Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
File:                     6u6iC7vbml0c3HEU4q9RjnaxQm4.mft (raw, json)
Hash identifier:          1qDLmejFmnbwH8+eb8flKvrygIU3eDaS0oOQ7t/B1xY=
Subject key identifier:   AA:C3:30:CE:45:19:BF:F9:44:C3:2E:82:21:F5:B3:49:DF:BB:12:B6
Authority key identifier: EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E
Certificate issuer:       /CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
Certificate serial:       019751C64CBDF9E9F3F56EB4CDA6F39E8C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
Manifest number:          157F
Signing time:             Sun 08 Jun 2025 23:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 23:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 23:00:39 +0000
Files and hashes:         1: 6u6iC7vbml0c3HEU4q9RjnaxQm4.crl (hash: kufoeF4Wx0DtOasXnn72yNJPjEzNPhH+ve99gKD8yhM=)
                          2: geha7iQ1rH3EuPcaRcUifOKzQvU.roa (hash: +mhm2AbX83eujN7tnN0AlZkDl8/zUPKZGbQPpl0Ndlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:c6:4c:bd:f9:e9:f3:f5:6e:b4:cd:a6:f3:9e:8c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaeea20bbbdb9a5d1cdc7114e2af518e76b1426e
        Validity
            Not Before: Jun  8 23:00:39 2025 GMT
            Not After : Jun  9 23:00:39 2025 GMT
        Subject: CN=aac330ce4519bff944c32e8221f5b349dfbb12b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a5:b3:3a:b1:b5:c2:82:66:fc:f7:14:d1:47:
                    9b:5f:0d:04:3f:22:06:3a:f5:31:17:dc:c4:75:6a:
                    d0:35:4f:7e:44:3c:77:ef:28:18:81:24:12:2d:30:
                    57:6d:e5:99:da:3c:24:f1:ef:69:90:41:c6:ee:e6:
                    f8:b3:ae:83:c5:f9:f7:99:02:b6:3d:f2:2a:5c:39:
                    41:68:65:03:d8:76:93:48:ec:d4:9c:eb:7f:d6:9a:
                    21:63:57:1f:7f:b9:d6:06:05:10:17:74:eb:d3:3f:
                    a3:3b:ec:77:a9:d4:ef:66:1a:44:5b:41:82:b1:77:
                    ba:77:e8:15:27:b6:7f:16:1f:f8:7e:b6:fb:ac:bd:
                    c7:7b:d1:11:06:19:da:4b:57:83:e9:2a:d5:02:79:
                    f9:b1:0a:12:0c:dd:b7:0e:dd:2b:d8:70:e1:b4:5b:
                    11:f9:b1:57:1b:24:ac:26:9a:6e:55:a0:73:20:81:
                    dc:2e:2c:d7:6b:ba:02:20:66:5d:01:25:86:e4:69:
                    40:11:e6:74:5e:d6:4a:95:ef:ca:5f:99:be:7b:e4:
                    15:87:7f:cd:a9:b3:ba:7d:73:a3:fa:a0:50:27:3a:
                    87:31:c9:df:a4:6c:f8:03:ab:a6:62:27:91:7e:62:
                    fc:f6:a3:12:8c:81:be:f0:88:67:d4:ef:39:af:fb:
                    56:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C3:30:CE:45:19:BF:F9:44:C3:2E:82:21:F5:B3:49:DF:BB:12:B6
            X509v3 Authority Key Identifier:
                keyid:EA:EE:A2:0B:BB:DB:9A:5D:1C:DC:71:14:E2:AF:51:8E:76:B1:42:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6u6iC7vbml0c3HEU4q9RjnaxQm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/7df859-2851-43c3-a32b-ab04720930cf/1/6u6iC7vbml0c3HEU4q9RjnaxQm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:81:af:7e:67:21:17:12:f7:3f:89:98:7f:d5:3b:f6:06:fe:
         55:f2:28:57:45:7c:4e:1e:54:6e:31:9a:c7:9e:4a:2b:43:e7:
         30:b2:b3:cb:d8:36:f8:a2:34:4f:8d:54:f0:ec:10:2f:6b:11:
         1a:6c:9b:0f:5c:cb:46:6e:c8:f1:5e:0e:91:3f:1a:43:37:76:
         55:3f:44:2f:5a:46:df:43:1b:96:6a:c9:c4:27:6d:6e:19:46:
         5c:2c:5b:34:68:70:89:33:d1:92:24:c8:df:13:19:c7:29:d3:
         51:28:62:d1:69:23:ac:e5:43:7f:47:72:d8:e3:3d:18:bf:89:
         ac:9e:98:c6:f7:74:35:df:a2:d3:2e:30:02:87:77:d2:24:9e:
         fb:26:09:f8:53:a1:15:80:22:a9:d3:ac:f4:9c:bd:04:02:e1:
         be:c1:4a:28:af:25:8c:c3:4a:e2:7e:2a:ba:1b:a5:e2:44:54:
         7f:9b:26:b6:d8:80:b3:93:d4:54:92:69:84:0a:ad:7e:64:ae:
         cc:5f:47:13:e6:a7:96:f0:2f:a1:71:91:df:45:07:61:d6:a7:
         80:b2:3f:ba:af:8a:ec:89:28:51:40:cb:92:6b:52:60:73:ce:
         02:9d:c1:ae:d3:dc:79:89:f5:48:0d:01:52:09:3d:12:91:40:
         b0:85:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:59:44 2025 by rpki-client