Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File:                     azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier:          d9pOt1j49ScRzqfqdHh2d7Q030AYBcqDhBMTwJrTrPQ=
Subject key identifier:   A8:4D:62:18:39:66:F2:1C:78:F2:E8:7C:1B:9A:6A:70:50:B8:0A:12
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer:       /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial:       019767E05722A123393035B233F923DCD2D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number:          1590
Signing time:             Fri 13 Jun 2025 06:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 06:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 06:00:44 +0000
Files and hashes:         1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: YqjdYSxOpvmBMh6Dn5AntYiclDA4mfRrNXqQGpuvv78=)
                          2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:e0:57:22:a1:23:39:30:35:b2:33:f9:23:dc:d2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
        Validity
            Not Before: Jun 13 06:00:44 2025 GMT
            Not After : Jun 14 06:00:44 2025 GMT
        Subject: CN=a84d62183966f21c78f2e87c1b9a6a7050b80a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:84:7f:d1:5d:a3:7e:d2:07:48:37:ce:e4:
                    71:af:df:79:52:bb:29:b3:0b:b4:de:e9:9d:48:47:
                    a4:ef:f4:75:5b:6f:6b:5f:5d:7a:93:55:2c:92:a1:
                    de:3a:1a:7e:d7:81:6d:b1:d5:e1:89:42:9d:88:7e:
                    e6:11:bd:72:fc:4a:f5:e6:06:c9:13:64:5d:9b:fc:
                    68:fe:d5:0a:1f:74:03:71:11:e4:e3:90:52:95:70:
                    75:95:f4:ce:d8:13:8b:22:fc:24:d5:53:58:5b:fa:
                    2f:a3:3c:05:57:29:33:4a:e7:95:49:63:e9:a6:eb:
                    0d:8d:d8:35:8d:4c:c8:31:6b:b5:82:67:b0:62:89:
                    5d:8a:b7:16:1d:a5:06:8b:93:2b:ec:b8:bc:a9:d7:
                    f5:fe:8e:42:d7:8d:a3:3e:28:9b:3d:5d:09:0a:9c:
                    5f:07:df:74:34:c4:03:22:d6:7a:79:c0:90:95:83:
                    6f:ca:99:37:71:36:a2:ba:64:fa:fb:97:6c:f6:88:
                    6e:23:92:7b:25:ea:53:b3:48:8d:73:82:1e:65:01:
                    e6:63:7d:e0:0b:d7:e5:a3:90:5b:9c:71:70:c4:85:
                    22:6c:6f:79:46:ab:09:1c:72:f7:5c:0f:74:0a:a1:
                    62:40:1b:0d:f6:1f:f0:2d:a7:21:9e:63:f1:b8:c3:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:62:18:39:66:F2:1C:78:F2:E8:7C:1B:9A:6A:70:50:B8:0A:12
            X509v3 Authority Key Identifier:
                keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:21:29:e5:4f:46:ae:4d:00:0d:18:cc:b5:cf:d2:f7:99:aa:
         ed:60:7d:f5:20:53:58:a3:38:d8:4e:bd:f6:8e:ff:c2:f4:9a:
         22:b4:1d:1b:fa:20:5d:55:99:08:fa:7f:9c:ae:f0:81:d2:94:
         9a:d4:34:c8:77:9c:c4:c0:27:84:f2:1c:27:09:1b:b2:16:84:
         4c:e3:49:fe:07:2d:a7:70:32:fb:67:08:72:8f:72:69:d2:4d:
         8b:0b:ce:e8:9b:42:8c:8c:e7:73:af:3e:7e:a1:c4:b7:33:d2:
         7c:db:7d:76:f9:bb:0b:17:9a:e3:6e:59:0a:0e:d3:d4:fd:b6:
         4b:02:99:98:03:d1:07:9e:67:46:07:bb:82:01:cd:f0:ae:f5:
         7f:6f:ca:59:98:d4:ba:f6:56:56:8c:6b:c8:38:b6:ca:a7:01:
         c9:5f:e0:8e:1c:22:67:d8:fb:e7:c4:1e:51:6d:83:e7:d9:e9:
         e2:51:96:31:d5:f5:8b:cb:d4:68:ce:05:d2:5e:99:7e:15:d2:
         10:b2:c6:5d:41:f9:ea:28:fe:14:82:70:f4:39:c0:ac:e6:7c:
         85:a0:26:0d:95:8a:1b:59:cf:d6:07:5e:0c:96:3b:18:c4:36:
         66:cb:43:bc:f1:32:70:4d:95:3e:1c:3f:66:c6:f5:49:2e:26:
         3e:4b:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 08:00:11 2025 by rpki-client