Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
File:                     aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft (raw, json)
Hash identifier:          jPD1Z9mg3l17w82J7YF7PruuNQa0ZPm7szO8px5w3Rk=
Subject key identifier:   6B:C9:91:77:B6:1F:00:75:E2:49:BA:CC:72:37:3D:7E:5D:76:EB:E0
Authority key identifier: 69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74
Certificate issuer:       /CN=69737c6e0602be3804e277580bab7e21e6e33474
Certificate serial:       0197469E48603E30977AA3B49E272FB8928E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
Manifest number:          05DC
Signing time:             Fri 06 Jun 2025 19:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:07 +0000
Files and hashes:         1: 86oammqkU0TE8AzqwBVv1FmzBYc.roa (hash: H3QOeQw7Wu4vQlfZwSufbLTx40TDb5RrgWASWL9m9b8=)
                          2: VRgzvsIGyVGSMvCfEEXMwDue8MA.roa (hash: PsTu4TZ4HzWVeuIcWadKHbXlWOA/8zFocM48RCXa9/k=)
                          3: aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl (hash: XkQz3nmfQuGZXkiNcyvx0oIuSO/4ECUm0HYjTghfZk8=)
                          4: jjkZ2yb-jO_dwKLdx8H317IXScQ.roa (hash: HCz04W3HLqaOC0rvZdH98CWQlK6DEnW7DscRc2ODf9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:48:60:3e:30:97:7a:a3:b4:9e:27:2f:b8:92:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69737c6e0602be3804e277580bab7e21e6e33474
        Validity
            Not Before: Jun  6 19:01:07 2025 GMT
            Not After : Jun  7 19:01:07 2025 GMT
        Subject: CN=6bc99177b61f0075e249bacc72373d7e5d76ebe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f4:f2:62:e9:51:d1:eb:7a:8d:ec:4a:5f:2e:
                    9c:d7:5c:08:8a:dc:83:70:88:3c:3d:1c:91:7e:c8:
                    11:ed:ea:1a:91:98:09:ad:19:0b:14:2b:d5:38:ec:
                    7e:3a:87:5b:ea:a2:94:ae:d5:e0:c5:16:b9:14:8b:
                    b1:19:21:82:71:52:e2:1c:b9:81:88:b4:50:01:1d:
                    17:be:f2:2a:ce:eb:a7:89:be:39:ed:9b:b5:47:bd:
                    15:29:90:3c:63:c8:70:6f:21:1c:e3:6d:ef:b2:e7:
                    a1:68:81:93:14:3f:bb:b9:77:48:20:05:c0:73:d5:
                    ad:44:b0:6b:8e:f9:d3:09:1d:d7:6a:12:a7:2e:e4:
                    51:2b:f8:bc:8b:06:56:03:49:48:8f:31:20:c3:32:
                    c8:ab:c3:83:32:2f:f2:50:f9:3f:3e:ce:03:e9:67:
                    dc:a9:84:d9:ae:91:d1:ed:ab:37:55:89:32:aa:ad:
                    a0:4a:d8:70:87:80:86:bb:a4:17:3d:00:82:05:21:
                    4c:bd:0a:72:bf:21:07:fa:5f:b5:8c:55:16:74:ec:
                    a5:30:36:e9:5e:a1:f0:98:fb:a0:ca:f8:ea:23:82:
                    b6:75:14:1f:4c:91:6e:c7:0b:66:1e:dc:c9:2f:f5:
                    02:52:03:7e:f2:74:17:73:6a:fb:c1:4e:06:47:b1:
                    78:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:91:77:B6:1F:00:75:E2:49:BA:CC:72:37:3D:7E:5D:76:EB:E0
            X509v3 Authority Key Identifier:
                keyid:69:73:7C:6E:06:02:BE:38:04:E2:77:58:0B:AB:7E:21:E6:E3:34:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXN8bgYCvjgE4ndYC6t-IebjNHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b6af9d-47ba-4b92-b41a-838a4505735a/1/aXN8bgYCvjgE4ndYC6t-IebjNHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:27:61:4e:0a:2d:31:e0:47:30:e1:54:43:c4:36:d8:0f:8e:
         c4:08:37:ba:21:66:e8:42:a0:68:d6:ad:63:52:f0:6c:eb:b2:
         ac:d7:c5:38:7c:73:43:f2:10:8a:74:1a:d6:97:5d:bb:a4:fe:
         1e:ab:aa:37:fc:00:dd:24:00:11:93:66:e3:28:75:21:7a:d7:
         88:73:64:7b:5c:59:58:73:ac:98:af:08:4e:bc:8d:e7:d8:22:
         c9:92:7b:13:8b:65:47:cd:69:1d:cb:49:76:11:12:70:0a:97:
         f4:e7:33:53:b7:7b:04:06:d6:72:d3:8a:91:18:a3:a8:e2:fe:
         d3:6b:5b:46:a9:18:80:f2:36:3c:2e:a1:9c:0e:2f:1d:ef:d9:
         4c:f9:a7:8a:cc:08:b2:61:00:9e:2f:6f:3e:ad:c2:ac:a0:e2:
         79:a9:c1:0a:38:b5:cc:30:7f:7c:c5:e6:81:bd:a6:4b:c5:e2:
         f2:5f:fe:d4:f0:96:9b:b9:68:55:24:9a:ca:28:d8:06:99:ce:
         4b:bb:1e:00:cc:ba:f0:61:6a:52:22:c3:fe:47:83:5f:86:3f:
         f0:37:37:bf:c6:8c:e5:32:01:2f:11:7e:93:ee:0c:62:c3:e2:
         56:b2:8c:fa:f3:8e:0a:18:53:e8:fa:4d:e2:28:08:59:d8:bc:
         5e:e1:9c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:27:11 2025 by rpki-client