Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
File:                     6EpS3W883rR4C7KZj1AWYMybiP8.mft (raw, json)
Hash identifier:          pWMUJHp1GqPuSfSf4F3qYEs6hCNdG4NoeegUttMQdiE=
Subject key identifier:   A8:55:71:3A:0E:0B:27:FF:6C:D0:8D:99:52:E2:92:C4:3C:BE:4D:60
Authority key identifier: E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF
Certificate issuer:       /CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
Certificate serial:       01964D46DDA712BEF1AC814CDAB94444931E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
Manifest number:          0813
Signing time:             Sat 19 Apr 2025 09:00:11 +0000
Manifest this update:     Sat 19 Apr 2025 09:00:11 +0000
Manifest next update:     Sun 20 Apr 2025 09:00:11 +0000
Files and hashes:         1: 6EpS3W883rR4C7KZj1AWYMybiP8.crl (hash: Ad+K/Nh0BZBNeg8XxjEVdG/NRC9AnIGtasN1tRfrhJs=)
                          2: k-C92F5fBC7tzidpGResaRP_3Y8.roa (hash: cCgzC2CyBMRCMgCeDBY61Xy0TGv8/RtXgzQi7ffbn8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:46:dd:a7:12:be:f1:ac:81:4c:da:b9:44:44:93:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84a52dd6f3cdeb4780bb2998f501660cc9b88ff
        Validity
            Not Before: Apr 19 09:00:11 2025 GMT
            Not After : Apr 20 09:00:11 2025 GMT
        Subject: CN=a855713a0e0b27ff6cd08d9952e292c43cbe4d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:aa:87:04:bc:26:9d:8e:92:4f:6b:bf:bc:6c:
                    91:99:f8:6c:ed:09:e9:0f:db:41:a6:35:9d:d1:c6:
                    13:11:26:9d:da:19:08:60:5a:04:2a:ff:42:46:ce:
                    7f:e6:96:fd:48:e8:0d:eb:6e:d3:9c:f9:9a:3c:55:
                    e1:17:dc:85:1d:67:af:b8:0c:21:b3:0f:85:40:37:
                    36:8a:a7:ad:35:cb:cd:f2:39:8f:a3:81:c4:34:3d:
                    ba:fe:0e:6d:d8:73:59:a1:c0:ba:c2:13:e7:2a:72:
                    a5:f9:de:9f:68:67:b3:b8:27:ad:0d:cb:a6:ca:4a:
                    f2:db:d1:4b:21:c5:01:54:82:5e:b6:7f:fc:09:18:
                    cd:7e:ae:e7:46:a0:5b:0e:dd:b0:73:0f:80:ad:ce:
                    d1:e1:d7:17:1e:0e:15:76:45:fc:1d:bd:2e:76:28:
                    ab:84:67:00:e8:22:0a:8d:cf:ab:3e:37:d5:55:25:
                    98:e6:69:75:ae:f6:7a:30:1e:ea:fc:8b:fe:f1:a2:
                    50:0f:46:8b:d6:f8:b5:76:54:c1:71:36:6e:89:26:
                    32:b9:69:a3:ea:72:57:74:31:46:dc:9f:7f:6f:82:
                    31:cc:f2:e1:11:b7:06:0c:22:d6:e7:32:38:49:ce:
                    2e:10:57:26:c8:dc:f7:9a:33:6e:e8:68:e2:69:f3:
                    ff:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:55:71:3A:0E:0B:27:FF:6C:D0:8D:99:52:E2:92:C4:3C:BE:4D:60
            X509v3 Authority Key Identifier:
                keyid:E8:4A:52:DD:6F:3C:DE:B4:78:0B:B2:99:8F:50:16:60:CC:9B:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EpS3W883rR4C7KZj1AWYMybiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f39f30-14f0-4226-be6f-b269f895e7f7/1/6EpS3W883rR4C7KZj1AWYMybiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b6:f0:58:6a:66:05:ed:9b:b0:01:79:ed:21:a0:fb:c5:f4:
         4e:e5:1b:06:3f:8b:ab:3f:d0:71:e8:38:ae:2b:9c:16:5e:2e:
         17:ee:48:77:93:f0:e1:e6:df:3f:0e:ae:77:23:b6:5d:c8:72:
         62:85:ba:4d:2d:18:ec:c5:16:c5:db:67:b8:d0:0b:0c:8a:85:
         02:4b:e1:59:46:ec:57:a3:70:d6:5c:56:4a:28:ba:d8:25:3c:
         4a:d5:24:f1:bf:b5:be:8f:ff:f9:11:52:f3:93:6e:c9:ad:c4:
         2d:26:b7:52:57:fa:22:54:1f:cc:41:ab:d5:d2:49:15:17:67:
         fe:cc:3a:b3:1b:e6:f5:93:d2:5a:ef:c8:0e:e7:e7:73:02:48:
         97:9b:90:1f:91:e2:43:76:4b:a6:17:bd:e8:2b:2a:73:6f:28:
         e8:55:30:82:b5:ec:3f:56:6e:74:42:9b:59:20:d0:5f:00:ba:
         e3:e3:f6:42:b3:3b:f7:86:2e:fb:dc:f3:c2:60:16:ad:29:1a:
         f4:f8:fd:bb:b7:22:48:c0:8d:74:5d:11:1e:41:53:c2:a0:ba:
         22:f4:8c:9e:98:8c:f0:97:9e:69:f9:cb:82:c2:1f:21:01:33:
         f9:8c:cf:23:56:58:45:65:b3:07:6d:32:b8:cf:56:15:cb:39:
         d4:95:eb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:01:27 2025 by rpki-client