Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          7lWCS2hFUjtAODHr/aYX0E2T0w+ak9N2wtbCC+ecCQM=
Subject key identifier:   2B:51:32:E6:F4:AD:4F:A8:33:88:D1:77:DB:5C:46:B9:2E:12:E6:00
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       01992F6C78ADD017456AB73CB46CDF1D815C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          06CE
Signing time:             Tue 09 Sep 2025 17:01:01 +0000
Manifest this update:     Tue 09 Sep 2025 17:01:01 +0000
Manifest next update:     Wed 10 Sep 2025 17:01:01 +0000
Files and hashes:         1: HzyW06_qFMHD7FoonuBI96cfqI0.roa (hash: tww5NCEvuHGOvnxV6oYkbLx4biv3u6Go3vXrACuAJA4=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: MnN49deDvjudXSRn7zB+LEMnKdgRAHv6cvcrQI70qdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 17:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2f:6c:78:ad:d0:17:45:6a:b7:3c:b4:6c:df:1d:81:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Sep  9 17:01:01 2025 GMT
            Not After : Sep 10 17:01:01 2025 GMT
        Subject: CN=2b5132e6f4ad4fa83388d177db5c46b92e12e600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:54:39:77:e9:73:b4:a8:9d:a8:27:d7:bd:
                    61:e9:14:3b:dc:85:09:ec:52:7e:0b:1c:b8:07:3a:
                    4b:7b:f9:5e:e3:9d:f6:bd:59:ff:88:af:d8:78:a5:
                    0e:fb:8f:0e:67:fd:80:a7:07:85:fb:f2:85:09:93:
                    c3:99:68:72:37:00:73:43:12:dd:ad:df:15:f5:ca:
                    f9:20:a6:fb:63:80:a6:c8:62:4d:1e:7e:99:85:4d:
                    06:0f:47:5f:51:48:ae:4b:9e:63:c1:b3:b7:34:59:
                    12:7c:3a:76:94:12:f9:ce:ff:14:c1:ae:51:f9:ae:
                    9d:b8:e8:a0:ae:ff:27:3e:05:83:ed:bf:57:e5:c2:
                    37:62:f7:92:a9:cd:bc:de:f0:ab:d4:59:a6:f9:62:
                    c4:68:60:6b:6a:f7:2b:ba:97:49:ba:22:4a:90:75:
                    6f:82:f1:ab:5c:6e:50:85:27:76:43:fa:5b:49:b6:
                    6f:6d:d4:50:48:66:bc:c0:ba:49:3c:b1:93:60:11:
                    32:70:91:ef:ae:58:37:fa:88:fb:58:f5:f3:ab:59:
                    4a:45:c9:d7:51:d8:16:b3:fd:79:cc:17:c1:20:09:
                    d5:fb:82:0d:a9:33:43:01:86:72:d4:91:33:fe:5e:
                    6e:2d:ba:17:9c:c0:6a:9f:d1:34:e9:b9:4c:6d:be:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:51:32:E6:F4:AD:4F:A8:33:88:D1:77:DB:5C:46:B9:2E:12:E6:00
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:17:c1:03:d7:a9:1b:2a:dd:f2:96:ad:86:f1:70:e3:01:
         b3:c9:19:06:8c:c6:d4:e4:55:92:5e:82:d6:23:d9:c9:75:5f:
         7a:f2:f4:5b:08:5a:90:14:19:2c:c8:0f:bd:bd:f7:b5:66:36:
         73:7f:1d:8f:f4:dc:b3:22:ff:b1:e5:fc:f0:a5:7f:64:02:e5:
         67:bb:bc:07:0d:ea:2e:82:a6:c5:cc:41:db:6f:c9:0f:9e:96:
         e7:7d:56:2b:0d:05:42:fc:26:20:bb:75:92:d8:64:05:dd:10:
         ff:cf:c8:52:fa:6a:5d:94:16:50:77:66:9f:01:f2:0b:98:4e:
         10:c2:9d:40:01:e9:69:c3:f2:85:50:88:a6:5a:4e:27:c2:44:
         a6:9c:ec:98:ac:b9:c5:82:47:25:51:78:b8:65:6d:65:e6:34:
         5f:83:d3:fc:f2:e3:88:b6:83:b3:d9:6d:a2:fd:fc:72:6a:5c:
         c3:84:da:22:ce:ce:45:1b:68:3a:f2:f3:d8:18:04:b4:cb:c6:
         34:e8:7b:c4:ea:96:10:fd:10:6a:7c:84:cd:d8:47:e5:2b:af:
         99:c2:7f:80:c2:cb:85:fb:45:b9:ab:8d:c5:8a:86:fb:0d:dc:
         80:e2:7f:49:c0:64:5c:6f:53:ed:8d:d0:b8:75:6b:8a:97:62:
         1e:71:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:24:07 2025 by rpki-client