Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
File:                     6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft (raw, json)
Hash identifier:          hag/ABPCLFC8TuwHszLwQ2Tyvtt8YKBG292WVEdSwz0=
Subject key identifier:   DA:78:69:B6:A3:7E:7C:18:7A:8D:A5:5F:8D:F1:3F:29:43:8C:3E:4D
Authority key identifier: E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88
Certificate issuer:       /CN=e84bef96616b652dc36418470555fe8d59221888
Certificate serial:       0198477852A0AB4100B4FA6B3C4515C8AD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
Manifest number:          DF
Signing time:             Sat 26 Jul 2025 16:02:04 +0000
Manifest this update:     Sat 26 Jul 2025 16:02:04 +0000
Manifest next update:     Sun 27 Jul 2025 16:02:04 +0000
Files and hashes:         1: 4Gofx77thE1H70ueVHLD9j47btM.roa (hash: 9EbLzC5Y1+8DffIsLyCHPxc8JLdUo3GxnL9ubC3vyyI=)
                          2: 6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl (hash: RBbaUPpMxlyi6idVLXsL4bQNpWREXmp9r6nuzZOCegk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:78:52:a0:ab:41:00:b4:fa:6b:3c:45:15:c8:ad:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84bef96616b652dc36418470555fe8d59221888
        Validity
            Not Before: Jul 26 16:02:04 2025 GMT
            Not After : Jul 27 16:02:04 2025 GMT
        Subject: CN=da7869b6a37e7c187a8da55f8df13f29438c3e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:c7:48:a5:28:38:a1:b7:b2:05:2b:d9:16:
                    d7:7f:4f:60:23:a6:0b:e9:af:a5:d7:b6:d8:c8:ab:
                    6b:5e:75:ad:8d:32:1b:1d:46:8e:4f:ba:f0:07:d2:
                    ee:b3:8d:ca:17:31:f1:4a:87:6a:fe:4e:f5:f1:06:
                    0b:7f:1c:da:95:4c:41:88:f3:3b:a4:bd:ef:4a:52:
                    ab:09:52:4b:3d:3c:54:30:71:29:11:db:1e:a7:82:
                    e6:ec:d2:5f:e8:58:53:2e:6c:a9:9e:e5:12:05:e3:
                    29:47:fa:5a:36:53:57:89:b6:81:33:30:81:b6:ba:
                    69:78:a9:48:7b:f8:44:0f:9b:bf:b6:0d:ba:33:51:
                    3a:94:b6:1a:42:87:7b:98:b4:be:9c:48:71:6a:76:
                    81:0e:09:bf:c5:a8:7f:97:7d:f3:65:25:9f:28:32:
                    ee:76:74:eb:8a:c1:db:57:01:33:9b:85:31:9b:47:
                    aa:39:2b:8b:b4:3f:31:9a:0e:28:e4:70:04:e8:28:
                    d3:f8:b1:bc:29:e8:91:e1:eb:74:ba:5f:30:2d:a4:
                    1d:05:01:07:93:a2:b8:85:6a:65:2d:9b:40:3c:c7:
                    be:b2:8e:64:03:54:b6:c3:a2:5c:53:90:a7:a6:29:
                    ce:42:ca:4a:8c:31:e2:ae:4d:7d:e2:9b:2b:8d:eb:
                    2c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:78:69:B6:A3:7E:7C:18:7A:8D:A5:5F:8D:F1:3F:29:43:8C:3E:4D
            X509v3 Authority Key Identifier:
                keyid:E8:4B:EF:96:61:6B:65:2D:C3:64:18:47:05:55:FE:8D:59:22:18:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EvvlmFrZS3DZBhHBVX-jVkiGIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cc4d06-cb1c-43e1-ab68-046f68d72329/1/6EvvlmFrZS3DZBhHBVX-jVkiGIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1d:d7:b0:fd:a8:17:39:f9:f2:97:44:1f:8e:a2:46:e5:f9:
         5a:5b:cb:be:35:6d:54:ce:1d:2e:89:e1:9c:83:47:06:76:37:
         66:8c:e8:3c:55:2a:27:ae:98:b1:a6:ca:70:33:be:a0:3c:cf:
         4c:70:16:e7:8c:6b:84:ea:92:ca:3e:4b:ab:93:8e:f4:d3:43:
         99:4f:d4:2f:0a:da:ba:12:5e:5a:00:b8:fa:10:de:eb:51:1d:
         b0:02:75:2a:cc:b2:b3:a9:5e:d3:13:d8:07:83:78:ef:16:aa:
         b8:9e:e8:5c:db:ef:df:7d:49:f5:7f:90:6c:59:6a:33:9c:f5:
         c7:d4:0c:7d:bc:9c:74:b9:68:23:99:37:a8:bc:21:ab:04:e0:
         71:2d:c6:03:59:38:75:9f:87:65:57:3c:a7:ba:ca:a3:64:28:
         85:f0:ff:99:33:ae:48:92:9f:da:1f:d0:dd:2e:8a:b5:36:42:
         8b:62:ac:9f:51:fd:c7:30:73:cd:c5:e1:15:3b:13:f4:22:4a:
         48:32:20:c6:4c:ea:08:3b:33:6e:4f:7c:bd:35:79:33:38:b6:
         19:dc:b8:2e:84:77:af:6e:7e:e5:33:11:bb:3b:58:48:6e:64:
         b9:6b:cc:c4:6f:97:b1:40:73:25:c9:af:d6:1a:25:c5:4f:c2:
         9b:b8:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:49:30 2025 by rpki-client