Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          nnE3IDgHVyziy2hRsRHIkMvrzlFuWJeNXUUt9llGBwg=
Subject key identifier:   A8:E4:1A:28:CE:89:7B:63:54:8E:6E:9B:A7:FC:67:B2:64:AB:5C:25
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       0198496571D09F51445EE82CDB52897A1AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          0581
Signing time:             Sun 27 Jul 2025 01:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:41 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: fB0eMwqPKtKqkb5giB3h0JxMIN9hD+2ZIf5FNXS0Bbw=)
                          2: jmdaY3jB9wAV5m6viUDXvKemdCo.roa (hash: KjRHU7c80LizE/Q/1z0ur21E4KmnhATUY3o4TcjtpmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:71:d0:9f:51:44:5e:e8:2c:db:52:89:7a:1a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Jul 27 01:00:41 2025 GMT
            Not After : Jul 28 01:00:41 2025 GMT
        Subject: CN=a8e41a28ce897b63548e6e9ba7fc67b264ab5c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4d:d6:ca:3e:61:8a:85:06:01:c5:54:5b:c0:
                    78:a2:4b:fe:f2:5f:f9:52:35:5a:64:b8:36:2d:7f:
                    85:27:17:d3:59:1a:da:46:d6:55:d9:d3:38:bf:65:
                    d6:91:52:be:03:12:be:b8:bf:e0:5e:1f:eb:b6:33:
                    d7:39:81:74:27:95:9e:c9:e8:bb:32:0e:ca:36:3c:
                    a3:76:38:30:0c:4a:52:f7:58:8a:e5:d7:15:02:9b:
                    27:88:39:66:e5:c5:89:d9:12:a3:4d:cd:b8:2b:07:
                    e4:e0:93:8d:f4:7b:d4:b0:18:63:e5:49:33:3f:87:
                    ac:d4:54:1a:d3:e5:62:94:f7:32:d3:d0:6d:92:5b:
                    c8:97:f5:77:98:77:0a:a3:6b:2a:4d:bf:30:9c:1d:
                    11:80:dc:0b:5a:48:ed:69:39:75:45:08:b6:08:47:
                    bd:9a:c6:ba:de:80:0e:d6:1e:02:45:cd:80:ea:35:
                    31:a9:c1:6f:98:0c:14:47:12:16:48:b6:bc:c4:6e:
                    ba:8e:86:27:95:4d:ee:fe:f5:5d:1e:ef:45:47:f6:
                    60:8c:f1:95:92:ed:d2:ec:9c:9f:a7:fb:d7:83:8c:
                    3a:af:f0:a6:ba:85:61:54:25:c3:6d:c2:59:f2:08:
                    a0:62:54:06:97:7c:e2:52:1c:f1:18:55:99:fb:fb:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:1A:28:CE:89:7B:63:54:8E:6E:9B:A7:FC:67:B2:64:AB:5C:25
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b7:30:97:ba:14:e8:cc:af:a2:df:68:fe:04:06:0d:8b:7b:
         24:d4:ce:ef:fd:27:b5:81:92:aa:7b:a1:11:4b:6b:e5:bd:d1:
         d7:59:c9:a6:b7:36:36:a1:83:e9:38:8e:12:54:21:dc:b1:e7:
         12:bc:7f:5c:83:2c:c8:a2:eb:52:82:6e:c5:19:0d:3b:ec:59:
         ec:7a:32:92:fe:84:c4:a1:fc:01:81:92:4b:be:86:48:08:48:
         82:65:f1:ee:e9:fb:63:e3:a2:5c:fb:74:17:f4:7a:a4:a0:30:
         a8:2b:58:3f:c2:8c:29:0c:e6:66:72:3b:66:04:c5:67:ba:fc:
         8b:15:a9:df:3b:91:db:0e:6d:9b:1c:c0:9b:55:ea:e8:ff:60:
         80:5f:54:db:12:1e:44:fc:e4:17:5e:e4:ac:ab:c2:5a:d8:6a:
         fc:15:52:67:e8:ab:c9:24:31:66:20:77:89:37:62:8f:1e:09:
         67:56:8e:9b:8d:82:5c:00:05:d9:7b:98:a1:47:a3:1e:34:76:
         fd:db:14:43:13:74:01:4a:a4:d0:7a:cf:6a:92:b1:91:20:ad:
         0a:79:e4:f3:ae:ec:c4:83:1c:c9:57:24:0e:fb:09:e8:49:2f:
         46:71:f9:1a:d9:db:1d:ad:b0:0f:4c:26:62:06:ea:32:9f:e6:
         89:9c:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:14:30 2025 by rpki-client