Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
File:                     6MibPc36Jpe0hyEwjHa2c3KhOxU.mft (raw, json)
Hash identifier:          zwIwcmv9dsJ75to2ZvaQ3cQXEvACT9W9xWGwvow5MdA=
Subject key identifier:   66:9E:FA:AE:58:73:E1:9B:4B:AB:3B:2B:32:67:ED:9C:C5:5B:ED:C4
Authority key identifier: E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15
Certificate issuer:       /CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
Certificate serial:       019931FF54C3A8C9B5137C7B0A9F6870DBD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
Manifest number:          0E51
Signing time:             Wed 10 Sep 2025 05:00:40 +0000
Manifest this update:     Wed 10 Sep 2025 05:00:40 +0000
Manifest next update:     Thu 11 Sep 2025 05:00:40 +0000
Files and hashes:         1: 6MibPc36Jpe0hyEwjHa2c3KhOxU.crl (hash: gXmYr8sNIiEa41a3s7/0uunpjJ24KZHQOno9QAYPSqQ=)
                          2: jJb63WHX8LsB3QDuigxBrD65ZR0.roa (hash: +ilD7JtRRxaEC6UNmKq5fdG6fZrQuNb1tHL4KgM7JRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:ff:54:c3:a8:c9:b5:13:7c:7b:0a:9f:68:70:db:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c89b3dcdfa2697b48721308c76b67372a13b15
        Validity
            Not Before: Sep 10 05:00:40 2025 GMT
            Not After : Sep 11 05:00:40 2025 GMT
        Subject: CN=669efaae5873e19b4bab3b2b3267ed9cc55bedc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:82:30:7c:0d:b4:fc:25:c5:bb:c2:ad:7c:
                    7d:4b:66:98:71:31:61:7e:fc:ba:1f:4d:0c:2a:fc:
                    f8:68:95:8e:11:21:ae:2d:7c:0c:43:b0:cc:fe:50:
                    e1:e9:db:de:bd:f4:e0:97:27:7b:de:16:40:17:1a:
                    70:f3:9d:63:77:4a:5f:e9:56:e4:29:27:31:c6:14:
                    54:0d:36:61:47:65:8b:87:b6:78:d0:29:31:d4:3d:
                    99:0c:c2:a0:02:c0:59:0f:a2:91:f4:e4:b9:f9:59:
                    15:8a:74:1c:53:13:74:d8:75:75:98:bf:eb:7c:dc:
                    e5:b0:22:ad:f5:52:38:e8:d7:d8:75:dd:30:69:f8:
                    8a:31:70:61:34:a7:b2:c7:7f:ed:84:20:b6:44:30:
                    22:30:ba:07:fa:2f:82:7b:81:8c:ee:25:f3:88:ae:
                    22:ef:1b:bf:17:2b:4f:67:01:70:fb:11:25:cc:cf:
                    04:fc:74:1a:46:7c:70:23:68:ec:70:6b:a2:7d:77:
                    73:6f:b4:58:be:a6:68:ea:e7:54:aa:fc:b1:c5:bb:
                    c1:82:93:cf:0b:e1:6d:a2:06:6b:e4:57:87:e5:1b:
                    58:bc:35:b9:11:f5:1c:24:bb:e6:05:36:25:1f:3f:
                    33:80:1c:d4:ec:46:24:66:a8:b7:14:29:2c:a5:e7:
                    75:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9E:FA:AE:58:73:E1:9B:4B:AB:3B:2B:32:67:ED:9C:C5:5B:ED:C4
            X509v3 Authority Key Identifier:
                keyid:E8:C8:9B:3D:CD:FA:26:97:B4:87:21:30:8C:76:B6:73:72:A1:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MibPc36Jpe0hyEwjHa2c3KhOxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/f231e4-67a6-4c55-91f5-934b4439092d/1/6MibPc36Jpe0hyEwjHa2c3KhOxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:04:86:56:7c:c7:19:9d:59:27:59:c9:4a:83:a7:59:78:
         d2:a9:0f:c5:d0:60:1f:54:6b:91:89:b8:af:64:38:d3:2d:12:
         a6:f8:ea:a6:e5:71:b9:27:32:7e:6f:ac:c8:38:01:68:ca:e4:
         f4:f5:e6:71:09:76:19:1b:5a:4b:36:2c:d7:54:51:4a:47:3c:
         a1:53:92:c0:8c:17:54:08:ac:1c:02:18:93:21:ad:99:dc:93:
         08:9e:52:f0:44:af:3a:f1:bb:32:db:82:bd:71:ab:8f:13:2c:
         d0:4b:e0:b8:eb:33:3b:e3:3d:3b:95:52:b6:51:01:60:62:d2:
         bb:4e:0d:af:36:67:83:2d:a1:c2:d1:77:9b:d5:0f:df:9c:5e:
         5c:67:b7:97:b7:52:39:68:35:fa:09:5f:d7:ec:1a:a7:e5:75:
         fb:c0:a5:00:ba:77:02:8e:98:ef:13:2b:07:98:a7:73:e6:96:
         3e:cf:6d:f4:aa:91:51:66:bf:72:1a:46:4e:bf:fa:95:4e:99:
         f0:f7:8e:44:8b:72:f0:29:fa:01:19:4b:b1:8d:c0:b8:e0:78:
         f5:5f:0a:ec:13:52:ae:45:b7:77:7a:23:c1:00:b3:f1:f8:98:
         4a:fa:f3:ed:eb:1b:14:3f:7c:e2:af:87:f0:4f:3e:56:f2:4e:
         e9:48:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:13:05 2025 by rpki-client