Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
File:                     C6ZznUryCYWXGQqgkoMN6pwXpwA.mft (raw, json)
Hash identifier:          iNHExLRm6/q7kvB/a59Oieht9/OVd50xXt7srsG5xTA=
Subject key identifier:   E4:33:FF:4B:16:40:B2:28:E4:95:CD:84:81:27:E5:33:2B:59:3C:13
Authority key identifier: 0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00
Certificate issuer:       /CN=0ba6739d4af2098597190aa092830dea9c17a700
Certificate serial:       01963B77DDA9B26319CD673F56FC19F3F70C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
Manifest number:          0B03
Signing time:             Tue 15 Apr 2025 22:00:33 +0000
Manifest this update:     Tue 15 Apr 2025 22:00:33 +0000
Manifest next update:     Wed 16 Apr 2025 22:00:33 +0000
Files and hashes:         1: C6ZznUryCYWXGQqgkoMN6pwXpwA.crl (hash: 96ZtszjeQiptKgKf3H/0x+U550hHp8huAPH7805PDbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 22:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:77:dd:a9:b2:63:19:cd:67:3f:56:fc:19:f3:f7:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba6739d4af2098597190aa092830dea9c17a700
        Validity
            Not Before: Apr 15 22:00:33 2025 GMT
            Not After : Apr 16 22:00:33 2025 GMT
        Subject: CN=e433ff4b1640b228e495cd848127e5332b593c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:eb:b3:1d:e2:a1:49:83:45:31:fa:16:85:
                    53:17:78:bf:5c:e3:32:a4:83:a5:e9:c6:60:9f:9b:
                    73:4e:1c:8e:ac:cd:95:82:8d:b4:f0:f9:c0:27:2f:
                    5f:3a:4f:44:9b:28:64:af:36:f3:57:1f:dc:6b:62:
                    e0:4f:f2:de:60:75:04:5f:83:71:a8:53:f0:61:b3:
                    a4:50:51:fc:ae:e1:66:5b:85:fa:5c:e3:32:a3:ea:
                    a9:3f:17:03:57:7f:db:0d:44:d6:40:ad:9d:99:98:
                    7c:f6:81:a5:e5:d4:76:e8:81:d4:87:bd:8a:3f:1a:
                    c8:6b:5a:1d:92:40:47:a8:8a:a4:fc:c2:ab:03:ef:
                    51:9b:c8:03:e6:9b:67:57:b9:d3:a1:72:2e:0f:3a:
                    f7:6d:c8:84:2d:5e:84:5c:07:58:ae:e9:eb:98:76:
                    ba:ac:48:4e:be:5d:36:48:59:c5:3e:38:25:4b:3d:
                    f9:bb:58:fe:74:f9:5d:1a:f7:b3:7c:21:28:48:8e:
                    b8:39:22:34:b8:fe:24:de:df:58:bb:81:fa:c6:76:
                    a6:02:13:0b:b5:90:d8:96:27:e0:54:18:63:75:de:
                    ba:8c:1a:b1:5f:98:ca:3c:01:30:b7:4f:15:e9:bc:
                    13:99:d2:f2:40:cf:eb:52:63:2a:02:b5:c9:4a:35:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:FF:4B:16:40:B2:28:E4:95:CD:84:81:27:E5:33:2B:59:3C:13
            X509v3 Authority Key Identifier:
                keyid:0B:A6:73:9D:4A:F2:09:85:97:19:0A:A0:92:83:0D:EA:9C:17:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6ZznUryCYWXGQqgkoMN6pwXpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2ec5b2-46f6-411b-b90f-a43aec6232aa/1/C6ZznUryCYWXGQqgkoMN6pwXpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:54:5c:e2:fb:e9:61:d5:41:8b:92:31:35:74:14:9d:69:1d:
         11:dd:a7:e7:15:4a:f0:66:f5:5a:ee:10:6b:c7:c2:68:40:5c:
         ff:49:b3:d9:82:dc:99:d3:0c:c9:8f:9f:ce:58:3b:da:f1:52:
         54:9c:20:9f:3e:28:45:ee:0c:5d:bd:a5:96:02:e8:73:78:d2:
         cb:2b:71:46:44:fe:7e:fb:0e:85:09:d0:72:ff:ed:fb:09:ba:
         9d:5c:1c:fa:17:9b:0a:53:4d:b7:e3:d1:74:43:9c:e7:76:4a:
         bf:4b:3c:49:db:33:f4:50:75:be:e3:76:de:cc:1c:b8:bf:1e:
         a9:53:47:da:e0:9f:a9:6c:7d:b7:93:f1:28:f5:ea:8b:b3:6a:
         0a:0c:3e:2d:2f:77:f2:5b:90:28:b3:03:d9:a6:7f:61:4d:15:
         a4:fe:55:e1:d5:db:ab:d0:56:89:2c:42:31:37:2f:ad:f4:ef:
         b6:6c:af:cd:86:63:f6:a5:28:14:9d:44:c9:ad:0f:88:df:4d:
         88:f1:0a:b3:3c:80:7a:fc:14:d1:17:1c:06:cb:d2:f5:75:15:
         53:b2:9f:96:c4:89:19:5f:77:ad:fe:c7:ad:b2:e0:d4:de:1d:
         a1:19:c7:38:4d:64:4d:50:0f:49:1b:cd:8a:6a:fd:48:af:c3:
         19:71:36:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:58:58 2025 by rpki-client