Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
File:                     6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft (raw, json)
Hash identifier:          g9UgrNnuUSZYt1KOUPnigtEhs2BkKBQGUZmNcdiJ/4k=
Subject key identifier:   9A:2E:79:95:10:64:F9:8A:C2:93:5A:1A:C6:51:93:75:CD:9C:C3:68
Authority key identifier: E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94
Certificate issuer:       /CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
Certificate serial:       01958FCF127B47143F3E1C156199149F4CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
Manifest number:          0F42
Signing time:             Thu 13 Mar 2025 14:01:07 +0000
Manifest this update:     Thu 13 Mar 2025 14:01:07 +0000
Manifest next update:     Fri 14 Mar 2025 14:01:07 +0000
Files and hashes:         1: 1-lHFpavrRPAxi2mxTPDKpLPcy14.roa (hash: 2r+qTZtO07hGXOIWN+DFEL0ZIWfOdC+x8G7I0hOMy20=)
                          2: 6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl (hash: b8jZbbDfjEjSebJkRNYPeJ5p2mu8+kuHXfxIqUW3Pps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:cf:12:7b:47:14:3f:3e:1c:15:61:99:14:9f:4c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8159b68ce41368a99fe1079ec54c36c9bb1bf94
        Validity
            Not Before: Mar 13 14:01:07 2025 GMT
            Not After : Mar 14 14:01:07 2025 GMT
        Subject: CN=9a2e79951064f98ac2935a1ac6519375cd9cc368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:c5:2b:a3:b7:f3:64:6c:e8:5d:ab:be:67:
                    54:0e:ae:22:20:9a:19:fa:0d:40:3f:72:02:ca:be:
                    11:91:a5:f1:e1:40:22:c6:5e:bd:db:d0:54:7d:a6:
                    b5:99:6f:28:ce:2a:26:63:29:86:5e:15:c3:3a:bd:
                    3b:3f:16:c9:96:c5:c7:1d:d9:fb:46:77:00:f5:3c:
                    96:71:4f:76:27:dd:94:90:c1:d8:58:76:ea:d2:9a:
                    3a:86:1a:c3:40:fc:3a:7c:c8:6c:09:c6:78:25:5a:
                    8d:32:17:b3:ec:a2:75:cd:59:3f:90:09:eb:7b:49:
                    21:f2:ee:7d:6c:74:cf:90:f8:94:54:7a:46:1e:57:
                    61:59:65:7c:06:ab:69:9b:35:49:9f:91:03:db:b7:
                    42:3e:01:6f:2a:cb:21:fc:7d:eb:f0:a3:84:92:6d:
                    94:8f:7d:51:86:20:f0:dc:33:1e:4a:94:82:4d:ea:
                    62:a1:f6:62:11:2f:37:ea:ce:3b:72:5d:b2:dc:b6:
                    c1:80:ff:f5:9f:7a:05:65:97:1a:6b:6a:9c:84:c2:
                    f3:fc:05:76:e6:2f:5f:05:5e:c2:18:fb:93:53:6b:
                    aa:40:37:44:7f:55:a3:c6:71:5f:58:fc:5c:f6:2a:
                    c9:e4:37:68:bf:62:e4:cf:4b:dc:1a:4d:b0:f3:53:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2E:79:95:10:64:F9:8A:C2:93:5A:1A:C6:51:93:75:CD:9C:C3:68
            X509v3 Authority Key Identifier:
                keyid:E8:15:9B:68:CE:41:36:8A:99:FE:10:79:EC:54:C3:6C:9B:B1:BF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/228efe-ff30-4328-a915-0f3b6f96990b/1/6BWbaM5BNoqZ_hB57FTDbJuxv5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2c:13:03:05:01:d4:8a:0b:93:7e:20:22:dc:b1:5f:38:de:
         f8:8a:e1:3f:8e:6b:2a:0b:b4:bd:c9:26:92:90:8d:62:4c:d3:
         5b:82:07:d4:9e:9a:49:b1:df:f1:26:5a:7d:3d:64:ca:09:21:
         45:40:51:07:62:43:09:40:0f:34:7f:2b:ea:a6:3f:b0:f0:97:
         e9:0a:71:ba:4e:19:aa:ec:5b:9b:dd:e5:e7:c4:34:8c:76:34:
         af:c2:37:fc:a8:77:4f:ca:d3:bb:b3:7a:23:78:02:e3:55:94:
         3f:4b:4e:72:39:84:43:c5:d4:3b:77:e2:65:d1:52:a2:6b:3a:
         a0:0f:9e:ee:6b:e5:23:a3:ea:7a:41:c0:43:80:3f:9f:90:7d:
         2e:5c:31:21:8b:82:95:74:ed:8f:9b:06:05:02:da:65:11:06:
         1d:63:fc:2a:2e:61:64:7b:05:02:55:36:4a:7d:00:1c:40:ff:
         20:65:0b:d8:f3:29:9a:e0:da:d3:86:2e:a9:3d:09:7e:7c:1c:
         b3:af:8c:92:2a:11:3c:e8:39:4f:60:ae:86:b0:63:76:2e:cc:
         86:20:7e:c9:5a:78:a8:40:7e:b1:cb:7d:f3:de:18:62:38:5c:
         5f:36:9e:a8:94:b2:91:89:ca:20:49:c6:3a:1b:fe:25:15:5f:
         5f:0d:ea:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:34:40 2025 by rpki-client