Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
File:                     MT6-Q2p1YpuPPbdKmj-h1dMK038.mft (raw, json)
Hash identifier:          rVXd1+iCRVQVZEh6xteu5PMaBcvdoFoVTm0WvEsGZBE=
Subject key identifier:   E7:C8:24:39:43:84:90:D1:97:86:79:EE:BE:18:7F:66:88:C7:F0:03
Authority key identifier: 31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F
Certificate issuer:       /CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
Certificate serial:       019511348F391F1260B7DE42A2426689BDED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
Manifest number:          040E
Signing time:             Mon 17 Feb 2025 00:00:11 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:11 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:11 +0000
Files and hashes:         1: MT6-Q2p1YpuPPbdKmj-h1dMK038.crl (hash: 5UVEtqQni0ObMUrQ+NncuJLnSY4IWy3Hi8sXsEYYzOw=)
                          2: _LdyI__CtBUyN3KKHO7DmbRhOVc.roa (hash: BMSl9hLbGqGu2thmt7Hy6s7t4a2k9exnTVleWfEcqU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:8f:39:1f:12:60:b7:de:42:a2:42:66:89:bd:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313ebe436a75629b8f3db74a9a3fa1d5d30ad37f
        Validity
            Not Before: Feb 17 00:00:11 2025 GMT
            Not After : Feb 18 00:00:11 2025 GMT
        Subject: CN=e7c82439438490d1978679eebe187f6688c7f003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:cc:b8:7e:ac:76:c8:54:ae:f4:cf:17:0f:
                    55:75:70:3e:03:ac:37:75:37:37:fe:41:d5:f1:51:
                    8e:5f:cb:b9:2e:11:f0:1b:b9:87:49:84:6b:6f:1a:
                    64:83:58:8d:be:55:54:e2:11:96:3a:9f:15:a0:14:
                    6d:a0:fa:ae:58:1f:c2:0c:e6:ff:4d:bb:40:5e:e7:
                    b2:16:06:5f:09:4f:67:99:fb:62:c6:fe:9b:7c:7e:
                    61:58:fd:41:9d:94:e4:c0:31:43:83:c3:0b:0f:31:
                    7e:e7:cf:6c:f8:1e:25:a9:7c:d4:2e:19:53:b2:2d:
                    d1:9f:b9:6e:87:69:57:47:ac:36:53:00:19:f8:e5:
                    0d:9d:0b:be:71:e6:03:b1:40:ea:03:ce:d5:3b:03:
                    de:1b:ef:66:25:ce:5c:06:3b:89:f1:6a:f3:59:0b:
                    45:50:a7:3b:43:93:1a:f4:7c:a2:cf:47:a0:56:18:
                    14:f3:d9:2c:c9:85:67:e6:40:45:a8:85:77:95:bf:
                    ea:c0:1a:d0:07:a8:0e:e9:1e:e6:3a:cc:9b:76:34:
                    8b:d6:63:9c:90:56:a7:2f:8e:47:2f:9e:54:89:13:
                    16:b4:f0:50:7e:c3:cd:8f:78:47:06:25:0d:84:61:
                    5e:82:14:46:23:07:3d:62:66:27:52:bc:f8:30:47:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C8:24:39:43:84:90:D1:97:86:79:EE:BE:18:7F:66:88:C7:F0:03
            X509v3 Authority Key Identifier:
                keyid:31:3E:BE:43:6A:75:62:9B:8F:3D:B7:4A:9A:3F:A1:D5:D3:0A:D3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT6-Q2p1YpuPPbdKmj-h1dMK038.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/72cc2b-7c1f-4a36-a700-960c8f0a95b2/1/MT6-Q2p1YpuPPbdKmj-h1dMK038.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:14:fc:61:40:d8:3e:3d:15:25:50:fc:56:54:37:ad:1a:e9:
         03:39:86:4f:69:26:ea:55:ff:1d:a1:3d:1d:2e:0e:28:20:5f:
         d1:5e:dd:a4:ca:e9:74:81:e6:34:75:3e:90:85:34:ba:f1:9e:
         60:cf:00:2d:ed:c8:ff:b7:90:24:2e:c8:5c:35:97:1e:24:27:
         0f:b5:28:3a:86:f2:f6:28:7e:61:b9:b1:65:79:db:51:6f:2a:
         ed:d4:39:d3:1f:b1:14:8a:6a:fe:c2:41:d6:18:56:a6:77:17:
         fa:40:d5:15:52:c9:4e:d2:5e:6b:d2:72:37:5e:f8:bb:c2:eb:
         00:5d:88:ce:44:4b:b4:38:93:ba:8b:64:97:77:71:2f:be:7a:
         9d:a9:30:8b:dd:51:9e:21:0b:73:02:78:45:d7:4d:8d:8c:f2:
         f9:8f:a8:69:a9:54:46:5a:be:00:83:ba:50:57:23:09:4a:2b:
         e7:0d:96:ff:d7:a4:af:62:38:82:75:98:f5:56:3c:93:ce:40:
         e7:d9:02:0a:ba:54:ff:14:ca:18:8a:f7:cc:f3:54:48:d5:4e:
         dd:c0:fa:49:c6:ba:9f:9f:0d:50:9e:50:32:3b:21:5a:6d:b5:
         95:42:a9:6a:68:32:db:b5:48:1b:76:ed:47:9c:d6:93:be:11:
         90:eb:15:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:42 2025 by rpki-client