Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
File:                     6w649Uh9dBqMxtbfOzkhke0-7T8.mft (raw, json)
Hash identifier:          7RRDx8cgri4qQkFf02EtYfiEy3jwinscVSmgCPPr3YY=
Subject key identifier:   56:6E:85:28:CD:38:C1:F7:0C:F8:92:86:28:B0:AE:E1:64:05:9D:CE
Authority key identifier: EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F
Certificate issuer:       /CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
Certificate serial:       019847AD9AC379B82F69E57E66FA42003732
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
Manifest number:          0BAC
Signing time:             Sat 26 Jul 2025 17:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:16 +0000
Files and hashes:         1: 6w649Uh9dBqMxtbfOzkhke0-7T8.crl (hash: AiQJ+JVm8h2Nv1+qBaMJkfmS3oDLhdr/RBr1fZx8tQE=)
                          2: aNZ_w4ct0s6F9JNwvU81Pvph6xA.roa (hash: DMpkzc/SEQWOGXDtkCkwGEzbNT7zz+eYHoA6cnEiN1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:9a:c3:79:b8:2f:69:e5:7e:66:fa:42:00:37:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb0eb8f5487d741a8cc6d6df3b392191ed3eed3f
        Validity
            Not Before: Jul 26 17:00:16 2025 GMT
            Not After : Jul 27 17:00:16 2025 GMT
        Subject: CN=566e8528cd38c1f70cf8928628b0aee164059dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:fa:1d:ff:e8:39:23:d2:79:37:66:8f:33:
                    fa:1b:ee:bd:99:e2:91:a1:34:94:7e:e6:d0:db:a5:
                    6d:c2:45:61:2b:18:f9:17:01:9f:c4:23:0c:2b:95:
                    ab:78:cb:ca:bf:e8:49:aa:0b:c8:b6:d9:ee:7b:41:
                    98:4c:b0:c6:1f:32:f7:26:b6:bb:18:c6:97:20:a3:
                    77:06:ff:a7:3a:0f:39:7f:12:31:40:fc:0c:de:aa:
                    fe:45:1b:f2:16:55:4e:b3:e6:e3:1d:c7:90:5b:75:
                    bc:e9:b0:70:59:af:c3:66:7d:80:62:b3:4b:70:12:
                    52:39:e8:f4:44:ff:55:a5:ce:1a:d5:c5:05:c9:84:
                    1b:be:78:f5:e8:4d:6e:6d:d8:ec:4f:71:5a:6a:61:
                    12:0b:4a:c4:46:cf:60:69:de:04:e3:24:fe:ff:93:
                    60:18:da:dc:c1:e5:af:f4:02:10:ae:a9:25:0d:93:
                    2a:1a:35:2a:7b:f7:af:65:82:35:af:75:63:5e:ad:
                    e5:9e:fc:e1:c7:6b:ec:9c:a2:aa:74:2e:41:1d:6d:
                    d7:df:20:22:2b:ad:e4:b1:bc:93:9f:c1:de:5b:e8:
                    47:df:56:98:af:32:fb:83:74:1f:34:20:da:9b:bc:
                    03:e6:8b:1b:fd:32:11:83:62:54:ab:f5:47:b3:35:
                    5b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6E:85:28:CD:38:C1:F7:0C:F8:92:86:28:B0:AE:E1:64:05:9D:CE
            X509v3 Authority Key Identifier:
                keyid:EB:0E:B8:F5:48:7D:74:1A:8C:C6:D6:DF:3B:39:21:91:ED:3E:ED:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6w649Uh9dBqMxtbfOzkhke0-7T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d16b46-b8cc-4456-a450-27e27c163102/1/6w649Uh9dBqMxtbfOzkhke0-7T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:23:7e:d0:e5:3a:56:dd:61:b6:91:48:33:fa:19:a5:38:
         13:32:b6:b6:c1:bc:78:0c:35:2c:f0:8a:e5:b2:23:d5:9a:93:
         a2:13:af:8f:8d:ca:01:d5:89:61:58:ce:da:86:97:f4:7d:ac:
         92:23:ef:40:8e:73:ea:75:4b:2b:a1:cb:92:82:09:5a:fb:15:
         95:7b:d3:8e:d1:8f:19:40:aa:98:f7:c0:7a:1f:1a:a9:67:bc:
         bd:dc:f7:35:00:31:6c:cd:6e:bd:97:18:56:73:dc:48:28:23:
         87:b7:d0:36:3a:e3:f6:e3:d0:7b:ac:4a:bd:26:96:04:d4:34:
         00:df:98:02:2f:c5:93:b0:c9:75:10:e3:b7:8b:2a:88:8b:75:
         2d:a5:14:cc:d0:73:3f:a3:5b:9a:9a:09:08:d7:ef:6b:da:1d:
         b3:5b:2f:bd:57:5a:f8:11:3a:38:66:58:41:2b:ce:f7:07:af:
         bf:c4:3a:61:e9:47:ff:51:7b:58:d0:15:e6:be:97:06:2d:21:
         a2:a5:1a:bf:21:c7:ce:e8:cb:43:f8:67:b8:ba:cc:fa:18:58:
         9b:8b:aa:82:42:e4:da:dd:1a:c5:70:8c:6f:f5:c5:5f:d2:a3:
         51:61:74:5b:84:77:a4:d0:57:65:d3:81:9d:ca:a4:82:5b:63:
         3a:4e:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:34:15 2025 by rpki-client