Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File:                     1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier:          167z+K4Mk0FYgO5/1D1yALkquq08tkEoaWZrrKU7yZU=
Subject key identifier:   6D:F1:C3:C6:ED:47:7B:C5:A1:4A:EB:DA:A4:55:BB:3C:E1:E0:63:50
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer:       /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial:       019841ACB38319D219D232B0A61DDF30ECE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number:          0B1D
Signing time:             Fri 25 Jul 2025 13:01:33 +0000
Manifest this update:     Fri 25 Jul 2025 13:01:33 +0000
Manifest next update:     Sat 26 Jul 2025 13:01:33 +0000
Files and hashes:         1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: KfcM1W73zimquABtRIJZKRRG+zTh5Y76qyUbP5+z+SM=)
                          2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:41:ac:b3:83:19:d2:19:d2:32:b0:a6:1d:df:30:ec:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
        Validity
            Not Before: Jul 25 13:01:33 2025 GMT
            Not After : Jul 26 13:01:33 2025 GMT
        Subject: CN=6df1c3c6ed477bc5a14aebdaa455bb3ce1e06350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:01:f2:02:93:98:fd:a9:57:c1:45:b0:ed:
                    04:7f:bf:85:6e:6d:7b:8a:c3:9d:93:d1:9c:eb:d4:
                    9f:9d:74:75:47:ff:d7:75:5b:2e:78:0c:6c:61:32:
                    7c:c3:89:11:1f:1f:7e:53:67:ef:20:a7:04:59:59:
                    71:cd:3c:08:01:34:90:d4:42:10:1b:af:8c:fe:ae:
                    66:5e:99:04:35:1a:cb:72:8d:4b:27:f7:df:ac:09:
                    5c:98:09:33:f3:84:fe:54:9f:33:fc:b3:71:2a:74:
                    a4:3d:b9:98:b6:07:1a:38:d0:de:d0:56:76:bb:9c:
                    87:a6:d6:71:2b:5a:0a:e4:99:4d:41:31:88:c3:6d:
                    0d:f3:e1:a5:9b:a0:86:25:3b:05:ec:83:11:c6:1e:
                    61:24:89:3e:ab:51:94:52:8d:ce:7b:39:5f:62:a0:
                    ce:53:92:38:bd:01:53:4b:31:53:37:e4:bf:8d:82:
                    53:eb:0c:e7:4d:36:f7:a7:fc:47:c4:48:b8:9f:d6:
                    e5:54:73:9e:ed:22:e1:f1:07:45:33:29:ca:47:04:
                    07:a7:f7:a4:e8:d0:af:34:b4:af:36:60:9d:82:ea:
                    53:37:fd:71:d4:ed:dd:24:e4:6b:ab:bf:60:be:46:
                    f6:d1:fe:6d:0b:5f:9d:9d:87:28:f7:98:98:0c:6f:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:C3:C6:ED:47:7B:C5:A1:4A:EB:DA:A4:55:BB:3C:E1:E0:63:50
            X509v3 Authority Key Identifier:
                keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9c:ca:82:8a:d6:f9:5b:e1:8e:d9:a9:41:be:8e:0b:19:b9:
         3f:c1:7f:7b:f5:66:b1:b1:2f:25:1b:85:45:88:d1:18:7b:06:
         eb:3d:d6:c2:dd:88:2b:8a:58:85:6a:02:c3:7e:24:3b:9f:8f:
         f8:72:15:30:3e:be:32:bd:d8:0d:49:21:7b:41:f0:8f:8e:53:
         93:7a:c8:42:6d:32:95:ad:00:51:e6:4e:bd:d4:ad:87:5c:14:
         cc:1b:70:d9:01:6b:ae:28:e9:bf:94:ce:30:a0:70:cb:b3:7b:
         8b:c7:c1:cb:49:bd:b4:68:4f:75:0b:ae:85:7d:65:d7:a8:3b:
         44:75:63:20:e1:e9:d7:1d:87:af:f7:41:54:84:91:8d:df:e2:
         8a:52:93:c5:7e:fc:91:25:a3:e5:c0:7b:b6:ae:03:3f:64:b4:
         8f:69:11:b9:27:73:08:10:9b:c6:8f:28:2b:92:93:7a:6d:05:
         0c:bd:85:7a:64:b7:25:12:76:62:b9:40:b3:c5:47:2c:aa:b7:
         e4:bd:f3:a9:c0:c0:61:6c:32:27:ed:1e:31:64:93:d6:c6:9c:
         f8:57:de:37:5d:cf:69:14:fc:cb:cd:31:66:1e:28:c9:7f:8d:
         d6:8e:de:db:41:fa:e0:d0:df:79:b1:d8:80:48:19:a2:2d:6c:
         1d:4f:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 18:25:33 2025 by rpki-client