Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          W/rjEbG46SUORkmvHUDuzrg3D/KR4JuBc2WleY4WX6w=
Subject key identifier:   64:95:EC:26:27:C7:62:C4:58:15:0F:3A:66:E7:A3:34:36:B8:80:3F
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       01993612F4E28284FB7D21777902D71CB328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          06CF
Signing time:             Thu 11 Sep 2025 00:00:35 +0000
Manifest this update:     Thu 11 Sep 2025 00:00:35 +0000
Manifest next update:     Fri 12 Sep 2025 00:00:35 +0000
Files and hashes:         1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=)
                          2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: IFel7+mcGv0d4BrTblk/t5BZB3NZJDR3CRsj2Sefuio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:36:12:f4:e2:82:84:fb:7d:21:77:79:02:d7:1c:b3:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Sep 11 00:00:35 2025 GMT
            Not After : Sep 12 00:00:35 2025 GMT
        Subject: CN=6495ec2627c762c458150f3a66e7a33436b8803f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3a:f0:f8:2d:02:c5:1e:45:f4:41:eb:1b:5b:
                    74:db:90:68:aa:a5:9b:98:82:fd:4d:83:d8:5e:0a:
                    5d:3c:f2:b8:07:1d:7a:90:9d:f7:87:d3:86:71:5b:
                    20:a7:bb:10:1b:58:af:63:f8:e5:34:ab:56:18:7c:
                    93:f7:33:17:07:b7:83:3f:98:d5:aa:cf:9c:0a:6f:
                    3d:97:f9:2c:9e:f7:42:f8:38:c7:00:3d:ba:83:d3:
                    90:8f:3f:82:16:2b:ef:31:52:a4:75:f4:b4:09:9c:
                    4f:4c:3d:63:59:de:d6:59:68:96:d7:53:27:a7:b3:
                    c4:9c:67:de:3a:36:96:2f:6a:a6:ce:ba:8b:a4:9e:
                    09:b4:80:e1:48:01:ef:98:47:43:22:4a:73:a2:cc:
                    58:f0:37:ab:83:d3:23:95:81:75:54:ec:de:f6:74:
                    46:72:94:28:98:60:9f:c3:f9:64:33:11:fb:ad:6c:
                    cb:89:53:89:9e:4e:14:bf:23:20:33:b0:8e:51:2b:
                    2f:b2:c6:94:f4:35:f8:b5:dd:1d:32:86:96:73:1a:
                    98:ce:5a:38:65:16:52:0f:82:a9:94:84:5c:43:bd:
                    8e:84:8b:ac:36:41:09:ce:ae:55:a3:e0:2d:83:d3:
                    31:65:ab:75:97:5d:ae:a0:8e:3c:d3:c7:1e:63:25:
                    6b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:95:EC:26:27:C7:62:C4:58:15:0F:3A:66:E7:A3:34:36:B8:80:3F
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:d0:2b:5c:15:37:9a:a9:34:d1:0d:0e:44:40:5f:4c:6c:
         9d:85:7a:50:32:5c:b3:17:4d:2a:f4:d9:04:63:07:bf:ff:b4:
         ed:91:0e:82:6f:ae:08:eb:c9:c3:e2:8a:72:6e:ff:47:16:24:
         c2:f6:49:89:02:f8:d8:dc:dd:23:bd:5a:d3:8b:a5:ca:ad:8c:
         c9:7f:06:00:74:a3:46:45:f2:1d:08:fe:1b:5c:4e:29:76:dd:
         c9:62:ea:71:1e:15:dd:10:4e:96:da:be:15:a0:a3:8f:ef:7c:
         20:8f:83:0c:67:ed:2d:2a:00:ca:1c:3b:1e:b1:d7:01:a3:4c:
         ff:4c:49:37:9b:9f:ca:0c:cb:f7:1a:81:d8:b0:09:64:6a:00:
         f9:36:40:24:12:ed:25:e5:af:d0:04:12:ec:e3:2c:87:4a:67:
         f4:a5:04:3d:d0:d8:e0:83:a3:90:6e:1a:6c:2c:ca:7c:2f:09:
         a4:db:83:94:da:78:54:75:2d:d7:7f:c3:80:35:3d:8e:a0:e1:
         ff:d7:58:7a:2a:0c:7d:af:68:12:df:11:1d:e9:a0:4e:5e:25:
         77:3a:92:63:63:de:e2:75:c3:8f:89:68:e2:02:27:9b:f8:56:
         01:3c:73:f7:9a:6d:a3:b2:61:5c:24:39:39:da:23:56:92:4a:
         8f:42:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:42:08 2025 by rpki-client