Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
File:                     IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft (raw, json)
Hash identifier:          JwIwFDKHGxhqE2k9xuLa4VLMUiLyr5Q1mhNHt5LTi0o=
Subject key identifier:   76:EB:0E:8B:16:DE:22:CB:19:64:7C:54:19:F7:0D:E0:3B:56:BB:2A
Authority key identifier: 20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4
Certificate issuer:       /CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
Certificate serial:       01974855212D125034258D647F2B9DB414C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
Manifest number:          01C0
Signing time:             Sat 07 Jun 2025 03:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 03:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 03:00:27 +0000
Files and hashes:         1: IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl (hash: D6biJka9rY1Ne+udMyMXOofhUwNlJUhil0KcMNws7fI=)
                          2: QpNcCoA4Z5ottRskUsrVfwUI5R4.roa (hash: 3Ookyfb7wHO7/58EMfYEHBR9Z8xGK4lUfT1UByxh2SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:55:21:2d:12:50:34:25:8d:64:7f:2b:9d:b4:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=207e90d62de2c727cd4539a2f070c4e91df32bb4
        Validity
            Not Before: Jun  7 03:00:27 2025 GMT
            Not After : Jun  8 03:00:27 2025 GMT
        Subject: CN=76eb0e8b16de22cb19647c5419f70de03b56bb2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:df:6d:a6:03:51:d4:26:f4:6d:ce:a4:ef:
                    87:c4:c4:0c:ff:56:f3:2b:10:7c:7f:7f:95:e9:f6:
                    42:08:3c:d4:a6:b0:35:1b:f1:1d:d7:58:da:e4:cb:
                    1a:a1:22:ee:4e:5a:93:74:d8:4d:3c:b4:60:1b:8e:
                    f1:a4:09:ca:f5:73:b6:6f:fd:0d:55:69:cb:ad:f7:
                    8c:45:d4:f7:ef:e0:c5:c8:6c:10:3c:f1:30:8a:72:
                    0c:3b:fc:dd:9b:42:7d:85:ad:ec:99:e3:91:12:6b:
                    36:00:2f:97:e0:e9:8e:4d:72:20:c1:c9:60:bc:80:
                    b1:87:44:ed:5a:ac:a2:95:58:14:ac:b9:d6:03:79:
                    4f:d5:26:da:5d:3f:1b:21:5e:d2:f1:b8:5b:fa:dd:
                    54:21:08:f1:0c:68:9e:95:fd:8c:d9:ee:c5:e7:2a:
                    3c:b7:cf:0e:0f:b1:6d:2e:80:7b:d2:30:c5:8f:f1:
                    56:f3:26:97:0a:03:e9:5e:8d:04:c5:19:03:38:29:
                    ba:66:e0:c8:96:16:c1:d1:25:b4:5c:92:0f:28:d5:
                    56:20:a8:fe:8c:04:cd:4e:d8:0a:9a:82:2d:16:bf:
                    dd:13:f8:38:62:04:7b:91:ed:69:80:4e:42:d4:21:
                    36:18:57:4d:29:ed:10:2d:d4:cf:c9:6e:b9:16:11:
                    e4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:EB:0E:8B:16:DE:22:CB:19:64:7C:54:19:F7:0D:E0:3B:56:BB:2A
            X509v3 Authority Key Identifier:
                keyid:20:7E:90:D6:2D:E2:C7:27:CD:45:39:A2:F0:70:C4:E9:1D:F3:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/24e3d0-b556-4888-9f6f-fbe68ff627b2/1/IH6Q1i3ixyfNRTmi8HDE6R3zK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:27:ac:68:08:7d:23:b8:29:28:db:54:f4:fa:bd:df:17:
         3a:af:9c:b6:e3:17:0a:1a:35:f5:d2:dc:c6:5b:eb:da:9c:b3:
         dd:19:8a:7a:7e:ae:99:d1:fc:78:18:7c:cf:3b:83:f0:e9:db:
         ee:92:43:ee:4f:83:29:8a:2f:0a:57:13:9f:f3:94:f1:08:25:
         25:3d:fd:a8:91:90:05:95:8c:4d:2e:d1:73:36:b1:b1:d8:f8:
         5c:ae:e0:29:ca:26:66:13:49:a4:d8:22:32:c4:e9:36:26:2e:
         25:00:e1:0f:a9:96:40:58:f4:15:cf:bc:0a:96:bf:ee:85:e5:
         89:bc:2d:9f:f4:fc:92:50:ab:c4:44:c1:2a:ed:b6:e9:1a:d9:
         c7:be:8d:11:5c:91:04:b9:e3:6c:82:4e:3c:f5:3d:56:76:8d:
         29:6b:a6:c0:fd:b7:36:ad:4d:1e:e2:c3:4e:31:b5:f9:91:12:
         4f:3d:96:e4:06:3a:16:ca:83:c5:fd:53:ab:4d:49:f8:a7:5a:
         db:8f:9e:6b:ef:03:75:20:bd:94:14:30:1e:b4:e7:ef:0f:1c:
         4d:3f:c6:51:25:b4:e0:01:7a:97:b6:a5:80:27:ba:15:02:ff:
         e8:cf:9c:33:8b:7c:a3:38:41:9e:5c:c0:2c:42:d8:b4:1c:5b:
         ef:1a:47:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:27:26 2025 by rpki-client