Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          maBma/ntOFnPKHe5hAJpaauwWLPloKePvSGsOyaft4I=
Subject key identifier:   06:71:2C:99:6A:C5:96:02:93:5E:27:7A:4D:F7:26:44:8A:72:91:7B
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       019916F5BAD3E32100247C1C7DEC320BAA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1653
Signing time:             Thu 04 Sep 2025 23:00:26 +0000
Manifest this update:     Thu 04 Sep 2025 23:00:26 +0000
Manifest next update:     Fri 05 Sep 2025 23:00:26 +0000
Files and hashes:         1: 8GYAexsjvmr0ISLsQKryGmpLtTs.roa (hash: SQMUuzA/SYQZuwCfc0e9iAWXVLPmE3XP9dpG659uDkI=)
                          2: GX0hRHwpO_GFAf_Dl8eMW3z_248.roa (hash: HctIB8ovJUFcdq28I1mZn+xQVZZMOfz92Vt9MrUaS78=)
                          3: WKensdemy_AXuee8qERPXAv7WQQ.roa (hash: 5h5e2Cjl6Y6xTdpx1Uogj/kqIPDJsoW5m77rPfpWD30=)
                          4: Yp8Y2f-rm0XFP0JksYyQiIn5YI4.roa (hash: zUTWYSFUC05+hAZt14a3XZJms6iqhzhaVnj/uuxFKy0=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: i0DkqxFSHVh56yBFmEu+FSQ2EskZtgq0TXMovC4CHXw=)
                          6: p78TdZM7jp7r56ACoeEx_vocT4c.roa (hash: GFGeQudO2jovI4snICeqKAiASNPKMGJsocJeu39JBto=)
                          7: tXVRXa1qJjFTp7ESN89vh6T8E94.roa (hash: 0lv9VjdN51nQRf36Hx017s+uMUMF9eBDdjJHsff15ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f5:ba:d3:e3:21:00:24:7c:1c:7d:ec:32:0b:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Sep  4 23:00:26 2025 GMT
            Not After : Sep  5 23:00:26 2025 GMT
        Subject: CN=06712c996ac59602935e277a4df726448a72917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2a:8e:2b:9e:8e:f8:ab:b1:47:9b:89:e4:cd:
                    43:da:b0:e3:68:7c:13:f9:9a:b1:07:a1:de:f2:e6:
                    2d:72:d6:91:ea:40:5d:07:a2:52:9f:1f:8b:eb:ee:
                    d1:44:72:7a:6f:a4:d3:13:58:cc:7b:4c:1b:84:76:
                    f5:a1:0e:b0:19:00:58:25:d9:a4:bf:68:3b:63:9d:
                    c6:bb:2c:b5:58:71:d9:9e:9f:5a:16:4f:06:a5:cf:
                    21:3c:78:e5:31:7f:f5:c5:4c:66:96:40:46:b0:91:
                    9a:5b:20:c5:df:fd:ad:91:9e:f2:cf:6d:8d:54:cf:
                    73:2c:4d:78:82:c9:e6:1a:1d:92:d2:8e:5c:d5:d1:
                    b9:fa:77:be:3e:0b:50:dc:d2:e7:80:3a:08:b3:f3:
                    f0:de:03:7a:6e:22:65:f6:1d:1f:da:6f:75:10:92:
                    67:0d:b3:aa:31:b9:f2:1b:b1:23:ed:14:0b:24:86:
                    8c:5a:57:bc:c7:9c:8d:e9:5b:6c:5b:9e:aa:12:bd:
                    ea:15:55:2e:06:f3:95:60:55:00:7c:78:89:fa:45:
                    8a:8d:0a:af:f3:65:c1:da:14:10:91:92:5f:f8:d3:
                    49:36:20:a8:89:4c:2c:d6:81:7c:c1:3c:53:b6:9d:
                    82:ca:2f:22:09:cd:74:e4:61:4d:81:cd:91:2c:df:
                    b2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:71:2C:99:6A:C5:96:02:93:5E:27:7A:4D:F7:26:44:8A:72:91:7B
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:38:54:7d:98:e7:5d:f6:c6:00:de:d6:45:ea:0c:8e:09:9e:
         d7:c6:cb:1c:93:33:36:33:68:a7:e2:0e:2d:68:ed:fa:27:d9:
         65:8c:c8:6c:47:5d:50:f7:12:a3:a5:ea:4c:82:bd:78:94:e9:
         65:ef:4d:4d:d5:ef:cf:b8:b6:70:0c:93:3b:71:c2:c7:6e:c9:
         8a:dd:5f:70:23:22:a9:e3:19:a6:79:d5:75:c8:3d:45:2f:0e:
         e8:ff:4f:2b:df:b6:ea:a6:99:c2:fe:c0:aa:4d:8b:e2:64:e6:
         fc:ed:a6:14:a3:e2:8b:3d:18:d9:6b:07:20:08:a4:dd:15:db:
         1a:79:8e:15:7e:b4:23:cb:ae:05:de:1e:40:f9:f0:d0:71:2e:
         f9:b4:b3:cf:a4:e6:a3:f2:15:c0:dd:fd:db:c0:90:49:f4:ce:
         bf:0c:95:98:7f:67:d9:1d:68:f2:7b:19:5f:b3:e0:57:33:79:
         c5:96:6b:bf:b9:b5:bf:02:e5:d9:6d:d1:35:13:0f:ab:e8:13:
         b9:06:00:f4:63:75:86:43:b9:81:80:49:a1:00:80:5a:6c:48:
         3e:b5:d3:50:03:3a:13:49:a4:09:c2:e0:30:98:79:37:55:43:
         c7:93:66:6f:66:6a:1e:2e:fa:5d:b1:d0:f2:52:dd:ea:85:8b:
         2f:46:23:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:19 2025 by rpki-client