Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
File:                     6EKPwtpbZWN0nMuZd1d16CC3czw.mft (raw, json)
Hash identifier:          LpKo7nIMDmK0bTGADC0GsW+oDqN9wYEpnk3OTOsV6rA=
Subject key identifier:   8A:0C:E8:7D:3C:6A:91:08:FF:2A:43:6F:73:69:9B:3A:3A:CF:F3:92
Authority key identifier: E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C
Certificate issuer:       /CN=e8428fc2da5b6563749ccb99775775e820b7733c
Certificate serial:       0199221E2D32489317264FA08EC4F2B715DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
Manifest number:          10A2
Signing time:             Sun 07 Sep 2025 03:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:26 +0000
Files and hashes:         1: 6EKPwtpbZWN0nMuZd1d16CC3czw.crl (hash: uosJsXRZySOL0Y3rB4mQD6Rz47aY7Jcmjv2JbryTS3A=)
                          2: LFFuuAaPymw7mrLkEc1dJw_pneU.roa (hash: roCdm0ObDLqCzKMIH+P6b5BVl1CPDBPmD6VmUXfwJys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:2d:32:48:93:17:26:4f:a0:8e:c4:f2:b7:15:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8428fc2da5b6563749ccb99775775e820b7733c
        Validity
            Not Before: Sep  7 03:00:26 2025 GMT
            Not After : Sep  8 03:00:26 2025 GMT
        Subject: CN=8a0ce87d3c6a9108ff2a436f73699b3a3acff392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:76:6e:d3:bf:9d:c8:eb:39:0c:57:19:54:21:
                    5d:32:7d:b9:62:76:30:d9:c8:95:dc:7f:82:a5:18:
                    f8:2e:58:8d:49:e0:20:01:5d:fb:07:95:df:f7:ba:
                    7d:5a:b0:84:66:a1:c5:74:69:5e:cb:09:9b:e0:70:
                    c9:b1:0e:a4:30:81:de:12:90:39:38:b5:9a:e4:48:
                    69:1b:d3:d7:c0:96:e5:57:71:ee:3b:f3:d7:b1:c1:
                    e9:56:c1:ac:0c:34:3d:0a:0b:08:c1:6e:ed:c7:c8:
                    fb:2d:ff:09:fb:1f:c6:72:72:54:20:ad:17:63:41:
                    50:6b:23:7b:68:de:70:42:fb:6d:98:7a:88:cb:2e:
                    9b:2c:8c:d2:c4:bf:50:a7:ff:4a:3c:89:c6:59:59:
                    7b:75:60:70:7a:0a:d8:3f:96:74:22:58:d4:64:cb:
                    60:bb:c3:8c:50:be:f3:23:a4:89:c5:9e:0b:6a:77:
                    c5:b0:0b:17:ff:ee:a2:a2:c4:a6:12:12:83:16:80:
                    17:3d:4c:ca:ea:04:ee:36:e5:1d:c9:6c:d0:e9:69:
                    49:23:29:dc:12:b6:60:dc:f6:31:cd:69:f0:97:7e:
                    1c:fb:c9:1c:0f:ad:ec:0a:7f:22:04:35:e7:e3:01:
                    6c:2f:0e:07:b0:32:14:cb:8b:49:6c:75:ef:74:0c:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0C:E8:7D:3C:6A:91:08:FF:2A:43:6F:73:69:9B:3A:3A:CF:F3:92
            X509v3 Authority Key Identifier:
                keyid:E8:42:8F:C2:DA:5B:65:63:74:9C:CB:99:77:57:75:E8:20:B7:73:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EKPwtpbZWN0nMuZd1d16CC3czw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/596791-53cf-4d09-aeec-5e6cf96f70cb/1/6EKPwtpbZWN0nMuZd1d16CC3czw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:20:e5:7b:74:be:61:e3:d4:b6:35:9a:cb:77:70:3a:27:
         95:91:06:6e:d6:0b:93:88:68:a2:a5:f3:45:e8:29:0d:d6:2e:
         1e:36:a2:9a:ff:ae:56:f0:f7:32:f6:ad:45:82:8d:3b:35:72:
         03:8d:ae:36:0d:f8:55:88:24:3a:ca:e2:70:12:13:82:bf:94:
         00:4c:a4:4d:97:a1:1a:6a:07:ce:cc:a3:b2:c6:05:c1:ab:a2:
         24:5a:82:1e:bd:63:10:d6:d5:a3:a3:38:8f:59:e0:a6:18:6d:
         0b:48:ac:18:42:74:93:14:d0:0a:18:0b:48:0b:56:15:48:7b:
         3e:26:c4:d8:8a:fb:23:f4:66:53:95:0d:a4:27:ab:ad:56:48:
         be:81:f2:e9:d1:85:c2:98:84:4e:06:93:4a:29:ba:85:32:19:
         97:18:80:04:49:65:bc:a3:a2:55:fc:e3:6a:63:77:48:47:0e:
         a3:ef:05:e7:ad:29:24:f1:d6:83:4a:01:da:7d:bf:c2:34:e9:
         d5:1c:7c:8b:61:bf:44:7c:5a:cf:f3:91:55:05:12:56:69:c5:
         6a:a8:97:06:7a:8e:17:f1:e9:73:23:f3:8f:e4:54:0e:75:ca:
         49:a8:23:d1:ef:ae:67:46:af:4f:bd:64:3d:0a:16:d9:a3:5c:
         28:07:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:55 2025 by rpki-client