Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
File:                     6w1TyHBxSElxrt_ZDKbsxlapbkw.mft (raw, json)
Hash identifier:          LV/POG09ehcY57DIqbe54wu1R9F+MX0834ktJqw9WME=
Subject key identifier:   FB:4D:DC:47:1F:27:8F:F2:BD:C5:C5:46:6A:B9:42:D1:4F:9F:5F:14
Authority key identifier: EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C
Certificate issuer:       /CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
Certificate serial:       0198477782EBD8A6FA47CE5DC3400082E4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
Manifest number:          1368
Signing time:             Sat 26 Jul 2025 16:01:11 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:11 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:11 +0000
Files and hashes:         1: 6w1TyHBxSElxrt_ZDKbsxlapbkw.crl (hash: 4xFRtXO0duKwls3EqilCl0cRCnjjLBQye42sK3/froQ=)
                          2: YkR2BYjR8H6AIv6VEy2x5d5CWk8.roa (hash: SiNOMuWGV4TsQMwgoAyZOniwZQdTB+FIJF2k4b3IHek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:82:eb:d8:a6:fa:47:ce:5d:c3:40:00:82:e4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0d53c87071484971aedfd90ca6ecc656a96e4c
        Validity
            Not Before: Jul 26 16:01:11 2025 GMT
            Not After : Jul 27 16:01:11 2025 GMT
        Subject: CN=fb4ddc471f278ff2bdc5c5466ab942d14f9f5f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:57:58:ba:a9:14:d1:0b:7a:37:de:5a:79:a6:
                    10:da:d7:18:d2:69:42:8b:08:0c:ec:c8:2e:51:9f:
                    ea:f3:2a:aa:fe:78:b2:c5:ab:92:4e:f0:8a:35:af:
                    c8:06:6d:e4:77:0b:76:fa:0d:bd:7f:a1:d5:a7:9e:
                    f4:b0:6d:e4:9a:98:00:b8:bc:c8:7b:8a:f9:cd:db:
                    28:bb:9c:f3:be:1b:f1:c3:8f:6b:97:2f:4f:b1:d7:
                    f8:88:7c:54:3c:18:6d:c6:45:9f:11:78:52:a5:c2:
                    cb:44:6b:58:7c:bd:41:4d:69:88:03:f4:75:de:b9:
                    44:53:6a:49:a2:7e:f5:cd:64:df:8a:6f:92:c1:09:
                    31:0e:8d:6c:2a:82:b0:8a:7a:a2:57:55:31:4d:b0:
                    86:bc:ff:d8:a2:1a:6d:a6:13:ed:4d:e5:3c:43:4c:
                    ca:96:03:2d:4f:09:44:13:ce:bc:94:78:7d:09:03:
                    af:ce:eb:c5:02:62:c2:90:2b:ac:bb:2b:4d:87:cb:
                    6b:75:21:57:c4:a9:56:56:91:74:46:f9:35:a1:9e:
                    6b:6d:02:16:aa:cc:65:42:fd:02:62:71:f9:cf:0e:
                    a7:2d:d0:59:e0:ca:e3:6b:59:ed:64:b1:a4:80:4a:
                    f7:8b:88:80:1d:ab:23:99:08:30:4e:ac:fd:82:8e:
                    cf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4D:DC:47:1F:27:8F:F2:BD:C5:C5:46:6A:B9:42:D1:4F:9F:5F:14
            X509v3 Authority Key Identifier:
                keyid:EB:0D:53:C8:70:71:48:49:71:AE:DF:D9:0C:A6:EC:C6:56:A9:6E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w1TyHBxSElxrt_ZDKbsxlapbkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/503458-1dc4-4102-9427-d6398183525d/1/6w1TyHBxSElxrt_ZDKbsxlapbkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:2f:82:d6:ca:2e:65:7b:8c:fd:09:54:fc:69:3d:06:85:e6:
         d6:ce:94:41:3c:be:1d:33:fd:a4:c5:4f:6b:f6:48:3b:30:1b:
         a9:bb:27:49:85:1f:9c:6a:c5:b7:fd:4b:af:a9:b6:7b:58:a7:
         03:50:92:04:45:a3:e6:09:19:fb:f5:5d:7a:22:6d:a7:94:9e:
         de:d5:66:6c:6f:c8:ad:25:23:2e:9c:28:10:b8:60:e9:7f:3e:
         76:87:b0:56:40:22:58:5e:05:b8:50:8d:0b:de:ca:79:97:86:
         47:b3:c3:7a:2e:5f:f8:d0:75:94:ea:4a:e5:18:63:56:df:d0:
         20:af:50:1b:17:b5:48:72:9c:3e:81:43:48:d6:93:87:51:d2:
         68:7a:d7:1e:d8:c9:1c:80:34:55:4a:1c:26:a0:0d:b8:4a:1b:
         a5:e4:b9:f4:7c:58:32:f7:a2:3e:87:30:43:18:bf:cb:45:3e:
         84:dc:6e:93:ff:85:e9:25:ea:b9:c4:07:c5:34:34:c8:70:9e:
         6c:0c:68:bf:70:56:f4:2b:08:f3:07:69:67:33:82:c8:00:90:
         1e:b9:91:92:85:a8:93:26:43:c8:e0:e1:a6:c0:ee:2d:85:6f:
         14:df:6c:f6:8c:a6:ec:e8:36:b3:08:dc:e3:cf:1d:3b:ad:00:
         51:dc:46:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:23 2025 by rpki-client