Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
File:                     b6htHBZ2pZpGrPNzNhkumFz_Dls.mft (raw, json)
Hash identifier:          cwvc4RbGCv6GcyxGQKg3KsY6AhHOOVICAq238LR1rW0=
Subject key identifier:   AE:4A:98:50:AC:90:45:EF:4D:A8:04:35:4C:6E:5D:A3:EB:18:0B:E6
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Certificate issuer:       /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial:       019849D37EFAF70F00FB7F653D17222034B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
Manifest number:          1607
Signing time:             Sun 27 Jul 2025 03:00:53 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:53 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:53 +0000
Files and hashes:         1: Dmq6rzRBY22zQprWtgsSucnmPfw.roa (hash: 53HdmBv78dIaQNhdTstURpa3FkH5iHS78bcTm103dts=)
                          2: EpH1IjWJDrLMVmGg40hn2eeijFk.roa (hash: K+D9CmssN1EPeJWydhHAbIICB19ne88Fx+6+pwN8EYM=)
                          3: IarevL5_EzIJs87Wc8QNEXezxEg.roa (hash: 3HU1Yl+/zUftCbIriX5nyjFf4lXlFXWqr+wjeiwWuSc=)
                          4: b6htHBZ2pZpGrPNzNhkumFz_Dls.crl (hash: pl6O9K1SAqpi9IDudwveZr3vzUuIfMCt5Wc07U81TAE=)
                          5: c3ob2zH8CWN1Z48MYMCCcz4DvjQ.roa (hash: v2eej8TLgNyCOcTzYSfQkKDLdsnqMKtNEWYP6ylBCUQ=)
                          6: gCqBeQcxeP4mgIeC8gxfXD2ihNA.roa (hash: M8yQO0ZHmNcXujVHcxJQENuFmwi7ywPsRmKiyTk43dA=)
                          7: j_oVR8giIGJ9TAqquqYifkLeIjM.roa (hash: 5Tkxpz+Z+2HB95vYCH8LtVhmoPXDta/4SPNsrM3AuI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:7e:fa:f7:0f:00:fb:7f:65:3d:17:22:20:34:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
        Validity
            Not Before: Jul 27 03:00:53 2025 GMT
            Not After : Jul 28 03:00:53 2025 GMT
        Subject: CN=ae4a9850ac9045ef4da804354c6e5da3eb180be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d2:45:6c:9d:b8:96:c0:d0:b3:fc:88:b2:35:
                    12:ce:c6:b7:ce:09:39:a4:f4:6a:c9:d3:9d:e3:6d:
                    9f:26:5a:22:b5:a2:11:dc:56:5a:78:5f:5d:3e:87:
                    29:fe:9f:79:0f:9a:99:96:3f:a1:7f:60:d2:60:53:
                    ba:c6:08:7e:52:2b:61:34:b6:a0:03:86:f2:81:b5:
                    9e:c7:22:c6:25:16:e1:e7:1c:85:49:5c:cc:0f:e1:
                    52:af:27:b0:be:6e:f2:22:7c:19:8b:15:e9:2f:3c:
                    74:a6:c3:38:ba:71:9e:8f:dd:5c:a2:4e:3f:7f:fb:
                    17:ab:f3:82:9f:59:eb:a2:b0:d9:5f:6a:80:78:6a:
                    6b:ee:03:c4:11:64:0f:a7:4f:87:00:b7:e0:fe:e9:
                    4f:e6:be:e8:a9:3b:27:34:75:f3:b0:e4:22:0b:29:
                    c6:bd:cf:21:24:13:36:b1:c5:e4:c5:53:50:7d:7f:
                    99:3e:51:b5:26:b8:db:a1:91:9a:eb:a3:77:ee:c6:
                    d4:87:27:f4:94:de:68:32:58:0a:ab:2a:66:a4:7d:
                    cf:98:cb:72:70:25:bf:ff:37:57:bd:17:3c:f8:5d:
                    98:c6:33:e7:9d:22:60:35:bb:57:95:21:88:49:04:
                    07:fb:9e:29:1a:3b:32:f2:37:45:16:a2:97:d8:52:
                    55:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:4A:98:50:AC:90:45:EF:4D:A8:04:35:4C:6E:5D:A3:EB:18:0B:E6
            X509v3 Authority Key Identifier:
                keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:0e:84:ec:a6:45:9a:f8:f6:d5:b9:95:41:20:ed:b9:14:10:
         08:47:87:96:d6:18:1d:c0:99:e3:59:c1:ea:17:ed:d8:76:ca:
         9a:6c:f7:f5:03:a1:a0:c4:3b:dc:67:54:28:2c:06:6f:48:ad:
         59:75:20:df:6c:a9:5d:fb:4d:6f:f7:a9:63:44:12:3a:80:3c:
         72:ed:16:33:34:2e:96:2a:7e:5c:15:30:ce:fd:44:8d:00:41:
         9c:9d:ea:0f:b3:ad:76:37:ce:92:d1:09:ad:55:f6:c7:26:dd:
         2e:de:12:34:22:39:b3:7e:84:7a:2b:ca:9c:cd:d9:6e:3d:e3:
         59:cd:5f:e9:7d:ba:f7:81:3c:72:da:72:93:58:b1:fb:c0:24:
         94:0a:7e:12:38:4b:00:55:6b:a4:79:48:fd:43:89:84:04:cf:
         15:17:a2:4e:fc:d1:7a:7f:17:0d:cd:fb:17:97:2b:3d:b2:68:
         6a:6a:cc:26:ad:10:3e:5c:72:76:a3:80:e3:11:52:c8:b7:08:
         d3:2d:ba:f6:7f:19:21:a3:da:d2:4f:bb:68:4b:03:93:af:ab:
         76:91:d6:96:50:45:8b:d2:e5:86:db:6d:40:f0:1e:08:af:3f:
         a4:64:c3:3b:68:ed:88:b7:93:d0:6c:cb:49:25:b1:56:00:5b:
         e4:09:0b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ03769w8A+39lPRciIDS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYTg2ZDFjMTY3NmE1OWE0NmFjZjM3MzM2MTkyZTk4NWNm
ZjBlNWIwHhcNMjUwNzI3MDMwMDUzWhcNMjUwNzI4MDMwMDUzWjAzMTEwLwYDVQQD
EyhhZTRhOTg1MGFjOTA0NWVmNGRhODA0MzU0YzZlNWRhM2ViMTgwYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstJFbJ24lsDQs/yIsjUSzsa3zgk5
pPRqydOd422fJloitaIR3FZaeF9dPocp/p95D5qZlj+hf2DSYFO6xgh+UithNLag
A4bygbWexyLGJRbh5xyFSVzMD+FSryewvm7yInwZixXpLzx0psM4unGej91cok4/
f/sXq/OCn1nrorDZX2qAeGpr7gPEEWQPp0+HALfg/ulP5r7oqTsnNHXzsOQiCynG
vc8hJBM2scXkxVNQfX+ZPlG1JrjboZGa66N37sbUhyf0lN5oMlgKqypmpH3PmMty
cCW//zdXvRc8+F2YxjPnnSJgNbtXlSGISQQH+54pGjsy8jdFFqKX2FJV0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5KmFCskEXvTagENUxuXaPrGAvmMB8GA1UdIwQY
MBaAFG+obRwWdqWaRqzzczYZLphc/w5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYt
NmFhYjJiMWI5MjJjLzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZmUzNzMtZTViYy00MDEwLThhZDYtNmFhYjJiMWI5MjJj
LzEvYjZodEhCWjJwWnBHclBOek5oa3VtRnpfRGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZg6E7KZF
mvj21bmVQSDtuRQQCEeHltYYHcCZ41nB6hft2HbKmmz39QOhoMQ73GdUKCwGb0it
WXUg32ypXftNb/epY0QSOoA8cu0WMzQulip+XBUwzv1EjQBBnJ3qD7OtdjfOktEJ
rVX2xybdLt4SNCI5s36EeivKnM3Zbj3jWc1f6X2694E8ctpyk1ix+8AklAp+EjhL
AFVrpHlI/UOJhATPFReiTvzRen8XDc37F5crPbJoamrMJq0QPlxydqOA4xFSyLcI
0y269n8ZIaPa0k+7aEsDk6+rdpHWllBFi9LlhtttQPAeCK8/pGTDO2jtiLeT0GzL
SSWxVgBb5AkL3w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:09:18 2025 by rpki-client