Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File:                     kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier:          pd3E/UCcKr/CKI8b7504UJvIAfzFd/C/YBaUpKeqeE4=
Subject key identifier:   17:AA:6F:C0:56:F9:D6:2E:4B:71:EF:15:C1:AC:6B:0D:29:4A:93:A7
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer:       /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial:       0199239EF56200308822363DB3F0B8223BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number:          1412
Signing time:             Sun 07 Sep 2025 10:00:43 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:43 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:43 +0000
Files and hashes:         1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: bYjPPQTLnDWW7/i8T34NjeVRsW1byM4XuK7fKfWCKs4=)
                          2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:f5:62:00:30:88:22:36:3d:b3:f0:b8:22:3b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
        Validity
            Not Before: Sep  7 10:00:43 2025 GMT
            Not After : Sep  8 10:00:43 2025 GMT
        Subject: CN=17aa6fc056f9d62e4b71ef15c1ac6b0d294a93a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:66:ad:55:41:91:91:bf:2e:75:bb:79:a4:6a:
                    d8:71:e5:2a:2c:24:35:4d:85:db:f1:af:ed:98:ce:
                    2b:d5:85:05:78:00:6e:52:32:8a:f1:1d:94:8b:e8:
                    8d:0b:94:c6:7a:93:b4:ef:77:1e:09:4b:2a:ba:02:
                    27:2f:1d:83:47:a1:2c:45:76:cf:19:06:45:af:8c:
                    7b:25:5d:d2:0a:8a:4e:0b:33:3d:16:b7:5c:c6:23:
                    5d:83:a0:99:91:3a:86:64:36:8a:b9:6a:37:ba:44:
                    ff:68:b9:47:dc:a0:67:73:10:d7:f9:c9:f3:6f:69:
                    ed:1e:04:f4:30:f7:7d:84:01:d8:dd:53:b7:8d:28:
                    36:eb:c1:a2:58:c8:f5:8f:01:61:4b:ea:6b:8f:a7:
                    fd:21:23:2e:ea:05:2d:3c:90:81:1b:16:fb:d1:82:
                    55:9f:9f:47:df:ee:2b:3e:94:01:4a:57:44:e1:ba:
                    12:b8:b2:e7:a7:8f:4c:20:10:3a:95:c1:54:66:c5:
                    28:6c:8c:aa:09:d9:60:71:c5:d0:77:a7:03:1e:dd:
                    37:6a:a7:10:7a:a0:65:cf:0b:c7:63:a0:ea:9e:11:
                    12:34:3d:0d:90:a8:64:a2:ca:1d:68:32:ba:71:9d:
                    e3:4e:1b:92:a4:71:ca:57:1d:5e:b8:88:d2:47:b3:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AA:6F:C0:56:F9:D6:2E:4B:71:EF:15:C1:AC:6B:0D:29:4A:93:A7
            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:34:24:a7:f6:63:4f:16:4e:e0:67:96:f9:8f:7e:c6:ca:
         07:ac:6d:0a:80:10:e6:00:e9:0a:65:a3:21:16:af:2d:58:5d:
         35:68:5f:34:0f:a4:59:94:0e:51:43:aa:3b:8c:92:ca:4b:ba:
         4c:8d:1b:48:b2:2f:9a:50:46:81:70:a6:ca:24:2f:16:a1:13:
         37:45:7f:52:a5:e0:f3:d4:63:ff:da:b6:a3:d0:96:11:3b:6c:
         c3:c0:7d:51:3b:19:ac:1f:85:90:b0:ce:90:3b:35:92:eb:06:
         37:80:16:ce:10:50:c3:4c:6f:dc:c8:4c:eb:13:f0:ff:ce:83:
         90:b6:85:75:45:b0:a9:c5:6c:11:d4:99:76:76:bf:27:be:02:
         f7:54:ba:29:e9:9a:0e:d2:6e:f9:83:ee:09:a1:e9:de:ab:6a:
         32:0a:93:83:fb:9a:89:0c:29:3f:7a:7c:dc:ba:67:66:40:b2:
         21:53:c2:c5:00:d6:27:bc:05:57:2c:c8:69:cf:77:2c:c1:bb:
         07:ad:90:3a:b2:5a:9e:93:4e:16:fb:ec:78:c0:55:45:00:0a:
         b6:6c:78:c0:7b:04:e5:0c:db:36:04:5c:c1:fc:c5:02:74:20:
         8d:e7:4d:ae:a9:96:e0:2e:00:be:0a:11:30:b9:9e:d1:3e:45:
         59:83:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:40 2025 by rpki-client