:
         2d:45:38:4f:12:17:8a:85:ac:e7:e7:4c:5e:b0:f5:c4:91:ed:
         b1:1f:13:4e:ae:40:da:53:e6:55:1c:ba:e9:ff:d6:3a:92:a1:
         92:63:0e:1a:c8:1e:08:e9:aa:a5:4b:d0:6b:5b:9b:4e:83:6b:
         02:3a:52:9c:b8:8f:bc:31:b4:6a:c0:d1:02:66:7a:04:5b:9c:
         c6:6b:b8:24:78:1d:3f:f5:08:3a:d1:8f:af:f0:4a:99:9f:b1:
         fc:f5:07:be:01:17:b7:67:1b:a3:10:00:07:d3:6a:2b:32:16:
         ea:f2:bd:b4:4c:98:80:66:91:c3:c4:cb:e1:af:13:20:b1:b8:
         ab:9a:c6:ec:21:0e:10:67:b2:fc:ad:5a:0f:a1:19:3e:2f:56:
         3b:b7:ab:7a:66:b6:b4:43:c7:ee:45:19:35:6d:0b:b8:5f:fa:
         13:a5:61:69:b5:d4:d1:b8:1d:a4:eb:ac:b4:c9:5b:15:1c:05:
         cc:90:72:fe:b3:94:69:a3:60:43:d2:34:66:ee:41:cb:55:a9:
         34:a4:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:46 2025 by rpki-client