Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File:                     IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier:          swv/WkZi6TxQyfcmYrbcrXxz0NDPkXQYwovRRnP2r1o=
Subject key identifier:   09:2D:91:64:9C:19:EB:82:67:23:8A:F2:F5:B1:65:83:5A:57:FA:19
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer:       /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial:       01984B54E929F01256FCA87602F696D2266D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number:          0246
Signing time:             Sun 27 Jul 2025 10:01:52 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:52 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:52 +0000
Files and hashes:         1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: 0WC+iC9X/bmrywgmpvXspJ1tv1QH4acsmu6QVohm0Eg=)
                          2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:e9:29:f0:12:56:fc:a8:76:02:f6:96:d2:26:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
        Validity
            Not Before: Jul 27 10:01:52 2025 GMT
            Not After : Jul 28 10:01:52 2025 GMT
        Subject: CN=092d91649c19eb8267238af2f5b165835a57fa19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c3:77:15:59:23:81:45:b6:63:8b:64:75:e4:
                    77:8b:9b:90:7e:30:11:54:06:9c:83:33:77:ba:59:
                    e2:6e:50:3f:a1:8f:44:1f:45:7c:30:8d:98:1d:69:
                    47:6e:f2:3c:90:14:1c:ae:fe:c0:55:c3:7a:ee:1d:
                    94:cf:e7:e4:1b:6b:e2:9c:78:d6:77:ed:45:d9:07:
                    9b:80:c0:9d:11:fa:62:83:15:41:ac:a3:17:8f:01:
                    ec:c9:1f:83:1d:a7:5d:df:50:85:84:62:b4:0a:de:
                    c3:b1:49:ab:57:4c:8b:84:cf:33:67:84:40:2e:85:
                    e8:1e:1f:91:15:cc:3c:ea:ec:7f:31:a2:0e:da:fd:
                    a0:92:a0:1e:ea:ca:19:aa:9c:45:64:d2:f5:b8:17:
                    66:39:60:b5:b3:3d:91:95:50:79:5e:81:0d:fc:54:
                    c5:25:04:30:bb:0f:14:bd:a7:5a:c0:2b:ef:d6:42:
                    ec:10:43:df:cc:11:0e:42:1b:62:8f:37:80:68:05:
                    66:83:6c:73:97:af:4b:24:da:f3:a7:8d:69:82:35:
                    c3:7c:49:7c:d5:e1:ad:6e:11:fe:2b:f1:c6:65:08:
                    da:39:ac:b4:0c:ea:66:0f:a1:90:bb:d5:6d:c7:00:
                    1d:08:9b:1a:8e:54:64:9f:5d:19:66:9e:73:5a:4e:
                    46:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2D:91:64:9C:19:EB:82:67:23:8A:F2:F5:B1:65:83:5A:57:FA:19
            X509v3 Authority Key Identifier:
                keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:a3:e2:0e:6c:a4:02:a9:fe:90:78:91:6b:a0:9b:f3:80:
         99:19:9d:43:61:93:43:08:e8:e7:87:ba:fe:22:97:fb:53:96:
         ae:a2:14:27:25:cc:06:02:e2:61:7e:b5:af:5f:cd:67:e0:df:
         1c:3f:5f:05:6f:26:c4:bf:c5:68:ac:78:ff:6f:d8:c1:b1:c5:
         a3:6e:bf:bf:6d:af:2f:78:6b:0d:22:9c:b2:31:7a:a5:66:e4:
         7a:7a:13:04:22:2c:61:9a:27:12:4d:bd:ff:fe:92:70:83:24:
         d3:d6:db:a6:10:4b:e0:64:90:71:62:20:e2:c0:47:fd:a1:5d:
         f5:d6:dc:8c:ef:df:f2:e2:76:75:74:e9:09:2a:4d:12:6f:af:
         5d:03:9c:f2:b6:fa:25:57:5a:3b:80:5f:d5:8d:e0:25:8c:8f:
         44:de:47:01:b3:98:ca:0d:1f:42:9b:be:d0:f0:10:50:89:65:
         84:65:4d:60:91:f8:2a:03:3d:87:43:e7:c4:b0:5b:c2:77:d3:
         c6:e9:63:90:4d:9b:c5:db:5a:8a:22:aa:b8:69:1f:a5:5a:ee:
         86:64:97:ee:b9:c0:f0:d8:3b:32:a4:c9:32:17:c5:e0:5e:2e:
         05:62:25:e8:62:4b:2b:96:69:b4:05:a8:ae:ad:0d:96:c1:4b:
         da:ad:e3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:42:07 2025 by rpki-client