Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
File:                     6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft (raw, json)
Hash identifier:          UUxMrm1l0sTviSvIY678hPXn9ESSYbxgX4nK4GUpIRc=
Subject key identifier:   CF:D0:1C:DE:A9:D8:E5:B6:49:DC:BA:2E:B2:26:CD:82:59:9E:00:CD
Authority key identifier: E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D
Certificate issuer:       /CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
Certificate serial:       019921B0E61D0F97650E379C1587DEE0D53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
Manifest number:          0A7E
Signing time:             Sun 07 Sep 2025 01:01:05 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:05 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:05 +0000
Files and hashes:         1: 6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl (hash: BBMGpXlNSFFDyBx9Mi1lBQbXhhY974rb2BBX1hLus0g=)
                          2: fz0sJARZZ_TYinSLBp8Y46GRSAE.roa (hash: k5Klk32fNc1hp3soFN9xokf0fk3JpGUEVYNQtXZtdqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:e6:1d:0f:97:65:0e:37:9c:15:87:de:e0:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e92e146a1e9e83b3756f048b6c1b31e0fc7d207d
        Validity
            Not Before: Sep  7 01:01:05 2025 GMT
            Not After : Sep  8 01:01:05 2025 GMT
        Subject: CN=cfd01cdea9d8e5b649dcba2eb226cd82599e00cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:43:43:46:1a:e8:18:3b:31:97:09:c8:65:78:
                    7f:c3:92:58:64:48:8b:af:44:d5:53:04:45:1a:99:
                    fa:17:a9:42:7c:9c:7b:de:0e:77:70:09:f8:62:8b:
                    18:41:04:ab:5f:b8:91:1d:71:6b:3f:6b:81:09:5a:
                    1b:9e:39:df:f9:3c:57:75:44:4c:f7:da:d3:48:7f:
                    1d:ec:c6:bc:4c:b2:b2:3f:8b:9a:4c:cd:68:0a:6c:
                    07:a6:d5:31:15:a4:29:c9:65:0f:e8:59:d6:56:22:
                    e6:e4:e3:60:3f:c3:fd:04:e0:fb:0a:fc:c8:b8:a3:
                    9a:d3:e0:79:ba:ea:b1:e7:91:ba:d1:1e:e7:48:41:
                    d6:eb:0b:73:f2:12:07:ad:fd:5d:cd:c1:09:d2:6e:
                    cb:bd:e7:84:98:e6:90:3d:19:80:83:2f:e6:b3:c0:
                    3c:87:17:bb:42:d3:78:69:07:f6:5f:1a:55:fc:bf:
                    82:0a:25:c0:f6:35:21:96:2b:af:fc:36:f6:96:a2:
                    ee:72:99:95:23:dd:43:8b:c7:fd:b9:c0:6f:7e:50:
                    da:5a:ba:87:dc:e0:ba:5a:48:a6:f2:90:56:5e:7b:
                    ff:4b:ed:73:a5:48:64:08:c9:93:38:64:e3:a8:93:
                    0d:46:9c:6c:cf:96:ec:ac:c5:28:8a:19:ce:3f:cf:
                    a7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:1C:DE:A9:D8:E5:B6:49:DC:BA:2E:B2:26:CD:82:59:9E:00:CD
            X509v3 Authority Key Identifier:
                keyid:E9:2E:14:6A:1E:9E:83:B3:75:6F:04:8B:6C:1B:31:E0:FC:7D:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6S4Uah6eg7N1bwSLbBsx4Px9IH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/eb0e6b-091d-4ff1-90bb-74a395aa5606/1/6S4Uah6eg7N1bwSLbBsx4Px9IH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:8f:23:80:db:f5:dc:f1:a5:e7:38:de:83:7b:42:37:a4:
         bc:bd:56:a4:37:f0:f0:de:ab:d2:95:76:4e:4e:6e:7b:f0:dc:
         6a:a0:f7:6b:2a:e1:20:36:06:0e:d4:56:b6:1f:91:77:e6:6b:
         f4:fd:ea:2e:ac:03:c3:67:4b:6c:22:e7:71:8f:0a:f7:26:20:
         b9:2f:9a:0c:ee:64:45:7f:d1:ca:6c:81:39:3e:08:8c:01:d1:
         af:10:7c:20:07:d7:05:9e:c9:7a:a4:40:f5:64:60:ac:3b:43:
         30:e5:83:c2:5d:34:8a:6b:1a:41:ff:ad:f4:fc:9d:9f:a9:5b:
         75:20:8d:1a:c4:ec:f0:c1:3c:0a:fd:e4:d1:a1:0a:7f:0e:76:
         b1:c5:e0:6e:ef:56:5d:4c:7b:ff:79:9e:d3:81:98:8b:67:1c:
         0b:f9:37:e1:3c:c2:d4:10:66:f5:80:05:e4:49:7c:41:ce:8a:
         c1:fd:86:cf:ff:36:55:a2:00:24:89:ad:3f:0a:a0:2e:29:fc:
         05:43:fc:c4:8f:c4:75:38:35:3a:d4:04:58:bc:77:e4:3e:7b:
         e5:bf:64:00:d1:6e:80:c3:a2:42:9a:40:90:9a:61:7f:e3:d0:
         ac:ca:d5:26:01:7d:51:8e:8d:d3:c3:6a:03:33:f8:0b:85:09:
         19:51:81:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsOYdD5dlDjecFYfe4NU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmUxNDZhMWU5ZTgzYjM3NTZmMDQ4YjZjMWIzMWUwZmM3
ZDIwN2QwHhcNMjUwOTA3MDEwMTA1WhcNMjUwOTA4MDEwMTA1WjAzMTEwLwYDVQQD
EyhjZmQwMWNkZWE5ZDhlNWI2NDlkY2JhMmViMjI2Y2Q4MjU5OWUwMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UNDRhroGDsxlwnIZXh/w5JYZEiL
r0TVUwRFGpn6F6lCfJx73g53cAn4YosYQQSrX7iRHXFrP2uBCVobnjnf+TxXdURM
99rTSH8d7Ma8TLKyP4uaTM1oCmwHptUxFaQpyWUP6FnWViLm5ONgP8P9BOD7CvzI
uKOa0+B5uuqx55G60R7nSEHW6wtz8hIHrf1dzcEJ0m7LveeEmOaQPRmAgy/ms8A8
hxe7QtN4aQf2XxpV/L+CCiXA9jUhliuv/Db2lqLucpmVI91Di8f9ucBvflDaWrqH
3OC6Wkim8pBWXnv/S+1zpUhkCMmTOGTjqJMNRpxsz5bsrMUoihnOP8+nuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/QHN6p2OW2Sdy6LrImzYJZngDNMB8GA1UdIwQY
MBaAFOkuFGoenoOzdW8Ei2wbMeD8fSB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmIt
NzRhMzk1YWE1NjA2LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9lYjBlNmItMDkxZC00ZmYxLTkwYmItNzRhMzk1YWE1NjA2
LzEvNlM0VWFoNmVnN04xYndTTGJCc3g0UHg5SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9mPI4Db
9dzxpec43oN7QjekvL1WpDfw8N6r0pV2Tk5ue/DcaqD3ayrhIDYGDtRWth+Rd+Zr
9P3qLqwDw2dLbCLncY8K9yYguS+aDO5kRX/RymyBOT4IjAHRrxB8IAfXBZ7JeqRA
9WRgrDtDMOWDwl00imsaQf+t9Pydn6lbdSCNGsTs8ME8Cv3k0aEKfw52scXgbu9W
XUx7/3me04GYi2ccC/k34TzC1BBm9YAF5El8Qc6Kwf2Gz/82VaIAJImtPwqgLin8
BUP8xI/EdTg1OtQEWLx35D575b9kANFugMOiQppAkJphf+PQrMrVJgF9UY6N08Nq
AzP4C4UJGVGB+g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:40 2025 by rpki-client