Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
File:                     6hnxNhI41O6MRqpBsJwyLGLIh_0.mft (raw, json)
Hash identifier:          jRFnNFbM2yIHCkaMtPFTj9u78OWiUmHe8O8PGlhTgOo=
Subject key identifier:   C3:23:12:03:82:57:CA:58:6E:1F:59:96:D1:B9:5A:FD:EA:E8:11:B7
Authority key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Certificate issuer:       /CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Certificate serial:       0199239FF67FD823FAD58AD78FAE9AD5CE7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
Manifest number:          15FF
Signing time:             Sun 07 Sep 2025 10:01:49 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:49 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:49 +0000
Files and hashes:         1: 6hnxNhI41O6MRqpBsJwyLGLIh_0.crl (hash: XiqowVzbTUkwQEmqENMklaG3fmqTWHW47jOKPheU1EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:f6:7f:d8:23:fa:d5:8a:d7:8f:ae:9a:d5:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
        Validity
            Not Before: Sep  7 10:01:49 2025 GMT
            Not After : Sep  8 10:01:49 2025 GMT
        Subject: CN=c32312038257ca586e1f5996d1b95afdeae811b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:a0:18:da:21:e5:c8:83:4f:a9:51:a7:05:
                    d6:00:c9:e7:91:ae:93:ff:18:be:d7:96:2b:46:33:
                    63:b8:98:74:cd:7f:80:9c:20:52:93:e1:96:f1:77:
                    ff:c0:e4:1a:81:ae:9a:16:4d:c4:b7:5a:a4:d9:3d:
                    3c:54:15:24:ce:46:91:f5:59:b5:44:01:cb:1f:7b:
                    17:33:ab:d0:3d:18:13:db:86:b8:0f:71:cf:52:57:
                    40:06:e3:12:ec:13:e8:bb:73:67:7a:f2:3e:b5:0a:
                    fb:1c:1c:15:bc:c6:23:62:74:cf:dc:fb:89:0f:3f:
                    ea:c7:f1:e7:ca:dc:ec:65:47:3e:53:4a:dd:dd:8f:
                    6e:a5:94:af:96:7d:ef:7e:4f:59:45:d0:2d:34:f2:
                    86:63:2c:69:54:5a:72:49:55:74:75:af:ec:0d:70:
                    8f:9a:48:95:70:5b:12:05:4c:49:ba:90:aa:2a:80:
                    5a:ea:19:67:d9:4f:81:8c:10:fa:df:96:f0:c3:a3:
                    d9:14:97:1a:90:0a:8a:86:8f:7f:39:94:c4:98:c8:
                    7e:74:99:82:9a:0c:0a:41:25:79:f1:c7:59:b7:51:
                    04:f6:4c:ff:4b:82:54:b5:e2:3f:90:42:4f:82:44:
                    3c:bc:41:90:57:58:35:36:e8:46:1d:d2:eb:be:cb:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:23:12:03:82:57:CA:58:6E:1F:59:96:D1:B9:5A:FD:EA:E8:11:B7
            X509v3 Authority Key Identifier:
                keyid:EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:1b:fa:78:de:67:94:82:bc:67:a0:9e:cd:da:ac:ba:ff:35:
         90:de:93:45:98:d2:f4:a7:96:30:0a:37:ed:76:62:6e:f9:cc:
         37:b7:93:06:e8:79:6a:ad:87:a5:d3:cf:3f:b1:6a:4e:fe:2d:
         cd:a8:93:9a:2d:4f:62:23:78:41:9e:49:7e:7a:ca:18:84:c0:
         f0:22:36:65:52:91:d5:92:03:3a:11:82:ef:5e:87:f3:41:03:
         95:7e:0d:4c:bf:f2:0a:25:a4:e8:ca:d4:e4:30:55:b3:77:88:
         fc:b5:b7:12:78:6d:1e:26:6e:cc:78:b5:34:fc:59:86:fb:be:
         e3:e1:9e:49:dc:79:51:6c:3f:cc:8e:e7:9e:4f:72:28:cc:25:
         2e:25:45:ed:8f:6a:a5:c2:d8:89:f4:d7:cb:75:d1:a3:99:13:
         b4:aa:97:50:bb:39:38:14:63:16:c9:ce:d0:e5:0b:9e:7e:3c:
         8e:9a:b0:e6:57:fc:4a:6b:78:7f:5c:75:a0:b8:ae:7c:23:06:
         2f:e5:31:48:fa:88:32:79:e3:a9:dc:2a:b6:19:41:1a:4f:31:
         86:fa:8f:72:9b:d9:c2:92:8f:e2:1d:89:39:81:21:7d:cf:3b:
         e9:a9:62:0d:40:c2:e2:fb:86:32:3a:ad:48:2c:57:a1:b9:43:
         fe:f2:fa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:44 2025 by rpki-client