Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
File:                     6uDCwN7m-e1l4FHqqQl9As9b9fI.mft (raw, json)
Hash identifier:          C1S0Rr63+ivOn0nW1M75e5QdhGhcsMw/0IJm+UDmWZw=
Subject key identifier:   2F:D3:2C:F9:61:E1:25:F4:BA:14:21:D9:20:C0:E4:58:CA:CC:45:89
Authority key identifier: EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2
Certificate issuer:       /CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
Certificate serial:       019848C0965094681DC6C97A23518074127D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
Manifest number:          0131
Signing time:             Sat 26 Jul 2025 22:00:37 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:37 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:37 +0000
Files and hashes:         1: 6IiGbtawfoiQxqo4qA78f9bxvRI.roa (hash: DrAR4o5sI8QUSjE7+o4KN2antHg+KFLwwl7uXYw30VE=)
                          2: 6uDCwN7m-e1l4FHqqQl9As9b9fI.crl (hash: DxLiKe+InYCsUuYQyxm99M73wVjdHbNparFYh4s24MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:96:50:94:68:1d:c6:c9:7a:23:51:80:74:12:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eae0c2c0dee6f9ed65e051eaa9097d02cf5bf5f2
        Validity
            Not Before: Jul 26 22:00:37 2025 GMT
            Not After : Jul 27 22:00:37 2025 GMT
        Subject: CN=2fd32cf961e125f4ba1421d920c0e458cacc4589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:b5:59:7b:59:6c:64:a7:a2:69:ce:16:5d:
                    93:91:8a:a9:1b:33:41:30:88:14:05:5e:10:63:f3:
                    fc:9e:d8:92:4e:8b:a2:94:20:20:2e:bb:f4:c0:a5:
                    32:0a:0a:ba:c1:0c:de:1d:97:2b:45:88:38:1c:ff:
                    b1:2d:16:76:ef:97:a1:40:ef:57:28:f1:18:35:9b:
                    04:7d:19:89:9e:be:f3:5d:c7:fd:12:da:d5:a8:58:
                    28:ad:eb:87:aa:8b:2a:1c:e8:1e:d0:7d:53:91:91:
                    07:0f:3c:32:c4:2d:f2:69:b7:d7:39:59:5b:36:7a:
                    63:54:63:14:56:e7:5a:7a:20:32:b3:eb:c3:a0:0a:
                    24:61:72:44:14:d0:9e:ec:35:98:29:f3:0f:e5:a9:
                    2d:a6:ae:ec:23:56:0f:e4:ec:22:52:da:f1:16:31:
                    6b:2a:71:4b:38:54:38:58:41:1a:74:b6:0f:cf:c5:
                    b1:19:63:39:4c:12:9e:e8:bb:ff:c4:b2:51:27:cd:
                    d1:18:ac:a0:f5:49:b8:81:88:55:83:c4:93:09:2c:
                    f2:08:99:73:df:c1:e4:e0:94:40:08:f9:b8:c2:3d:
                    54:f0:e4:05:de:d2:95:5b:3a:be:9f:12:a0:ff:ae:
                    07:66:cf:fb:43:b1:ce:b4:ca:49:74:ce:89:de:f8:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D3:2C:F9:61:E1:25:F4:BA:14:21:D9:20:C0:E4:58:CA:CC:45:89
            X509v3 Authority Key Identifier:
                keyid:EA:E0:C2:C0:DE:E6:F9:ED:65:E0:51:EA:A9:09:7D:02:CF:5B:F5:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6uDCwN7m-e1l4FHqqQl9As9b9fI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/d3de43-aa3c-4692-a924-d98f5d076298/1/6uDCwN7m-e1l4FHqqQl9As9b9fI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:71:14:ce:67:81:51:70:63:7b:49:ca:ad:a2:16:60:52:2a:
         80:c2:3a:86:5a:6f:aa:f0:2b:dd:bc:6c:7f:8a:fb:06:ed:74:
         ad:69:10:ff:92:17:9c:06:3a:5a:fd:d7:9c:2a:00:2f:9b:39:
         d5:29:33:04:f5:fe:83:9c:8d:db:cb:02:84:54:00:6c:88:a3:
         2c:66:ae:89:5b:bc:5e:8f:04:b7:fb:f3:74:23:69:56:27:fd:
         71:a7:00:ec:c0:42:86:5f:bc:79:a9:88:bb:51:64:c1:43:a3:
         ed:23:1a:d3:8d:07:20:db:10:85:c1:de:39:e4:d4:23:27:db:
         9e:fd:60:95:38:bf:8b:48:7c:41:74:6d:6f:32:7b:4c:27:b4:
         74:85:ee:9a:78:af:d9:bd:b1:42:14:0d:1a:a4:cf:f6:ec:66:
         16:d8:c4:03:1f:20:cc:1b:2c:9c:18:f0:25:50:38:19:f2:da:
         1d:97:7b:29:6b:9e:22:0b:4a:c6:32:2a:73:c6:c3:e4:5b:32:
         89:87:be:bb:4e:23:c6:04:31:77:1c:a4:d5:9e:7f:a6:dc:4c:
         7c:56:2d:53:22:fe:29:8b:d5:56:e2:44:87:e6:c0:eb:f8:2f:
         6b:83:1d:e1:5e:d4:02:6e:a6:dd:fc:b1:85:ae:48:68:86:a7:
         9b:1c:04:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:42:22 2025 by rpki-client