Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          lBZLf4WYq8mEaAP/erICLO4aSgdizX9nrqtoDJOCQVc=
Subject key identifier:   15:13:51:B2:BF:51:70:7A:73:AB:9D:C2:39:65:26:49:96:47:BD:A1
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       0198289240F200EA6283B0E89963CF8FFBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          148D
Signing time:             Sun 20 Jul 2025 16:02:10 +0000
Manifest this update:     Sun 20 Jul 2025 16:02:10 +0000
Manifest next update:     Mon 21 Jul 2025 16:02:10 +0000
Files and hashes:         1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: oAJ6ikOTyYIYxzWO7QiJpww7MfGul5wlauiuc5TjvVQ=)
                          2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
                          3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 16:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:92:40:f2:00:ea:62:83:b0:e8:99:63:cf:8f:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Jul 20 16:02:10 2025 GMT
            Not After : Jul 21 16:02:10 2025 GMT
        Subject: CN=151351b2bf51707a73ab9dc2396526499647bda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fe:fa:df:b8:6c:ee:8d:d9:7e:6b:f3:a9:6a:
                    82:25:d9:b6:de:0b:9a:89:d8:6a:3b:28:47:c3:33:
                    58:24:a4:bd:0c:d4:1f:d9:16:2c:85:ec:ba:75:cd:
                    b6:1c:86:be:78:20:d8:95:a0:b3:8e:f4:d6:8c:08:
                    17:f8:96:33:3b:8e:e9:f8:c8:8d:4c:f5:20:8f:62:
                    bd:3c:d5:47:ca:3f:ff:ec:d4:71:99:61:92:85:f8:
                    63:a6:05:47:e6:11:02:66:e6:9e:9f:db:68:cc:f7:
                    94:90:53:52:88:76:03:03:f2:57:df:df:d0:26:ac:
                    46:7d:34:dc:03:93:5f:eb:ce:e4:6d:b5:98:5d:6c:
                    d6:d2:30:8a:66:1f:c7:27:54:b5:bc:b2:8b:74:9e:
                    9b:f3:60:53:6e:65:d7:80:5e:a1:c9:53:70:93:9f:
                    19:4b:08:06:76:99:e4:5b:be:e2:50:3c:44:f9:6e:
                    e0:b9:27:01:b7:7b:4e:fc:12:15:5d:24:fc:84:fe:
                    25:df:2a:92:16:6e:52:cf:9d:ce:c2:72:be:2d:3a:
                    6b:c5:8a:3d:b0:94:9c:a5:74:db:b4:93:4b:48:1b:
                    3f:17:54:fe:3d:50:42:27:fa:4b:21:ed:66:0e:0e:
                    32:d2:85:7c:7b:94:3f:7e:e6:87:ae:b0:c8:ed:a1:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:13:51:B2:BF:51:70:7A:73:AB:9D:C2:39:65:26:49:96:47:BD:A1
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:44:7c:77:91:cc:5d:ca:f7:16:5b:41:ce:68:34:4b:cf:7f:
         97:c9:bf:c1:a3:11:3c:1e:3c:ea:69:c8:f4:50:d1:e5:60:ef:
         49:0b:2a:25:24:59:b1:eb:b8:1b:5a:24:54:74:69:af:3b:2b:
         8f:db:56:a2:f2:fd:70:cf:13:5e:ed:c3:74:3a:90:ec:fe:33:
         4b:d7:21:fe:d1:b7:1b:8b:32:42:b3:8a:42:79:e5:ee:2f:5e:
         53:30:61:1a:4c:04:4f:ed:42:42:aa:c4:95:d8:b8:df:e0:a1:
         ba:bd:f7:25:db:8f:03:f2:ce:84:8b:3f:88:bb:51:ac:3c:cc:
         05:c3:be:fe:57:98:11:9e:c1:e5:ab:04:14:f9:0b:68:17:fe:
         af:90:eb:18:d7:cb:44:61:30:f1:ed:83:a7:03:2e:bb:1c:51:
         d3:44:27:a9:01:16:7c:50:3c:2c:df:d6:49:54:76:0a:14:ca:
         08:4e:cc:a7:23:9a:35:5f:87:bb:df:3f:76:e3:e0:43:ee:0f:
         a1:99:6e:9c:50:e0:46:25:dc:40:ff:ea:30:d7:a6:2a:7c:58:
         c8:49:da:81:8b:4e:0f:25:56:a1:c4:b1:99:9d:b7:6c:2b:07:
         c0:31:e9:67:04:f6:48:cd:0f:fe:e6:ff:35:69:6b:be:e9:f0:
         77:ad:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 00:02:41 2025 by rpki-client