Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
File:                     6T5Zf3uhSto19PbFD4plg6BPzDU.mft (raw, json)
Hash identifier:          usE4optv03/1oxiBcq8yUBZFpEwsbMrdogayxTe8RUc=
Subject key identifier:   39:71:45:3F:BF:70:B4:3B:4E:1B:B4:DC:DE:94:DF:F1:FD:77:48:C1
Authority key identifier: E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35
Certificate issuer:       /CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
Certificate serial:       0199172D50951EC95DC841FCBC7D2AB62F14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
Manifest number:          03F8
Signing time:             Fri 05 Sep 2025 00:01:09 +0000
Manifest this update:     Fri 05 Sep 2025 00:01:09 +0000
Manifest next update:     Sat 06 Sep 2025 00:01:09 +0000
Files and hashes:         1: 6T5Zf3uhSto19PbFD4plg6BPzDU.crl (hash: r5BoHcfEsAhVM+lTAW7o0dhsLtWuEewLpDZ/P0BrXzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2d:50:95:1e:c9:5d:c8:41:fc:bc:7d:2a:b6:2f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e93e597f7ba14ada35f4f6c50f8a6583a04fcc35
        Validity
            Not Before: Sep  5 00:01:09 2025 GMT
            Not After : Sep  6 00:01:09 2025 GMT
        Subject: CN=3971453fbf70b43b4e1bb4dcde94dff1fd7748c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c5:c8:48:6e:f0:56:cd:bc:ce:8f:9a:7a:fd:
                    3a:9d:ea:de:05:9c:2f:85:b1:ee:01:ec:5c:db:1c:
                    c0:bb:13:95:d5:81:ef:d8:7f:c3:61:91:39:8e:f0:
                    af:8c:14:9a:1e:c9:80:eb:21:fd:9d:1e:bb:28:30:
                    73:65:2c:0f:d8:28:c8:42:be:d7:f2:fd:a7:b4:68:
                    b6:a4:16:26:17:7d:33:59:ad:18:fe:e0:2c:7d:78:
                    b7:4d:91:30:b4:ea:32:6a:11:db:41:fb:56:b7:29:
                    66:89:87:ba:61:7a:dc:e4:8a:8c:27:31:28:d1:c1:
                    68:fb:ff:63:8f:07:f7:4e:69:88:88:5d:82:2f:e1:
                    08:83:ca:06:73:50:f7:84:ce:43:a6:70:5f:89:c3:
                    31:ae:fa:b7:1c:e7:ea:11:6e:df:29:8d:21:d9:1c:
                    6c:92:7a:55:ab:36:a3:f2:79:4e:98:a4:3e:7d:eb:
                    b0:e8:29:8a:c4:65:21:90:93:f5:c8:92:47:64:f9:
                    e2:b0:ba:1c:8f:7b:36:3e:b7:79:e2:9f:20:cd:6c:
                    50:bd:dd:ec:25:97:1b:c0:1b:f4:82:b1:d9:c4:69:
                    8f:52:dd:cb:48:93:d4:cd:5f:77:e6:4e:dc:3e:07:
                    6c:0d:90:e6:cb:79:20:fe:c1:2f:41:b4:d4:23:39:
                    22:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:71:45:3F:BF:70:B4:3B:4E:1B:B4:DC:DE:94:DF:F1:FD:77:48:C1
            X509v3 Authority Key Identifier:
                keyid:E9:3E:59:7F:7B:A1:4A:DA:35:F4:F6:C5:0F:8A:65:83:A0:4F:CC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6T5Zf3uhSto19PbFD4plg6BPzDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7f3561-1ce7-43e1-89db-070b4256262b/1/6T5Zf3uhSto19PbFD4plg6BPzDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:9d:e7:eb:09:7f:21:7c:7d:65:cd:31:09:58:bb:f4:b7:
         a0:02:af:cc:80:da:a4:73:11:fa:6f:34:bb:be:6f:93:c9:5c:
         1b:56:79:6e:22:73:98:af:b7:55:d6:09:9c:c6:7a:b0:90:48:
         54:a6:a0:bc:ba:a6:fe:ee:09:cd:44:26:c5:d5:c6:87:6b:f7:
         4c:2e:19:10:2d:1e:7a:f7:61:0c:1b:d7:63:56:49:54:ec:3a:
         91:c7:e7:f8:44:d6:64:e0:0b:75:f4:f2:4e:cc:93:67:f5:a5:
         59:e1:2e:40:2e:15:cd:0b:b9:5a:6b:cb:a2:b4:2d:7e:af:49:
         aa:54:75:bf:60:03:bf:73:60:7f:37:6a:9b:4d:ca:13:f7:92:
         5f:a1:34:f3:21:b1:c0:98:f6:20:f6:d5:8d:71:27:19:e4:e6:
         9e:64:6b:cd:e6:13:b5:fd:0a:c4:dd:3e:f8:31:f7:40:67:f1:
         ff:ed:1c:9b:29:e7:dd:1a:cd:89:49:a2:79:ce:50:ec:6d:d7:
         34:5e:35:ab:c3:bb:e6:80:05:75:52:e6:3a:c8:2c:fb:7a:dc:
         59:12:31:8d:78:41:1b:d3:0a:64:28:7f:2f:6a:c5:f7:fe:e1:
         11:56:b6:28:11:d0:ec:e1:a6:73:93:58:ff:3f:eb:18:27:a5:
         8d:e6:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:26 2025 by rpki-client