Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File:                     bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier:          ibbFUbYD+3vK3gfATbd5lkvC/ORshH97lrLYbKN3Eqw=
Subject key identifier:   17:A6:71:09:7E:08:F3:E9:70:D2:87:0C:02:24:B8:81:C2:DD:A7:9E
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer:       /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial:       019849D37BE6685E6D4B83C6418BDDAECFD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number:          0A81
Signing time:             Sun 27 Jul 2025 03:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:53 +0000
Files and hashes:         1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
                          2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: hrf2SXrgdrNAyZ92pgB4mdAQeVUn4BSxPeKuzBGwa5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:7b:e6:68:5e:6d:4b:83:c6:41:8b:dd:ae:cf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
        Validity
            Not Before: Jul 27 03:00:53 2025 GMT
            Not After : Jul 28 03:00:53 2025 GMT
        Subject: CN=17a671097e08f3e970d2870c0224b881c2dda79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:87:c8:69:db:3c:66:61:ed:26:d2:7b:e6:78:
                    92:ee:dc:5a:5a:fa:c2:25:44:66:03:fa:5d:15:95:
                    12:b0:60:49:5d:5c:50:4d:14:33:92:51:46:4d:f7:
                    5a:f1:59:8f:b5:6c:01:e5:14:95:41:6e:bf:fe:bf:
                    fa:96:ce:cc:c7:78:33:66:87:06:7a:30:f4:20:86:
                    f6:76:f1:b1:f8:5b:4f:26:8f:65:aa:12:fd:cf:49:
                    30:f0:a6:e5:11:27:87:67:15:48:56:1f:d6:3b:2a:
                    6a:f2:d9:ca:70:6b:80:fc:37:3c:7f:2e:80:9a:86:
                    b5:8c:58:e9:1c:68:67:82:f3:fd:0c:b5:06:2d:ac:
                    0c:f7:ca:29:11:e9:10:7c:24:06:16:2d:62:a7:4f:
                    dc:3d:41:16:49:50:3b:96:28:b5:51:c4:36:e5:60:
                    62:a6:86:14:e0:8b:cd:c0:cc:f2:36:2f:09:38:08:
                    f5:25:b1:12:91:9d:e8:1e:7e:01:ad:5e:65:fe:03:
                    45:d7:64:c0:a9:13:13:cd:18:44:36:bc:0b:0f:15:
                    b8:78:ec:93:7f:3c:4c:69:b7:a6:b0:16:f1:48:1e:
                    42:36:50:b0:46:c7:a1:ab:38:a8:7f:de:b8:bc:e7:
                    ff:3d:67:f1:a4:21:19:9d:0b:11:3a:aa:c8:1b:09:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A6:71:09:7E:08:F3:E9:70:D2:87:0C:02:24:B8:81:C2:DD:A7:9E
            X509v3 Authority Key Identifier:
                keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:3c:c0:6d:47:09:58:fc:f2:e6:1c:14:5e:7b:1d:a4:bc:
         f7:ee:b1:39:84:ba:5f:88:74:a3:85:0d:00:eb:20:6a:49:ab:
         22:21:ba:16:5d:18:e3:c8:15:b8:8c:80:42:2d:a2:4a:9e:a4:
         d9:31:95:e2:06:57:55:1b:e0:2f:9f:f0:84:21:e2:b4:dd:0f:
         e1:64:b2:f5:1c:64:34:7b:16:e6:da:0d:38:7e:3c:fa:87:5b:
         60:1b:99:e7:a5:49:03:f8:20:d3:65:6b:6d:cd:8d:ee:42:81:
         72:2d:b6:c8:69:3d:3b:fc:a1:9e:d8:ad:0d:41:e3:cf:81:39:
         a9:2c:0e:c5:b1:20:5c:69:05:9b:50:1b:c6:1e:bb:f1:42:f2:
         73:7b:39:42:f4:eb:ee:10:ef:07:67:78:1a:b3:49:9c:39:ac:
         9a:d6:b7:9f:fe:35:73:7f:3b:b8:e0:74:d3:09:e4:8f:1c:cb:
         29:89:2f:6e:4b:7b:a2:ce:fd:de:b9:25:a3:4e:08:4a:c8:65:
         a5:6e:62:68:aa:68:e7:9f:40:c2:2b:eb:5e:1b:cc:b4:d8:3c:
         f7:bf:06:7c:94:32:62:82:c5:ab:2f:81:f1:b2:06:8a:aa:db:
         0f:df:18:c2:b4:e2:ec:22:76:5c:88:08:8a:a5:d4:30:38:6f:
         50:97:d9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:09:14 2025 by rpki-client