Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
File:                     FqMhIVpNNe0imLBzlx20CIZP02I.mft (raw, json)
Hash identifier:          4v0cwiuF2KepvF/1ScQ9IUa1ZY2VUUKXaABwmnZTgmg=
Subject key identifier:   CC:FC:09:E2:5C:0C:C6:46:88:56:16:42:9C:B6:75:8A:BD:D4:CF:F0
Authority key identifier: 16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62
Certificate issuer:       /CN=16a321215a4d35ed2298b073971db408864fd362
Certificate serial:       0196165963BB0F546989C908B9DAE462B468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
Manifest number:          0D06
Signing time:             Tue 08 Apr 2025 17:01:19 +0000
Manifest this update:     Tue 08 Apr 2025 17:01:19 +0000
Manifest next update:     Wed 09 Apr 2025 17:01:19 +0000
Files and hashes:         1: FqMhIVpNNe0imLBzlx20CIZP02I.crl (hash: MhzxKiKsXxwj+vDiJoMhiN7ZqgNbutgl28YzfhE6Cqo=)
                          2: q9FXpjO7WYpYF_PuEvxdIBNk31U.roa (hash: eU80FRwYJKXcKKPdsKCtTdJX7dfta5v66z6KC/V+tqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 17:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:16:59:63:bb:0f:54:69:89:c9:08:b9:da:e4:62:b4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a321215a4d35ed2298b073971db408864fd362
        Validity
            Not Before: Apr  8 17:01:19 2025 GMT
            Not After : Apr  9 17:01:19 2025 GMT
        Subject: CN=ccfc09e25c0cc646885616429cb6758abdd4cff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:b5:84:de:60:43:31:ac:da:10:a5:af:01:
                    8d:b6:9e:47:4e:80:95:31:ba:27:e5:f6:82:1d:8c:
                    9a:60:c2:2b:dc:12:d0:8a:ac:d7:a6:53:de:97:b6:
                    20:a3:61:e3:60:2a:65:9a:08:1c:93:bd:e6:77:5f:
                    2a:a0:fe:83:a1:48:2a:7c:7c:c6:ef:65:07:f4:99:
                    0d:f3:76:00:2d:0f:bb:d7:b8:54:eb:e6:10:5f:ef:
                    cc:40:77:6d:f1:e2:ef:39:d6:c8:5c:9d:83:cf:fd:
                    74:b7:c0:c2:c6:f8:39:98:02:b1:36:e0:a1:8f:fc:
                    e5:07:e4:c9:97:a6:02:e7:5a:82:c7:18:1d:64:ab:
                    ec:e1:9a:2e:4c:d5:4c:bb:5b:73:a6:19:60:e7:1e:
                    12:ca:48:ac:a6:63:98:5b:c4:75:0b:02:77:93:12:
                    79:d4:7c:4b:84:7c:9a:9c:b5:2a:8b:35:c1:9b:ad:
                    80:f7:c5:05:ff:9e:55:0b:e6:bc:84:b9:b6:66:ff:
                    61:86:99:47:b2:ae:a9:f1:a1:51:b2:df:0e:b3:c0:
                    e3:79:e2:3e:1e:4d:f7:06:30:34:7d:38:e9:db:83:
                    7b:48:76:0d:c1:60:83:4f:9c:46:78:b5:83:7d:dd:
                    0d:29:64:af:ba:4b:93:9b:c5:7b:3c:4e:e2:c4:6b:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FC:09:E2:5C:0C:C6:46:88:56:16:42:9C:B6:75:8A:BD:D4:CF:F0
            X509v3 Authority Key Identifier:
                keyid:16:A3:21:21:5A:4D:35:ED:22:98:B0:73:97:1D:B4:08:86:4F:D3:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqMhIVpNNe0imLBzlx20CIZP02I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9ca8b2-5ec8-4d2a-b994-c4c94b88071b/1/FqMhIVpNNe0imLBzlx20CIZP02I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c7:88:62:a1:68:a8:74:b5:5e:f6:ef:3e:ce:45:63:cd:93:
         51:7e:b5:2f:df:cd:84:a1:ed:55:d3:7c:ef:ee:fe:c9:16:4f:
         b1:1a:48:50:81:51:00:dd:52:97:ff:8c:68:db:31:37:d3:7b:
         52:4f:28:cd:92:8a:89:ab:6b:bf:22:b4:c2:16:ae:1f:89:1c:
         36:ba:95:61:c1:a8:be:dc:cd:74:e9:96:49:bf:5c:42:b9:5a:
         70:90:89:41:d4:82:eb:56:fc:cf:03:6a:cc:ac:f4:44:c6:63:
         ea:1f:18:5e:10:39:fc:28:4d:d4:37:3a:23:ff:0f:39:6c:7f:
         42:09:6f:56:ef:c1:0e:41:87:5d:af:61:c2:d2:80:f3:72:e5:
         4c:78:dd:2a:3e:78:2c:16:e3:52:d5:b8:f0:0f:ad:5f:96:1a:
         b5:cb:e4:1d:28:84:c2:b3:d2:b3:a2:df:50:9e:8b:92:b7:25:
         f5:dc:53:32:93:a6:cc:aa:2e:70:2d:b8:d2:e0:83:f7:5f:95:
         72:72:07:5d:04:6c:64:16:05:f5:2e:12:16:17:e7:f2:f2:eb:
         1a:d7:50:40:db:c2:0f:86:8e:06:40:c3:0a:96:ed:00:e6:3c:
         62:33:50:18:cf:53:de:2e:53:8c:c6:05:93:6a:d2:e2:41:b5:
         b6:b1:05:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:12:16 2025 by rpki-client