Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
File:                     6TjNfs8jrBxJYlRuG89eCDrSKaU.mft (raw, json)
Hash identifier:          0uu3HZSi8ZFhwLOQbnqzonYxh2mxDzULt7gmoCJsHlA=
Subject key identifier:   60:41:9E:76:08:5C:80:22:0D:A9:DB:42:5A:9A:9B:6F:2A:D7:E9:C2
Authority key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Certificate issuer:       /CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Certificate serial:       01974666F657BD5C223DAD788BCC636D1F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
Manifest number:          157D
Signing time:             Fri 06 Jun 2025 18:00:42 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:42 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:42 +0000
Files and hashes:         1: 6TjNfs8jrBxJYlRuG89eCDrSKaU.crl (hash: fHL8D2xADgJ6ylSETch4OELE4S+GPqY9Ffz9anA8qoQ=)
                          2: Goi94Dc_RUuC8EGWeEnJH7qqhjU.roa (hash: G+DgjuNd7tv+5EJaL+G6NuJWBrxhCutOC8EdL+rglNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:f6:57:bd:5c:22:3d:ad:78:8b:cc:63:6d:1f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
        Validity
            Not Before: Jun  6 18:00:42 2025 GMT
            Not After : Jun  7 18:00:42 2025 GMT
        Subject: CN=60419e76085c80220da9db425a9a9b6f2ad7e9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:ed:7b:50:43:00:4d:05:5d:88:d7:c0:7b:
                    5d:e2:76:a0:87:f7:22:58:43:d2:c1:7e:4e:d1:e2:
                    ea:ca:3e:89:8d:9a:dd:b0:ae:77:b6:c4:a4:c2:43:
                    34:1b:b6:61:65:f6:dd:5c:d9:1e:f4:97:73:c0:2b:
                    00:96:38:21:64:19:42:50:e1:25:a9:a4:bf:3b:49:
                    04:c9:bd:18:e4:50:6f:62:ee:5f:80:83:30:6f:49:
                    04:ec:40:3d:16:65:46:31:63:65:26:f6:11:d3:9d:
                    97:7a:9b:a3:ae:0b:e6:72:72:44:7d:c6:de:b3:71:
                    9e:fb:e0:7b:7c:42:b4:f7:6e:67:bd:67:a4:3d:ad:
                    21:f6:98:82:44:45:35:fa:0e:4d:ff:bb:31:07:5c:
                    6f:87:08:c7:11:d0:63:4d:6b:17:4e:e2:7b:c4:1b:
                    2b:11:76:82:46:37:4a:58:ef:04:08:1d:da:bc:c0:
                    2e:01:3b:72:e1:d3:14:cb:23:46:01:b6:3b:e1:43:
                    da:f0:96:b6:49:5e:f6:d8:19:60:66:b5:33:95:25:
                    3c:79:ec:16:b5:81:5f:06:6f:17:05:58:70:d0:65:
                    cc:90:ab:ce:a7:10:1f:bc:86:01:b2:8b:b5:23:c5:
                    48:43:51:b2:80:0b:08:cf:e3:a0:4e:41:03:63:e0:
                    27:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:41:9E:76:08:5C:80:22:0D:A9:DB:42:5A:9A:9B:6F:2A:D7:E9:C2
            X509v3 Authority Key Identifier:
                keyid:E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:de:7d:24:af:c5:31:bc:88:b1:85:64:92:a7:95:d0:88:
         03:d7:30:6d:bc:a3:17:c4:4b:79:f9:7c:d8:5c:02:96:b8:7e:
         63:24:95:b7:f0:26:f8:73:08:87:6f:9a:6a:cb:00:1a:b7:16:
         df:d5:62:d9:cb:6c:03:04:46:34:38:90:25:e9:10:07:7a:45:
         8d:95:fb:cb:ab:33:43:38:28:72:10:5a:46:63:ed:79:d4:28:
         13:25:08:8a:5e:e6:2c:a4:67:1b:cd:fb:ea:e7:cc:3b:0c:a2:
         ad:8d:ad:d4:97:ea:ee:d0:82:78:2a:81:5f:8a:e8:7a:27:72:
         ba:98:84:07:f0:05:01:58:0d:ee:b0:48:5d:51:4e:72:50:bb:
         6d:1f:12:9e:d3:b0:9c:38:87:6e:0f:91:b3:86:28:60:54:3c:
         60:cb:6a:5e:33:4b:4d:e4:a5:5d:87:9a:d5:9d:04:90:8c:36:
         a6:88:66:ea:67:1c:36:f9:bf:46:ae:53:e2:f2:35:91:cd:4e:
         67:10:01:ed:c5:67:29:62:2e:f7:b5:a7:63:e5:ee:bd:aa:e4:
         e5:1d:07:51:70:ea:b9:27:80:02:44:a6:05:fa:51:1b:4f:3a:
         54:64:89:0e:29:00:72:45:83:24:28:a1:0e:59:e8:da:d2:df:
         12:06:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:36:11 2025 by rpki-client