Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
File:                     6ogLzDAqXbosNRpv054KizkipTU.mft (raw, json)
Hash identifier:          RkDFGHvsOWjKbFdO5Q35GoDuZRG5ebn4weKt5zF47Hs=
Subject key identifier:   EB:1B:80:B1:2C:67:A4:FD:34:68:E5:58:3E:09:19:64:2F:A8:7F:DF
Authority key identifier: EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35
Certificate issuer:       /CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
Certificate serial:       019A0BCB13B82B15BB8F441CCE8960F81BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
Manifest number:          0755
Signing time:             Wed 22 Oct 2025 12:00:49 +0000
Manifest this update:     Wed 22 Oct 2025 12:00:49 +0000
Manifest next update:     Thu 23 Oct 2025 12:00:49 +0000
Files and hashes:         1: 6ogLzDAqXbosNRpv054KizkipTU.crl (hash: NQHH4bwymqSoDfDfb7ZBIins5lGUAk2FtXfyK8ohnCY=)
                          2: eG6hHlrMZ5LIXTfGfgot4IiG4ek.roa (hash: yIhVuzNldSheNj9t68+efRcjN+q//cUeoESSltGdZEM=)
                          3: v_xrcu_njaocN3K-X9oPxCjEg6k.roa (hash: 9gD6GNup8/leD5HSb02l/wSBrP9d9vIusha+3wIJKAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0b:cb:13:b8:2b:15:bb:8f:44:1c:ce:89:60:f8:1b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea880bcc302a5dba2c351a6fd39e0a8b3922a535
        Validity
            Not Before: Oct 22 12:00:49 2025 GMT
            Not After : Oct 23 12:00:49 2025 GMT
        Subject: CN=eb1b80b12c67a4fd3468e5583e0919642fa87fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e2:50:be:30:ab:30:9c:4e:0d:86:c8:38:13:
                    db:db:67:8a:67:94:ac:17:cc:da:1b:a7:1d:8a:74:
                    b5:c7:47:3a:62:b5:5f:b5:84:53:12:2e:38:1a:d3:
                    63:0c:f6:c1:c8:29:e8:de:2f:38:58:8a:e7:f8:0a:
                    fa:6f:6a:0a:ee:f5:f4:a8:f3:23:c5:df:e1:eb:f7:
                    af:51:1f:4d:37:af:69:0e:12:34:a0:29:d0:de:92:
                    89:58:f6:eb:2f:75:d2:0f:c6:41:65:91:ed:69:11:
                    ee:69:28:d5:a0:c5:04:fb:20:e8:f4:b8:e5:b8:60:
                    a8:89:1e:e8:72:4a:60:ac:9e:a6:36:cf:3d:69:08:
                    88:45:7b:a7:c9:b9:c2:46:87:86:d9:8a:7e:58:2f:
                    9e:12:62:dc:95:6f:18:3c:35:57:85:24:01:cc:ad:
                    aa:5a:43:f0:cd:0c:51:e0:9d:3f:bb:2a:dc:93:1e:
                    29:4a:10:df:ca:7c:d4:c2:61:fb:2b:ee:06:ad:a1:
                    5d:16:fd:9e:05:e8:98:90:0c:a1:4f:c0:a3:35:f5:
                    7f:a3:3a:80:eb:97:b5:e6:b6:38:33:a0:a9:dc:c1:
                    af:e9:33:f2:d3:d6:06:26:b2:60:b8:33:d2:4a:c1:
                    82:3d:4d:6b:1e:4f:cd:a4:71:ce:4e:45:32:69:53:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1B:80:B1:2C:67:A4:FD:34:68:E5:58:3E:09:19:64:2F:A8:7F:DF
            X509v3 Authority Key Identifier:
                keyid:EA:88:0B:CC:30:2A:5D:BA:2C:35:1A:6F:D3:9E:0A:8B:39:22:A5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ogLzDAqXbosNRpv054KizkipTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/2b729f-08a7-4c93-8bc9-815c5f2765d0/1/6ogLzDAqXbosNRpv054KizkipTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:10:d8:0f:73:73:58:2f:0d:56:a4:8d:c7:a4:a9:21:77:ec:
         9f:24:f5:c8:97:7e:b2:96:53:1c:62:bb:22:e9:27:2b:1d:ba:
         46:bb:b5:fa:f7:5d:31:00:9a:fc:12:e5:6e:97:c7:22:cf:7e:
         94:98:aa:d3:ca:04:a8:2a:b2:aa:ed:8d:ff:54:2e:15:00:ff:
         f4:22:90:f2:ea:e8:bc:dd:b8:d0:6d:f6:25:75:7c:8c:a1:04:
         c3:a3:19:79:7e:cb:39:d6:2c:ea:d2:93:e2:3d:0e:13:89:81:
         17:3c:0e:c8:f0:09:9a:a3:ea:bc:07:1d:4f:50:7a:39:47:f1:
         c8:00:b5:6d:10:f6:64:1e:0f:d1:6d:e0:bf:00:0a:21:3a:a6:
         9e:96:a2:a1:38:d7:9a:20:d5:31:d9:68:55:fc:58:09:78:97:
         b2:70:06:ee:3a:a4:89:3a:87:6d:7b:45:ae:31:f5:b2:82:13:
         ed:85:16:a6:9d:12:6e:fd:5e:ec:90:a6:cc:19:d1:b9:71:88:
         77:37:2d:13:39:5d:e1:70:09:ff:d3:57:fa:b5:ba:08:0c:5c:
         af:f1:f2:d5:d7:e6:96:fe:88:cc:ea:29:f0:de:62:7f:c7:61:
         76:7c:ea:e1:f2:30:c7:01:cc:6b:a3:81:02:73:47:83:18:0d:
         39:e0:56:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:23:01 2025 by rpki-client