Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
File:                     6MC119fK9-9NNVXA2Q6V17-G5gY.mft (raw, json)
Hash identifier:          zOxlJb9rjnq9qML/CLajCvXPev5EgsfzmAhXvcJ4BcI=
Subject key identifier:   D3:14:D4:5D:D2:61:6F:AD:66:99:1C:49:D1:11:42:25:DF:46:06:DF
Authority key identifier: E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06
Certificate issuer:       /CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
Certificate serial:       01974B8D96F7C6AC6DB4ED6A9D2F70B4F266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
Manifest number:          03FE
Signing time:             Sat 07 Jun 2025 18:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:59 +0000
Files and hashes:         1: 6MC119fK9-9NNVXA2Q6V17-G5gY.crl (hash: 7mnqPGSIYqCm/OIwMYa/rhJky6c2oOU9Kl6MPNsSogg=)
                          2: zLqJ2jk1gnb1U6_xEyeO1kXar2w.roa (hash: f9xXsOCbyfrGDmPeAHiz1i2Ip8aFRkb7BmV8Krt70eA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:96:f7:c6:ac:6d:b4:ed:6a:9d:2f:70:b4:f2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c0b5d7d7caf7ef4d3555c0d90e95d7bf86e606
        Validity
            Not Before: Jun  7 18:00:59 2025 GMT
            Not After : Jun  8 18:00:59 2025 GMT
        Subject: CN=d314d45dd2616fad66991c49d1114225df4606df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:8b:82:30:fe:60:0f:15:bb:2c:71:27:dc:
                    dc:50:68:a6:02:1d:0a:b4:6e:d8:3e:ea:20:6c:83:
                    fc:36:05:bd:b7:57:3d:67:86:9f:df:b0:ae:63:e0:
                    2a:f4:e2:77:f0:3a:af:8e:88:a7:e8:c9:5c:f7:09:
                    11:86:a6:3b:e0:00:8f:54:87:0f:c6:e3:5a:cf:78:
                    82:6f:86:95:64:d5:54:57:76:fe:31:28:5f:e6:de:
                    d5:80:ed:95:c7:e3:18:52:2e:53:d9:30:cc:b6:bc:
                    f1:a1:e7:68:00:00:de:75:28:84:14:a0:14:2b:4c:
                    7c:1f:75:8e:9d:05:1a:bf:83:64:4a:8a:9a:1e:f9:
                    f8:86:8f:fa:e8:17:73:aa:af:cb:e2:7d:e0:a4:f8:
                    5f:20:85:a0:5b:78:d2:cf:46:fb:1c:0b:68:dd:5a:
                    78:d6:8f:c6:3e:42:b2:d8:b9:db:12:a3:7a:39:55:
                    e5:0a:91:cd:6e:87:6a:43:ff:57:1c:29:0c:2d:c7:
                    64:36:a2:05:58:d1:f5:bc:52:c3:26:2e:dc:e2:39:
                    a1:a6:b1:05:22:89:55:81:fa:21:1e:15:34:2f:e2:
                    e9:1e:19:04:43:93:28:72:de:ca:66:94:6c:8f:b5:
                    31:01:e8:85:4a:4f:f1:91:b4:de:76:d5:f3:4d:68:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:14:D4:5D:D2:61:6F:AD:66:99:1C:49:D1:11:42:25:DF:46:06:DF
            X509v3 Authority Key Identifier:
                keyid:E8:C0:B5:D7:D7:CA:F7:EF:4D:35:55:C0:D9:0E:95:D7:BF:86:E6:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MC119fK9-9NNVXA2Q6V17-G5gY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c4731c-a8fe-4a0b-991a-35820f51c578/1/6MC119fK9-9NNVXA2Q6V17-G5gY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:79:ce:eb:a3:c5:2c:5c:8c:a0:73:80:48:3b:60:6c:d3:
         1a:1a:97:7f:04:08:19:05:48:5b:13:40:73:23:66:af:1a:11:
         90:c0:bd:ff:f2:f1:d7:96:99:a9:a2:42:8e:0e:32:1a:48:52:
         0f:b8:94:94:eb:db:be:1c:10:2f:be:f2:52:3e:a7:10:78:2e:
         79:b9:1e:bd:fe:e9:36:57:da:33:eb:db:0c:5c:ff:be:60:d2:
         72:00:82:4f:5e:e3:ee:a0:fb:7a:f5:f3:54:38:77:ac:ad:02:
         fe:d7:8f:23:10:10:ec:97:fc:de:bc:5c:2a:be:52:ba:5c:3d:
         f4:86:52:55:08:26:90:f8:39:13:10:43:de:c8:71:57:0a:d0:
         4b:f2:37:6d:c7:6a:9a:4e:32:31:9d:b3:95:54:dc:ce:c1:e3:
         78:90:e7:b9:87:d7:bc:24:44:47:cd:28:d4:d5:27:14:d1:72:
         d6:97:9a:6c:fa:be:41:f0:3d:6a:ae:09:67:4d:14:a6:87:12:
         c2:05:d7:49:85:30:1e:da:54:d1:fb:19:74:7d:ac:1a:99:78:
         54:a1:3d:31:aa:a6:89:7e:cf:7a:2f:1e:2e:c9:64:67:3f:f6:
         fd:7a:76:9a:9c:75:bb:a1:70:0d:73:71:57:a8:40:d1:35:48:
         e5:ce:a0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:13:40 2025 by rpki-client