Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File:                     6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier:          XX6nDNjhyK037Ub1LfYzPZ4j8wggTQRL0hbnHVJH7/A=
Subject key identifier:   51:9E:83:83:2D:24:DC:43:5A:7E:C9:42:E5:06:3F:9A:9D:0B:CB:D2
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer:       /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial:       019848F78A8A242160A09A29B4916E45B11F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number:          059C
Signing time:             Sat 26 Jul 2025 23:00:38 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:38 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:38 +0000
Files and hashes:         1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: 1MknkI8/LFKl/X3+wpf1UFQ7LlJ6nN5+Zu4K223HS8I=)
                          2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:8a:8a:24:21:60:a0:9a:29:b4:91:6e:45:b1:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e994e74064158e97904990947510eb9941986ca1
        Validity
            Not Before: Jul 26 23:00:38 2025 GMT
            Not After : Jul 27 23:00:38 2025 GMT
        Subject: CN=519e83832d24dc435a7ec942e5063f9a9d0bcbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d8:fd:e3:c8:06:ec:03:58:4c:65:87:90:ae:
                    4d:75:67:ea:88:60:f0:6b:c3:28:1f:cc:01:24:58:
                    a5:06:f5:0c:7b:71:33:ad:21:d0:18:9b:12:11:2a:
                    a3:05:e4:c4:88:62:16:f8:ac:66:7c:76:20:61:b4:
                    d8:89:87:41:28:84:d3:4a:d3:d7:f1:dc:91:63:d3:
                    e4:25:51:07:c3:11:e3:dd:62:0e:b3:26:e2:ec:10:
                    d9:d1:fc:d8:f6:5c:ff:1a:2c:8f:d9:df:98:f8:97:
                    c9:e4:68:b5:ad:01:e8:c7:8c:23:5b:86:14:d3:30:
                    fa:f5:f5:4d:75:de:d2:cd:cb:bc:51:d6:26:49:f0:
                    7c:19:f8:1c:02:55:4b:8c:85:9c:c2:fa:4a:0a:da:
                    08:1d:43:95:0e:dd:bc:4e:14:8e:d4:54:c5:bc:23:
                    98:75:12:3c:8d:73:9e:ba:df:d2:d1:b0:c9:cd:5c:
                    40:51:ca:34:32:2a:93:c0:db:ee:f4:fc:d5:34:e7:
                    38:d8:b3:0e:4a:a1:2a:f5:17:0a:99:fa:ca:7d:9f:
                    c0:bf:fa:b4:9d:44:bc:9e:b6:41:00:70:71:b3:69:
                    e0:45:2e:16:20:de:2d:f8:78:4e:e0:73:3d:27:64:
                    14:1a:4d:86:3a:34:d1:14:55:3f:96:f4:6b:30:5c:
                    38:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:83:83:2D:24:DC:43:5A:7E:C9:42:E5:06:3F:9A:9D:0B:CB:D2
            X509v3 Authority Key Identifier:
                keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:42:94:dd:06:f3:e9:1d:b8:95:8e:cc:67:c9:e5:06:9a:b2:
         fc:1f:45:94:25:c4:44:b1:8d:7a:0d:54:8a:31:4a:2f:fe:b7:
         61:2b:4f:8f:e7:21:d3:59:c9:26:4f:9d:79:47:46:cc:9c:9b:
         a9:2d:75:8f:07:dc:8a:99:0f:f4:88:b0:e6:13:60:0d:6a:f2:
         ec:97:e7:45:7a:f9:78:13:82:de:45:c0:8d:4d:61:96:69:7a:
         3b:19:2d:bf:69:6a:04:88:3b:e4:e4:cb:ad:05:91:f4:da:62:
         0c:47:79:b6:d6:2f:25:03:37:36:a8:25:af:c0:c9:f8:c1:36:
         e0:c1:99:6b:65:dd:ff:eb:2b:08:e4:c3:cf:93:f7:cc:e7:8a:
         4c:02:d0:f5:89:35:04:b0:60:bd:09:c9:3b:fd:fb:69:41:83:
         33:57:3a:5c:3f:fe:71:69:24:7a:7a:b5:7e:42:13:fd:4a:83:
         65:a5:1d:0e:5a:8f:45:16:cf:7e:76:bd:4b:23:d7:57:b5:d0:
         fb:cb:fd:9f:74:a2:55:71:d5:29:eb:db:9b:24:ca:f9:29:0c:
         f0:dc:0b:4e:b9:53:24:19:f0:46:0d:1e:75:b3:c1:32:3a:a6:
         91:3d:f7:01:49:eb:c3:4d:84:5f:25:84:3a:da:ae:46:21:11:
         a5:ad:c0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:46 2025 by rpki-client