Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
File:                     6OcnETayGhWK70CdMOLGAB1bDak.mft (raw, json)
Hash identifier:          Pkx6flLFd1kPPOZTbsPvZnjpDvQKUJ0WuI0B/Gr2b1U=
Subject key identifier:   73:73:74:3D:61:EF:94:CD:B0:25:D4:01:47:1B:EF:8A:8B:45:B6:22
Authority key identifier: E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9
Certificate issuer:       /CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
Certificate serial:       01984889887CF283C51BCF4178BDCF1EF5F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
Manifest number:          0F57
Signing time:             Sat 26 Jul 2025 21:00:29 +0000
Manifest this update:     Sat 26 Jul 2025 21:00:29 +0000
Manifest next update:     Sun 27 Jul 2025 21:00:29 +0000
Files and hashes:         1: 6OcnETayGhWK70CdMOLGAB1bDak.crl (hash: vCwX3BAfEuupYejDcr5iUHR9OBXNZzIQBnF3jdlUnMo=)
                          2: dxgxd6-xP9JkwgZUnUwpf-WY-Kw.roa (hash: hqOsy5iRYOF259KVMk0QtmelCMMCDmkaOIHQ2ucYLWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:89:88:7c:f2:83:c5:1b:cf:41:78:bd:cf:1e:f5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8e7271136b21a158aef409d30e2c6001d5b0da9
        Validity
            Not Before: Jul 26 21:00:29 2025 GMT
            Not After : Jul 27 21:00:29 2025 GMT
        Subject: CN=7373743d61ef94cdb025d401471bef8a8b45b622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b0:b5:6f:a8:21:8a:d5:62:f7:17:28:5b:b8:
                    a0:16:25:40:39:d9:72:28:2e:47:03:21:c5:9d:99:
                    b0:40:82:73:da:7d:09:5a:1d:ea:cd:41:e5:90:d6:
                    47:6c:3e:17:5d:e0:07:03:6f:8f:80:70:ef:6a:07:
                    d8:3d:f9:5c:47:cf:d2:94:dc:d5:0e:e1:bd:7a:16:
                    f0:1c:df:24:46:b7:8f:8b:49:34:3c:f7:2b:ac:2c:
                    55:f6:39:8e:be:d1:ee:98:d7:e0:33:3a:1a:de:60:
                    e2:51:be:bd:92:dd:50:1e:a7:c3:f2:67:2f:26:80:
                    ae:3c:d5:4b:a0:2f:2f:86:60:a7:51:6e:b1:fc:ed:
                    2d:cc:a7:9e:bc:bc:b1:b9:2b:8b:50:67:7d:53:20:
                    65:77:4c:15:c5:be:0e:bd:d6:35:53:d0:ad:68:d3:
                    c2:68:5a:ce:c6:f4:76:f0:5b:f5:a8:60:af:15:b8:
                    71:8a:22:ca:f0:45:85:92:cd:a7:e2:24:4d:a8:99:
                    d5:23:92:6b:8e:e4:29:d7:21:1d:50:ef:a0:aa:04:
                    9d:c5:db:f3:aa:91:5a:b1:05:84:b6:fd:02:5b:55:
                    82:fa:38:12:68:fc:b1:7e:ae:8a:99:8a:d9:39:77:
                    f8:d3:74:73:43:d2:58:b7:e1:74:bd:cf:0d:69:4c:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:73:74:3D:61:EF:94:CD:B0:25:D4:01:47:1B:EF:8A:8B:45:B6:22
            X509v3 Authority Key Identifier:
                keyid:E8:E7:27:11:36:B2:1A:15:8A:EF:40:9D:30:E2:C6:00:1D:5B:0D:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6OcnETayGhWK70CdMOLGAB1bDak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/cbf425-b958-4e49-9c96-8356d2d42771/1/6OcnETayGhWK70CdMOLGAB1bDak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:dd:4c:6f:ff:9c:39:cd:a0:09:76:aa:32:2d:cc:7d:1f:5b:
         f6:d2:4d:2a:f8:c3:4e:82:19:65:38:32:ce:21:71:3b:00:60:
         e0:b4:75:75:64:e8:a5:0c:69:fc:2d:48:ab:06:c6:7e:5a:52:
         b1:2f:56:18:23:f6:ca:4a:5c:ed:09:88:e0:5a:61:57:83:a7:
         85:7a:20:b1:34:43:4d:df:21:05:c6:a7:ee:3a:ea:00:b2:ad:
         8d:0a:77:8c:a6:d3:71:3e:48:6b:19:18:4c:fd:8b:7f:64:4a:
         45:2a:75:6a:d6:26:49:7c:96:40:53:f3:23:b6:dc:88:94:89:
         26:71:34:96:3f:e2:d8:49:53:92:4c:e2:31:bd:34:7e:44:de:
         e5:55:2a:fc:5e:d8:ca:29:38:d8:87:7b:24:21:28:dc:c0:bf:
         f0:9a:1c:42:ca:ae:ee:b1:60:43:07:4d:e0:d3:1a:6f:13:56:
         89:a2:a6:a1:b1:6f:d3:c9:8c:04:d7:ba:13:87:21:56:57:77:
         46:6f:d0:09:4c:f9:b3:21:ee:9e:00:9c:a5:9a:ee:3e:63:b5:
         8b:0f:fd:ad:d5:0b:4d:14:fd:3f:2e:97:36:5d:0f:e8:c7:63:
         1a:e8:a2:57:3a:03:69:ed:6c:af:d8:b4:20:91:68:0f:bb:8b:
         2a:42:11:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:32:54 2025 by rpki-client