Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
File:                     F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json)
Hash identifier:          6UsEymWt1yzW+hDsDTfGyW1nuycclKp9oyGvohsYiQg=
Subject key identifier:   C6:C3:24:19:32:0C:A1:99:E5:0E:2A:04:2B:BB:72:1A:EF:CC:D4:B4
Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A
Certificate issuer:       /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
Certificate serial:       019922FAF17C2DBFB026A57085B1DF864677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
Manifest number:          EF
Signing time:             Sun 07 Sep 2025 07:01:35 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:35 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:35 +0000
Files and hashes:         1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: Lm7hAe1w4yprfLQXM085AAnuBP6B65kXMoBs5jIDkyU=)
                          2: KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa (hash: FzqITUktotdSEgzJPKi/MbN0jwrtNR+ishuw7Jc2ADw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:f1:7c:2d:bf:b0:26:a5:70:85:b1:df:86:46:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a
        Validity
            Not Before: Sep  7 07:01:35 2025 GMT
            Not After : Sep  8 07:01:35 2025 GMT
        Subject: CN=c6c32419320ca199e50e2a042bbb721aefccd4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:0e:cb:93:db:fe:30:da:01:3e:ee:d0:5d:
                    2c:79:af:ce:63:13:a8:fa:b8:a3:06:89:7d:47:6c:
                    f8:0a:1b:f8:5c:e5:cb:7d:ed:19:05:e7:91:34:a9:
                    70:3d:f9:85:26:59:f2:f4:f5:76:03:11:48:36:ab:
                    de:48:6a:ba:ff:76:95:35:e0:24:50:40:b1:6d:d9:
                    07:28:26:7c:56:4f:03:ec:29:d9:f5:81:9d:93:63:
                    be:6e:10:73:8b:fa:78:af:f2:c7:f4:ac:1c:6b:25:
                    45:8b:9f:69:5e:31:ba:1d:29:9d:dd:d2:96:88:b1:
                    a7:13:ed:76:9d:00:28:df:31:63:a1:91:3b:a8:35:
                    5a:c5:c6:b5:01:c2:75:c0:dc:13:1f:19:4d:e2:b0:
                    dc:06:b2:9e:97:bc:68:a4:3e:3a:99:df:f4:95:56:
                    76:5b:56:56:6f:ee:e3:48:47:4f:7f:bc:7c:d0:f5:
                    aa:a6:e3:fd:4e:ed:4e:1d:b2:86:64:de:17:20:a1:
                    cf:82:c7:f2:a7:29:4f:ac:19:f1:86:85:fc:d6:32:
                    02:c5:69:25:72:30:fe:1b:ed:8a:ed:89:ab:62:9d:
                    2c:8a:3b:1a:5b:62:32:04:20:1e:be:03:a3:0b:7c:
                    93:03:52:7c:18:d8:15:65:1d:65:6f:47:ec:28:d0:
                    d9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C3:24:19:32:0C:A1:99:E5:0E:2A:04:2B:BB:72:1A:EF:CC:D4:B4
            X509v3 Authority Key Identifier:
                keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:dc:b2:67:dd:e4:d9:2e:7b:59:6a:fa:20:60:41:65:7b:13:
         ce:70:1b:62:4a:f9:34:fc:51:f8:2e:b5:ca:c0:d5:b5:b0:73:
         e5:c5:05:6b:30:91:0a:25:50:e9:89:99:5b:72:25:43:6f:c8:
         cb:78:23:4d:df:46:5c:13:5f:27:d2:58:9d:b9:02:fc:69:fa:
         2c:1e:95:16:fe:b9:b2:34:65:cf:4d:c5:a0:d7:53:8d:c2:11:
         88:0d:6d:cc:4b:43:0f:e8:ce:5e:ce:7a:12:79:ac:47:1d:2c:
         61:d2:2f:72:82:15:02:6a:31:81:93:3b:cc:88:07:2f:05:7b:
         66:63:20:24:cf:98:d3:56:44:4f:84:9b:59:d0:e8:14:5e:32:
         16:48:f5:9a:cf:4f:80:a6:2e:08:e9:db:9a:1a:67:6a:44:8d:
         48:b5:2b:22:1b:f1:42:ce:90:e0:e5:10:f5:6d:b1:cc:59:3b:
         e1:41:80:54:ae:a6:b5:b1:9b:e5:55:20:75:4a:ae:2f:de:94:
         be:bc:50:bf:78:fa:64:6c:6f:5e:e7:82:c4:dc:e3:10:b8:4e:
         29:6b:38:7e:d1:c6:73:31:e8:ce:2f:1a:a3:23:6a:cd:b0:df:
         be:cd:bb:e7:48:ed:9b:24:f7:9d:0a:10:be:d6:bf:96:ce:04:
         5c:bc:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:56 2025 by rpki-client