Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File:                     K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier:          9PC7IW/GZw7CCcjh6jlyIB7iImO++HzDTw6ZVmgEkts=
Subject key identifier:   E0:3F:E1:3A:E7:E6:61:BB:9F:35:61:83:A5:4E:54:77:34:5F:1E:D4
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer:       /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial:       01984AAEF9048413F67DC32B27A089D42418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number:          0777
Signing time:             Sun 27 Jul 2025 07:00:37 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:37 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:37 +0000
Files and hashes:         1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: JraLz2hTRMyXvf/E0HG0HKoVRDKnJ745z8dQ1PhEyAA=)
                          2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:f9:04:84:13:f6:7d:c3:2b:27:a0:89:d4:24:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
        Validity
            Not Before: Jul 27 07:00:37 2025 GMT
            Not After : Jul 28 07:00:37 2025 GMT
        Subject: CN=e03fe13ae7e661bb9f356183a54e5477345f1ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:2b:35:4d:a3:3e:ee:84:53:ae:c4:a8:2c:
                    3b:ff:d9:07:65:ff:90:8f:83:a0:fc:cd:53:2c:13:
                    25:28:4a:7d:a3:8a:51:48:a9:a7:38:d1:c6:25:64:
                    70:4f:dd:72:b2:b1:38:6e:a5:e9:20:81:4c:ee:75:
                    d9:c6:ae:f0:00:d8:d0:73:b0:a4:e3:8b:0a:61:9c:
                    da:58:70:06:0b:56:3a:a1:c3:e1:28:08:39:b8:07:
                    91:8e:af:56:b3:5b:26:16:ee:28:ec:9a:b1:dc:5c:
                    00:1b:90:45:f2:02:79:74:88:9d:41:35:a6:23:d1:
                    fe:21:33:c5:ed:a8:db:78:70:fa:28:c3:31:1a:e4:
                    7e:7e:59:f4:37:cf:e2:46:ad:48:fe:44:89:8e:c0:
                    2a:10:08:9c:1e:5b:62:ca:45:a8:af:8e:f0:ee:c0:
                    8e:fa:b4:ce:70:6b:44:f7:0f:d3:4b:b7:13:c9:08:
                    69:d6:95:17:d4:f3:3e:0d:f8:76:1d:52:4b:17:70:
                    0b:5b:a8:3d:5d:cd:2b:13:12:5d:7f:2f:0e:c8:7c:
                    fd:c3:fa:99:3c:6f:95:27:16:b9:db:e1:eb:30:06:
                    1b:17:bf:56:84:b0:08:34:f3:73:63:10:b5:fe:18:
                    74:f8:c8:67:d7:cd:8a:05:6f:a4:cf:83:20:65:eb:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3F:E1:3A:E7:E6:61:BB:9F:35:61:83:A5:4E:54:77:34:5F:1E:D4
            X509v3 Authority Key Identifier:
                keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:c1:22:ad:67:6a:01:f2:ac:eb:17:83:8b:ed:a8:f8:dd:
         77:3c:a6:8e:f9:eb:f2:c1:f9:e5:dd:8b:ad:01:ca:ec:71:3c:
         e4:c2:cb:7d:d2:fe:e8:16:b7:ea:cc:ed:06:74:64:23:6b:3e:
         d9:fc:3d:a4:1e:e9:35:c9:21:83:04:88:78:03:17:88:cf:a7:
         81:50:81:dc:0e:4b:29:1b:82:f3:ff:2a:ee:92:d5:68:44:e5:
         2f:0b:50:64:01:d8:ce:7f:a8:65:f5:7c:00:28:08:b5:12:d4:
         f2:d1:a5:6a:fc:ed:6d:64:61:37:ce:f9:b3:81:08:41:77:28:
         6c:54:de:c6:95:45:6f:ab:d7:f7:2e:21:39:89:33:98:a3:95:
         81:3d:43:ba:b8:56:12:78:fe:82:08:1b:d8:ca:1c:3e:3b:f4:
         2f:e8:c6:de:35:db:93:0c:1e:79:f9:cb:87:ea:f6:ae:b6:f2:
         25:20:43:5e:49:df:d5:ee:19:d6:47:4a:4a:24:49:39:0b:76:
         13:f5:15:0f:dd:fd:d2:f8:73:3b:b8:85:c9:a9:3e:d4:16:75:
         e6:69:cd:e1:2b:07:44:0c:70:78:1b:50:22:0e:02:be:62:23:
         d1:6f:3a:ae:1c:98:27:fa:8c:74:7a:cc:36:cb:cf:9c:61:cc:
         94:6e:71:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:59 2025 by rpki-client