Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
File:                     C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft (raw, json)
Hash identifier:          n4fwXQzxsR0S/MrLvchvjhfU3stc93W5yq5S8INjRJg=
Subject key identifier:   27:91:61:13:3D:4E:8F:8B:15:D7:99:FB:68:30:92:B1:D6:86:8C:D2
Authority key identifier: 0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A
Certificate issuer:       /CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
Certificate serial:       01958FCF329542388500A8461E172EEA7A9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
Manifest number:          0648
Signing time:             Thu 13 Mar 2025 14:01:15 +0000
Manifest this update:     Thu 13 Mar 2025 14:01:15 +0000
Manifest next update:     Fri 14 Mar 2025 14:01:15 +0000
Files and hashes:         1: C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl (hash: XGHkMcYArRBzvN8ibt9f+ju5KDAJylD4wGYihX+MHyM=)
                          2: zCxP8ZVkWLcmxZhJZtWIxvZSe6w.roa (hash: DfGpVycShIM8dTI5tNGDuNowzD011BPKKYeWki1A+OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:cf:32:95:42:38:85:00:a8:46:1e:17:2e:ea:7a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babfb67a0975384efb8b7b7ca807f714f75f84a
        Validity
            Not Before: Mar 13 14:01:15 2025 GMT
            Not After : Mar 14 14:01:15 2025 GMT
        Subject: CN=279161133d4e8f8b15d799fb683092b1d6868cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:22:61:a3:3b:2a:6a:88:cc:b9:4c:19:c4:2d:
                    4a:8d:ac:f4:7d:58:97:1e:37:28:11:45:85:9f:be:
                    83:ce:e6:95:40:fc:d4:24:df:b1:6a:7c:73:1c:79:
                    5a:56:5c:e9:fa:56:c9:04:9c:ca:5d:95:88:8a:6d:
                    09:0e:91:61:63:c8:c0:05:cf:3c:05:e6:eb:a2:79:
                    16:94:f2:fd:c2:a2:f2:da:c8:db:e9:92:59:e9:97:
                    92:a2:c4:be:00:46:2c:1c:a4:b7:d2:c3:8f:a6:31:
                    2f:80:d9:98:4c:48:9b:49:cb:ad:d3:77:ef:d7:92:
                    3d:2b:68:90:5a:dc:a7:bb:c1:ac:25:61:6a:ac:d6:
                    34:c0:21:b0:49:1d:13:d3:f8:2d:d8:be:2d:db:d9:
                    28:12:5e:11:dd:7f:fb:78:25:11:41:39:15:f9:a1:
                    c6:d3:2d:ec:f1:cc:8a:e6:95:33:22:63:fb:58:f3:
                    04:99:8c:69:2e:38:44:cb:a2:8d:d0:3c:e7:1b:ac:
                    85:f8:04:e1:c8:3b:bf:25:d9:6e:d2:f9:d8:bb:44:
                    c0:64:30:e2:56:a6:59:95:7e:a7:88:e0:48:74:18:
                    65:66:8e:d4:35:64:62:39:35:11:87:ef:fa:39:d9:
                    44:2c:3f:58:5d:e0:8e:04:de:7f:b4:de:a6:bc:18:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:61:13:3D:4E:8F:8B:15:D7:99:FB:68:30:92:B1:D6:86:8C:D2
            X509v3 Authority Key Identifier:
                keyid:0B:AB:FB:67:A0:97:53:84:EF:B8:B7:B7:CA:80:7F:71:4F:75:F8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1ee7af-7f61-4dc9-bc3e-b4e5cad0dc52/1/C6v7Z6CXU4TvuLe3yoB_cU91-Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:09:d6:10:ff:ad:61:c9:96:6b:71:9d:2c:df:03:64:62:
         20:da:18:a0:96:f2:40:49:d4:b6:96:83:43:77:07:8d:dd:5a:
         11:5f:ad:be:bd:1d:73:2c:a6:cb:fb:7b:9e:1f:91:6e:11:22:
         fd:d2:0b:d0:40:37:7f:33:55:67:da:b5:20:8c:9f:25:74:a1:
         b1:06:c9:b3:bf:eb:7b:fc:27:1a:fc:2d:49:42:0a:ff:0e:1d:
         83:ea:89:55:7f:9d:25:f8:de:20:52:1a:bd:40:0d:f8:47:6d:
         01:ff:69:78:5d:74:eb:cf:a3:c7:87:9d:50:cb:44:29:fc:a7:
         85:f1:7d:b9:8f:fd:c9:43:bc:63:74:59:f5:19:ed:15:de:e0:
         61:99:da:a8:f2:35:12:5c:2f:ee:b1:fb:5b:12:cd:e1:d4:82:
         23:91:a6:a7:b1:5b:9d:e9:f4:56:28:79:94:69:d6:49:e6:ce:
         ad:83:14:58:ef:a9:d9:22:a5:6b:1a:26:3d:6a:e7:a3:30:c2:
         be:18:d5:48:85:cf:36:e5:03:84:26:46:27:18:ae:61:5a:2f:
         ce:6b:1c:6e:b6:84:78:ff:e4:b1:91:28:04:a3:e0:4d:d6:a6:
         33:58:2b:41:c1:89:3a:51:af:53:a5:40:54:f3:80:7b:21:b5:
         53:ba:b2:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWPzzKVQjiFAKhGHhcu6nqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWJmYjY3YTA5NzUzODRlZmI4YjdiN2NhODA3ZjcxNGY3
NWY4NGEwHhcNMjUwMzEzMTQwMTE1WhcNMjUwMzE0MTQwMTE1WjAzMTEwLwYDVQQD
EygyNzkxNjExMzNkNGU4ZjhiMTVkNzk5ZmI2ODMwOTJiMWQ2ODY4Y2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCJhozsqaojMuUwZxC1Kjaz0fViX
HjcoEUWFn76DzuaVQPzUJN+xanxzHHlaVlzp+lbJBJzKXZWIim0JDpFhY8jABc88
BebronkWlPL9wqLy2sjb6ZJZ6ZeSosS+AEYsHKS30sOPpjEvgNmYTEibScut03fv
15I9K2iQWtynu8GsJWFqrNY0wCGwSR0T0/gt2L4t29koEl4R3X/7eCURQTkV+aHG
0y3s8cyK5pUzImP7WPMEmYxpLjhEy6KN0DznG6yF+AThyDu/Jdlu0vnYu0TAZDDi
VqZZlX6niOBIdBhlZo7UNWRiOTURh+/6OdlELD9YXeCOBN5/tN6mvBhwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeRYRM9To+LFdeZ+2gwkrHWhozSMB8GA1UdIwQY
MBaAFAur+2egl1OE77i3t8qAf3FPdfhKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2Ut
YjRlNWNhZDBkYzUyLzEvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xZWU3YWYtN2Y2MS00ZGM5LWJjM2UtYjRlNWNhZDBkYzUy
LzEvQzZ2N1o2Q1hVNFR2dUxlM3lvQl9jVTkxLUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5AJ1hD/
rWHJlmtxnSzfA2RiINoYoJbyQEnUtpaDQ3cHjd1aEV+tvr0dcyymy/t7nh+RbhEi
/dIL0EA3fzNVZ9q1IIyfJXShsQbJs7/re/wnGvwtSUIK/w4dg+qJVX+dJfjeIFIa
vUAN+EdtAf9peF1068+jx4edUMtEKfynhfF9uY/9yUO8Y3RZ9RntFd7gYZnaqPI1
Elwv7rH7WxLN4dSCI5Gmp7Fbnen0Vih5lGnWSebOrYMUWO+p2SKlaxomPWrnozDC
vhjVSIXPNuUDhCZGJxiuYVovzmscbraEeP/ksZEoBKPgTdamM1grQcGJOlGvU6VA
VPOAeyG1U7qy9A==
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:28:08 2025 by rpki-client