Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File:                     t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier:          KEuEQVWegQWmN68Erhh10nWGpu3ePxK+mxARUsV4Yas=
Subject key identifier:   7C:A6:F0:B6:E7:9A:5A:BB:03:5A:38:46:78:7E:FC:B1:96:C8:50:68
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer:       /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial:       019844E3A2A9DF7CC1B76FE439CEDAB89C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number:          0E6F
Signing time:             Sat 26 Jul 2025 04:00:25 +0000
Manifest this update:     Sat 26 Jul 2025 04:00:25 +0000
Manifest next update:     Sun 27 Jul 2025 04:00:25 +0000
Files and hashes:         1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
                          2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: GcvReDP85BdoCGhOn853FhdXw2xFgGBSy4r1T8YXZmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:44:e3:a2:a9:df:7c:c1:b7:6f:e4:39:ce:da:b8:9c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
        Validity
            Not Before: Jul 26 04:00:25 2025 GMT
            Not After : Jul 27 04:00:25 2025 GMT
        Subject: CN=7ca6f0b6e79a5abb035a3846787efcb196c85068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:f6:03:17:77:69:9f:64:33:38:ec:c9:2c:
                    9d:fe:98:47:74:f2:ef:d8:3d:71:4c:a9:fc:1e:5c:
                    e5:5a:7c:b1:f6:11:25:c6:6c:6b:75:96:0e:c4:0d:
                    ec:03:63:1c:c5:ae:a7:ae:5a:8e:28:e0:7d:6f:5e:
                    8d:bf:55:a3:85:a4:34:f3:b4:d8:38:e1:ab:69:6a:
                    dd:55:a0:c3:ea:23:21:44:9f:7e:ee:85:8e:dd:ae:
                    4b:cf:d7:65:12:0a:9f:99:9b:69:ff:83:4c:6e:9c:
                    72:ca:f8:0a:e0:fd:66:cd:1a:7e:67:bc:bf:e3:27:
                    cc:5c:93:b3:14:dd:04:15:2c:f5:58:5c:4d:2c:4c:
                    f5:99:61:35:74:47:d1:db:cf:c9:a4:30:76:ef:29:
                    17:fc:58:f8:bd:04:27:59:45:5c:c8:d0:29:d0:a6:
                    47:f4:be:38:88:97:5a:7c:36:05:8c:8b:0d:82:b0:
                    50:a0:7b:9f:bf:68:d3:ea:f9:84:67:c2:18:5a:92:
                    0a:0a:ad:00:db:d6:9e:6e:bf:e7:3e:e6:5a:4f:9f:
                    34:3c:0c:43:34:86:57:ff:43:df:de:e8:b9:56:83:
                    3e:70:59:73:c2:c7:b5:57:5d:f3:32:e4:c2:00:fa:
                    6e:8b:19:c0:59:0e:18:03:b4:3d:60:37:7d:ad:b0:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:F0:B6:E7:9A:5A:BB:03:5A:38:46:78:7E:FC:B1:96:C8:50:68
            X509v3 Authority Key Identifier:
                keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:36:b7:91:ef:45:13:55:ca:bb:dd:07:c9:73:2c:e3:e9:b3:
         74:e5:99:66:05:f7:9a:ce:98:aa:b4:3c:6b:b2:71:c1:02:26:
         03:df:be:b7:97:b6:68:29:cc:22:0c:de:ff:8e:03:c4:b9:6c:
         cc:f7:35:a5:b1:1c:8c:e9:a7:9c:96:7d:9c:b9:8f:37:19:1b:
         6c:2a:7a:eb:56:5a:28:4f:3e:4f:c6:a1:a6:07:79:01:9a:68:
         06:08:47:9e:e1:c8:8b:c3:3d:8f:a0:41:62:6c:2c:cf:94:90:
         b8:6d:22:5b:65:0c:ab:8d:c6:4a:3e:0d:96:6a:7a:5c:04:27:
         36:87:11:81:d9:b1:0d:96:ac:cc:30:85:f6:ee:2c:57:c8:9f:
         e0:a7:3f:9a:be:8c:f3:79:49:65:6b:05:13:ca:4f:25:d2:25:
         84:b0:03:57:45:83:77:85:13:36:c1:70:21:f1:f4:98:f3:fb:
         54:77:5d:e6:9c:f0:65:9d:13:c4:b8:4f:bd:7b:e2:42:62:d8:
         74:3d:ee:ac:ee:29:1c:a6:28:f9:07:de:0b:66:ec:a3:bf:51:
         84:19:42:f9:70:94:e2:71:5c:ec:08:a3:e0:3e:99:05:f7:d0:
         bb:47:1b:7f:e0:8a:c6:4b:a6:4f:e7:46:e3:e0:99:59:74:60:
         93:b6:19:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhE46Kp33zBt2/kOc7auJwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YTljMzRkM2Y4NDNjZGIwMzViN2MzMGIzZTg0ZTIyNDEy
NTIyYzUwHhcNMjUwNzI2MDQwMDI1WhcNMjUwNzI3MDQwMDI1WjAzMTEwLwYDVQQD
Eyg3Y2E2ZjBiNmU3OWE1YWJiMDM1YTM4NDY3ODdlZmNiMTk2Yzg1MDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJL2Axd3aZ9kMzjsySyd/phHdPLv
2D1xTKn8HlzlWnyx9hElxmxrdZYOxA3sA2Mcxa6nrlqOKOB9b16Nv1WjhaQ087TY
OOGraWrdVaDD6iMhRJ9+7oWO3a5Lz9dlEgqfmZtp/4NMbpxyyvgK4P1mzRp+Z7y/
4yfMXJOzFN0EFSz1WFxNLEz1mWE1dEfR28/JpDB27ykX/Fj4vQQnWUVcyNAp0KZH
9L44iJdafDYFjIsNgrBQoHufv2jT6vmEZ8IYWpIKCq0A29aebr/nPuZaT580PAxD
NIZX/0Pf3ui5VoM+cFlzwse1V13zMuTCAPpuixnAWQ4YA7Q9YDd9rbDOiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHym8Lbnmlq7A1o4Rnh+/LGWyFBoMB8GA1UdIwQY
MBaAFLepw00/hDzbA1t8MLPoTiJBJSLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEt
M2E1NzY4MDIxNDE4LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9kYTg3NjctMjc5YS00OTNmLThiMmEtM2E1NzY4MDIxNDE4
LzEvdDZuRFRULUVQTnNEVzN3d3MtaE9Ja0VsSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApja3ke9F
E1XKu90HyXMs4+mzdOWZZgX3ms6YqrQ8a7JxwQImA9++t5e2aCnMIgze/44DxLls
zPc1pbEcjOmnnJZ9nLmPNxkbbCp661ZaKE8+T8ahpgd5AZpoBghHnuHIi8M9j6BB
Ymwsz5SQuG0iW2UMq43GSj4Nlmp6XAQnNocRgdmxDZaszDCF9u4sV8if4Kc/mr6M
83lJZWsFE8pPJdIlhLADV0WDd4UTNsFwIfH0mPP7VHdd5pzwZZ0TxLhPvXviQmLY
dD3urO4pHKYo+QfeC2bso79RhBlC+XCU4nFc7Aij4D6ZBffQu0cbf+CKxkumT+dG
4+CZWXRgk7YZBA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:08:01 2025 by rpki-client