Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
File:                     6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft (raw, json)
Hash identifier:          Ome3qY0hGIB4XFmdy+uHG+J3GYWpTnho9OHkBBN9trQ=
Subject key identifier:   DF:38:5C:3C:94:C8:7D:13:6E:47:5E:0C:04:AD:F9:44:0D:52:25:FE
Authority key identifier: E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9
Certificate issuer:       /CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
Certificate serial:       019921E7F4462631FFF7FCB84B3ACD1C12FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
Manifest number:          89
Signing time:             Sun 07 Sep 2025 02:01:13 +0000
Manifest this update:     Sun 07 Sep 2025 02:01:13 +0000
Manifest next update:     Mon 08 Sep 2025 02:01:13 +0000
Files and hashes:         1: 6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl (hash: S3kMii6R/8PJEnru49YoQHvCzSdoDhQvwx6cNGbeD/k=)
                          2: 8PxOvmgBEGk1dvdpAuCMyuAS_zU.roa (hash: IZyNSWwzA8kml+4/83o4BNcAjIyr4gruiC7sv+HeyL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:e7:f4:46:26:31:ff:f7:fc:b8:4b:3a:cd:1c:12:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cfabb2b5d78ff9fbbdc1e37dd37b6fc34f11d9
        Validity
            Not Before: Sep  7 02:01:13 2025 GMT
            Not After : Sep  8 02:01:13 2025 GMT
        Subject: CN=df385c3c94c87d136e475e0c04adf9440d5225fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b8:3b:fa:09:47:54:cb:2b:35:ca:00:82:15:
                    82:0d:a8:2e:1f:03:fe:34:6b:73:40:12:1a:6c:8f:
                    32:b5:27:59:12:6f:05:5b:60:04:f9:07:15:0e:44:
                    d0:bc:53:47:4b:f1:20:78:04:4c:7d:b6:9b:4a:36:
                    6f:1c:19:f5:c5:f7:d8:51:d6:93:76:72:4e:0d:54:
                    0e:7e:16:a5:9d:ec:47:7f:b9:27:52:99:1e:84:ed:
                    fb:32:5e:54:35:bf:be:3f:7a:cf:b1:fd:3c:c4:87:
                    35:c2:84:84:21:3e:b3:aa:2a:2d:54:01:a2:a8:3f:
                    0e:a3:66:d4:1a:cc:5c:3b:48:b6:41:56:02:1d:91:
                    d5:4c:ca:ab:26:da:e2:12:4b:85:e4:1a:ec:ee:55:
                    a6:99:d3:e8:0f:e7:a2:88:25:af:e3:57:80:77:d0:
                    4e:68:f2:ad:8d:50:13:9b:11:bc:e0:34:2a:f4:29:
                    10:6d:16:bf:57:2e:5a:6e:c9:73:da:05:be:c0:26:
                    1b:37:c1:4a:44:a0:01:6e:61:a9:89:14:3f:c4:ae:
                    a3:00:bb:09:e4:16:23:07:50:a7:81:74:f9:c0:00:
                    d7:f7:46:b6:df:7f:50:7d:1b:49:b6:f3:73:85:ec:
                    f9:14:c0:ea:c9:60:b5:02:70:58:10:67:f7:b3:30:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:38:5C:3C:94:C8:7D:13:6E:47:5E:0C:04:AD:F9:44:0D:52:25:FE
            X509v3 Authority Key Identifier:
                keyid:E8:CF:AB:B2:B5:D7:8F:F9:FB:BD:C1:E3:7D:D3:7B:6F:C3:4F:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6M-rsrXXj_n7vcHjfdN7b8NPEdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a82b65-8565-4f86-bbe8-b370084a27f7/1/6M-rsrXXj_n7vcHjfdN7b8NPEdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:94:8b:30:49:b0:34:1c:1e:15:af:4d:f8:09:60:94:57:
         31:39:60:29:6d:63:ee:50:a7:bf:0d:1d:75:82:65:07:6c:af:
         7b:17:c1:78:e5:e3:10:b3:5e:de:62:1d:b1:62:ee:b4:74:5f:
         ad:f1:ba:0a:56:9e:ec:12:50:54:57:31:05:64:c9:5a:86:83:
         60:f7:9f:ce:77:be:65:68:88:54:63:e3:e6:d3:c9:6b:d2:25:
         a3:a1:a0:2d:f3:a6:df:ee:18:44:82:a0:3e:ed:65:8e:6a:f4:
         9b:a5:b7:cf:40:f7:28:3c:65:83:b8:a5:f3:90:2f:02:69:dd:
         1e:0a:d1:83:c9:d9:a2:9a:5d:e2:f0:56:00:5d:6d:3b:63:f2:
         29:a2:15:46:43:93:21:8c:69:77:06:99:83:c4:f9:f6:7f:26:
         af:ce:07:dc:db:e1:fc:a6:26:fb:d5:dc:73:f2:b8:51:e6:7d:
         7f:12:af:6d:94:2c:a4:e8:3d:97:44:50:ec:f9:60:1c:e9:4a:
         12:99:80:9e:4e:6a:bc:da:f6:f0:09:1f:a6:1d:ec:8a:4a:24:
         80:59:f4:13:4d:f8:5e:ff:23:e6:43:55:83:e4:2e:f6:93:3f:
         4c:b3:d3:9f:33:fd:a1:a0:60:18:b2:37:90:a8:2f:c5:4d:b1:
         81:8e:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:39 2025 by rpki-client