Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File:                     k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier:          5pr+8BbtNF+2IZftE3bZUdqwm/vqMLWD6JzClieb6cI=
Subject key identifier:   DA:B8:95:96:DF:36:EA:B4:BB:62:5A:3D:05:39:31:25:97:40:1E:92
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer:       /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial:       01992331810F930BEE69A1770A08842FD98A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number:          05CB
Signing time:             Sun 07 Sep 2025 08:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 08:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 08:01:10 +0000
Files and hashes:         1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
                          2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: 4qCkBZJDk8Kn+0TmMz6a/Abw6MJ8MV7f9XeUviuJfcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:81:0f:93:0b:ee:69:a1:77:0a:08:84:2f:d9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
        Validity
            Not Before: Sep  7 08:01:10 2025 GMT
            Not After : Sep  8 08:01:10 2025 GMT
        Subject: CN=dab89596df36eab4bb625a3d0539312597401e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:ae:1f:56:89:99:19:4b:17:f0:8e:04:9e:
                    0b:6b:e7:fe:22:01:a0:55:2c:81:73:1b:f5:05:dd:
                    8b:03:91:30:b0:d9:c1:bf:77:96:d3:7e:ee:52:b0:
                    f4:c0:79:27:c6:88:4b:99:8a:85:9e:f6:8a:2d:4f:
                    c3:95:cf:4f:d5:7c:9f:d1:de:94:20:e7:d3:ad:4d:
                    88:6c:1e:df:46:67:78:04:35:f0:ff:3c:c2:01:92:
                    f9:ac:65:98:36:6c:0d:9b:ad:d8:fe:fe:d3:77:c4:
                    a1:8f:41:d0:d7:1c:d3:00:89:c4:93:67:8a:18:e1:
                    0a:7a:de:27:ff:2f:37:7f:50:cb:04:25:43:9a:a4:
                    e3:23:ef:6f:1b:5f:5a:ee:aa:37:0f:9c:8b:e8:03:
                    37:4c:5c:90:68:1a:93:84:a8:27:d8:c5:f0:b0:46:
                    60:64:2d:91:ee:ef:03:9c:24:46:19:b2:69:23:c3:
                    37:27:f6:7b:2c:5e:d1:4b:10:aa:8a:9a:bb:96:d5:
                    98:47:38:03:0b:e9:2b:ef:1b:fa:ca:ea:93:0b:07:
                    84:a5:79:74:b2:01:63:f6:70:e4:02:5d:37:9b:b4:
                    a7:36:39:25:54:3d:36:c5:c3:1b:b8:58:fc:26:fc:
                    dc:14:17:c8:7d:8d:0d:d4:98:ab:56:22:13:1c:fb:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:95:96:DF:36:EA:B4:BB:62:5A:3D:05:39:31:25:97:40:1E:92
            X509v3 Authority Key Identifier:
                keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:85:ce:db:b9:de:5e:b9:82:f1:36:fb:3c:5b:54:6c:c3:e5:
         4a:b5:43:1a:b3:7b:43:75:17:cc:6d:e3:dd:db:50:2a:7e:38:
         78:2c:44:81:42:7a:5e:bf:ee:ab:c0:00:25:4d:bf:39:1f:e9:
         44:69:f4:6a:25:0b:70:c2:ad:99:ab:3a:ca:c7:f1:ce:d0:d6:
         5b:d4:10:ed:20:94:88:0d:97:41:34:ff:00:fd:dd:5e:13:e8:
         d1:ba:b9:d7:c1:04:b2:4d:60:44:a7:0b:2d:b3:de:25:2f:6f:
         96:06:79:48:e2:f4:80:d3:35:34:43:d1:0d:1d:e6:95:fe:d0:
         e5:28:c0:e0:33:f0:c8:75:0c:94:98:ae:c9:17:ae:2f:fe:df:
         b3:9a:e6:6c:db:42:bc:df:d9:af:14:e1:fe:57:9e:8c:0d:f0:
         51:f4:08:7c:1e:64:ab:7a:d4:1a:82:2f:76:99:7f:7b:8a:66:
         b1:cd:7c:a0:37:49:dc:fa:40:f1:82:d1:e6:19:b8:73:dc:dd:
         81:d2:3c:ec:6b:e4:b9:65:c9:b2:66:8a:7a:b2:cb:24:0d:b2:
         dc:8d:ce:78:60:7e:9f:17:a9:99:f2:97:23:42:ba:ec:97:b5:
         46:4a:12:e7:98:69:48:61:0d:7e:bf:9b:b0:78:c7:dc:fd:31:
         ec:ac:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:30 2025 by rpki-client