Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
File:                     0BE91dB1nAMAk4AUDGaOu9H5wWg.mft (raw, json)
Hash identifier:          Fg2NTshneTYu3gPcoqMRYdGfwytc0I0SsiJPmhVYzJQ=
Subject key identifier:   37:0D:49:35:AD:76:C0:8D:B3:A6:B2:D2:AC:00:79:FF:D7:45:EB:D0
Authority key identifier: D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68
Certificate issuer:       /CN=d0113dd5d0759c03009380140c668ebbd1f9c168
Certificate serial:       01992C6B8285FF4463694C86179BBCCEA09A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
Manifest number:          07E6
Signing time:             Tue 09 Sep 2025 03:01:07 +0000
Manifest this update:     Tue 09 Sep 2025 03:01:07 +0000
Manifest next update:     Wed 10 Sep 2025 03:01:07 +0000
Files and hashes:         1: 0BE91dB1nAMAk4AUDGaOu9H5wWg.crl (hash: e7Q5e8D0aZBa1aOnr9NZXpXMck66l+yGwonUrLpEmG8=)
                          2: Bx50PRq6KcDkdxbj0-_pFidcJWw.roa (hash: YY2WvnOzjX98gUiJi9jeyqU66NYG8yYekvXH8i5CTIo=)
                          3: U5cqWkNYnX_IKXRLiqWhPWLnj30.roa (hash: rOJ0i9MLtk8hwnYB2wL88M/HGe+Y/PZ5cxU/VSesy7g=)
                          4: qiRRCoLxoqoPkxabLfDyCC_ddgo.roa (hash: PHrnZaBjRsNXJj/q3wfcCyeQ30fafauER7XzOTQ6umk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:6b:82:85:ff:44:63:69:4c:86:17:9b:bc:ce:a0:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0113dd5d0759c03009380140c668ebbd1f9c168
        Validity
            Not Before: Sep  9 03:01:07 2025 GMT
            Not After : Sep 10 03:01:07 2025 GMT
        Subject: CN=370d4935ad76c08db3a6b2d2ac0079ffd745ebd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:e4:44:b2:19:7f:d4:b5:34:66:0f:f1:6b:
                    eb:9c:82:03:33:7f:e4:b8:c0:77:d9:b3:a0:5b:78:
                    83:4e:1f:be:b3:7f:54:5e:7e:6f:80:91:12:0b:f2:
                    64:d6:6a:6a:6a:98:1f:37:e2:bf:62:76:36:59:6c:
                    64:23:dc:f7:07:75:27:9c:f2:7a:3b:a9:33:32:cb:
                    4a:f1:78:52:c7:1f:42:b4:44:f1:50:5a:4f:55:67:
                    03:04:f1:91:c1:07:a0:d8:02:eb:10:46:09:63:37:
                    dc:45:a7:19:f5:34:78:d2:9b:06:23:7f:fc:6f:78:
                    b4:8d:c3:1c:eb:d5:53:41:ef:61:52:b8:86:65:4e:
                    d8:d7:23:8f:60:86:cc:26:7c:04:22:50:9c:f2:be:
                    e1:fb:a8:a3:ae:ce:71:54:82:14:3b:1a:4d:5f:bb:
                    92:68:fd:ac:1c:ca:de:4e:78:66:26:88:8c:75:d0:
                    18:e1:35:89:ad:88:90:5a:f8:b4:1f:c3:30:ab:81:
                    cd:ab:6c:7b:2d:e3:ff:db:65:64:70:70:88:fd:bf:
                    42:03:76:0b:05:49:89:22:4c:43:aa:29:b1:a4:d3:
                    41:75:02:67:f4:bf:c5:1b:e0:e6:3c:56:88:18:08:
                    57:c3:97:9d:b6:b1:b9:dd:b7:30:69:92:f3:de:b1:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:49:35:AD:76:C0:8D:B3:A6:B2:D2:AC:00:79:FF:D7:45:EB:D0
            X509v3 Authority Key Identifier:
                keyid:D0:11:3D:D5:D0:75:9C:03:00:93:80:14:0C:66:8E:BB:D1:F9:C1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BE91dB1nAMAk4AUDGaOu9H5wWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/6914ce-66c2-4238-92b7-a2d636f325e6/1/0BE91dB1nAMAk4AUDGaOu9H5wWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:14:63:62:3e:5b:13:d1:d0:04:e9:fb:11:fc:06:ed:3d:
         b1:50:d2:09:49:72:39:40:bc:de:b6:3a:4b:b0:ad:f9:26:9d:
         2b:c6:9a:56:66:6e:1d:5d:bb:18:b9:a6:e6:7d:0d:59:bf:6b:
         86:92:2f:6f:c8:3a:ad:3f:18:5b:f5:27:fe:3d:8b:88:bb:57:
         f9:d8:b0:f3:c3:3c:f3:e0:51:6f:a2:a6:d6:2c:fd:94:f5:81:
         d5:14:07:10:f5:ac:0b:57:ea:78:8e:1d:53:b7:aa:a2:63:b5:
         0a:58:91:a4:f7:d7:91:08:ea:8e:3d:65:54:2e:26:a6:dd:f6:
         00:56:90:4f:69:28:e6:1d:67:2a:23:5b:ff:fa:e5:92:44:d0:
         f4:df:99:c1:d4:d3:66:cc:36:c0:a9:ba:74:2d:7d:cf:3c:d1:
         75:c8:49:26:75:4c:f5:47:4d:fe:2a:15:21:16:1e:3f:24:b5:
         09:46:de:02:77:25:b7:a6:5e:f1:b9:cd:5a:7a:50:99:ae:73:
         99:ff:94:51:b0:b8:bd:3a:9c:dc:b1:e9:6e:d4:4f:58:d7:25:
         0f:36:a0:07:9e:60:ce:64:b6:65:c5:80:20:cf:d4:7f:89:d7:
         fa:06:3d:ad:ad:c9:25:96:63:98:d2:ac:da:cf:73:0a:bf:c4:
         ec:8f:95:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:52:14 2025 by rpki-client