Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          lulGagBA7skuG24+a5y+U8zb11DLCKfXuXnzlJtJy0E=
Subject key identifier:   85:13:52:25:E1:93:8E:B0:14:82:B0:A4:9B:85:61:1A:C0:AC:77:17
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       01974854FB0FCACB3C07F502E7DB91F175F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0895
Signing time:             Sat 07 Jun 2025 03:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:18 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: OvJY35IVG0pMr9yKdY1KZ3N4nwFbx8wCgieY7Ft2LA0=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:54:fb:0f:ca:cb:3c:07:f5:02:e7:db:91:f1:75:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Jun  7 03:00:18 2025 GMT
            Not After : Jun  8 03:00:18 2025 GMT
        Subject: CN=85135225e1938eb01482b0a49b85611ac0ac7717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:8b:ad:46:d1:2b:86:09:bd:a1:d7:15:85:
                    47:e6:06:ba:65:9e:04:28:6e:89:fb:59:e8:4b:e6:
                    68:ce:28:b8:2b:2a:36:79:cd:2a:7e:75:76:37:3c:
                    d1:1a:59:74:fb:f4:de:b6:8d:07:7d:90:8b:0d:39:
                    b9:ae:25:d4:15:0e:5b:85:a1:75:fb:64:5d:b5:35:
                    28:93:1f:ea:e0:92:88:d9:d3:be:0e:28:ee:86:f3:
                    b7:81:74:09:be:a7:51:94:cb:79:f6:34:3c:2a:17:
                    68:67:45:50:99:9e:dc:02:77:72:ca:bd:ca:03:18:
                    bf:91:7a:9d:16:31:28:de:36:31:06:e8:4f:d5:08:
                    2a:69:c3:0c:b9:9f:55:d5:f9:98:92:9f:90:a9:fc:
                    9d:c7:73:5a:6e:dd:17:36:6c:15:10:18:d1:1b:c6:
                    06:d3:21:1f:cb:a6:ee:82:c9:07:9d:ce:89:f7:ca:
                    95:16:8c:c5:9f:06:0f:db:84:c5:81:c7:6e:a2:13:
                    ac:2e:88:fa:98:c2:75:db:48:ff:29:e6:55:28:1f:
                    8e:a2:01:44:7b:c4:15:2d:29:57:53:75:9d:36:1d:
                    4e:8c:66:7d:84:7a:5f:ed:28:ba:78:bb:84:7d:27:
                    55:88:59:86:0c:f4:77:f5:3f:53:cf:d4:8d:b6:d3:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:52:25:E1:93:8E:B0:14:82:B0:A4:9B:85:61:1A:C0:AC:77:17
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:3c:70:4c:3b:bf:12:ad:42:d9:d0:f3:c7:d0:9b:2b:68:
         06:3e:6a:a0:22:89:44:3a:07:2f:4a:eb:9d:3f:bb:76:1d:c9:
         f3:69:9d:a9:e6:a6:b5:42:cd:95:8b:9d:58:37:ab:bd:d4:34:
         7e:68:b1:2d:d9:c5:ed:14:84:9d:52:3b:40:0d:0a:cf:ed:b7:
         c2:82:d2:74:8d:55:7f:e3:70:68:68:20:92:93:f5:df:38:3e:
         45:ba:ff:cb:d1:9d:a8:6a:89:f9:e7:b9:6d:81:c7:5c:94:0b:
         c8:ff:16:0a:0b:74:e7:cf:23:8c:12:97:b9:0a:fc:b1:c6:91:
         6d:5a:c0:fe:49:2a:6b:8a:58:ad:c9:b8:d3:bf:9b:0c:5a:d3:
         05:31:87:7b:3e:58:c7:25:36:12:0d:93:9a:73:e4:cf:d5:1c:
         29:29:1c:7f:21:5d:19:18:b6:3d:46:c3:22:34:f5:15:87:9d:
         f2:81:d9:3f:5b:85:86:d3:21:bb:4f:72:94:ab:01:82:ad:d3:
         9f:99:f8:d4:6a:22:2f:26:31:ad:7f:a9:35:b1:e8:e3:ae:f2:
         f8:de:dd:ee:aa:c5:eb:e8:c2:23:16:a5:85:cf:17:fe:63:9a:
         f1:10:3f:12:c1:e1:79:32:52:8a:2e:ba:fb:8f:ad:5c:6a:6c:
         7a:3c:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:32 2025 by rpki-client