Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
File:                     ckC6dE4J4dNstwRstYmVweNRMiA.mft (raw, json)
Hash identifier:          542nYV9W+qkBalj2xVYsJDEzXsYdSEGxMnMqeLGtrHM=
Subject key identifier:   75:60:49:8E:6A:AF:F9:CA:39:1A:83:C5:75:12:AE:A1:13:1F:F4:CF
Authority key identifier: 72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20
Certificate issuer:       /CN=7240ba744e09e1d36cb7046cb58995c1e3513220
Certificate serial:       01963C53BFC0CE417D42A9FD737D3FCE134D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
Manifest number:          0755
Signing time:             Wed 16 Apr 2025 02:00:43 +0000
Manifest this update:     Wed 16 Apr 2025 02:00:43 +0000
Manifest next update:     Thu 17 Apr 2025 02:00:43 +0000
Files and hashes:         1: XeS-j2IYyupPYwAd3k1rQhL0Pjk.roa (hash: LaZnavonJdxkwg+OL44y91TnIY6G41jXIPEjOAmHc4s=)
                          2: ckC6dE4J4dNstwRstYmVweNRMiA.crl (hash: Aq3EQOpvID0pCPebr0+oHtr6pRQWkXmjk/xykrUe6BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:53:bf:c0:ce:41:7d:42:a9:fd:73:7d:3f:ce:13:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7240ba744e09e1d36cb7046cb58995c1e3513220
        Validity
            Not Before: Apr 16 02:00:43 2025 GMT
            Not After : Apr 17 02:00:43 2025 GMT
        Subject: CN=7560498e6aaff9ca391a83c57512aea1131ff4cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:28:8f:fb:c7:e4:e1:d6:f7:15:16:31:69:
                    60:0b:ec:39:de:96:df:be:17:de:3f:54:10:9f:db:
                    c8:77:e5:80:65:4d:4d:36:3d:01:03:00:92:26:33:
                    28:fd:65:ea:7a:bc:f2:75:ed:f3:ec:5f:91:37:58:
                    e0:f4:0f:49:81:58:f5:82:e9:d7:a6:3b:c2:cb:89:
                    f3:d3:44:ec:db:74:3f:44:e1:96:d1:ec:24:79:00:
                    36:0a:ca:5a:6c:63:89:36:9e:d5:46:1b:b7:03:10:
                    73:63:21:2a:cc:17:86:32:b8:14:d0:bd:8d:90:ee:
                    ad:96:e2:f7:c4:b1:94:24:b6:a1:7d:a5:63:9a:73:
                    63:ad:43:fd:fa:da:e3:c4:6e:e7:ca:f9:a4:29:4c:
                    6e:2e:c2:24:07:af:ca:2e:a8:38:7d:4c:a4:6c:e3:
                    2c:cf:f3:c4:fc:ba:67:8d:6a:cf:95:0c:35:42:e0:
                    b4:e6:07:d2:c0:98:fe:99:dc:41:8f:24:fd:d8:1c:
                    2b:76:a4:d4:d8:df:c9:c8:64:75:52:db:11:f3:bb:
                    56:59:de:4b:d4:d2:02:b8:c3:a9:60:6d:8c:09:c3:
                    27:a4:5a:b8:b9:5e:25:43:5f:47:0c:a6:0e:54:2b:
                    b2:df:5c:f3:ab:26:61:98:ef:29:68:2f:e7:b6:8c:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:60:49:8E:6A:AF:F9:CA:39:1A:83:C5:75:12:AE:A1:13:1F:F4:CF
            X509v3 Authority Key Identifier:
                keyid:72:40:BA:74:4E:09:E1:D3:6C:B7:04:6C:B5:89:95:C1:E3:51:32:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckC6dE4J4dNstwRstYmVweNRMiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/614d77-d34c-4fba-94e3-2b5ec652af6d/1/ckC6dE4J4dNstwRstYmVweNRMiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:2c:75:2d:db:30:ba:db:e7:dd:4f:84:18:15:2f:08:03:ca:
         f8:8f:bc:10:6b:5b:01:b9:31:4a:c0:a4:38:83:86:49:a7:74:
         5b:bc:49:3b:8b:04:28:51:69:32:49:a3:95:41:0f:f4:dd:ae:
         5f:8f:4c:bf:e1:ef:e5:aa:0a:5f:24:cf:c6:a8:77:68:1b:7f:
         38:f2:4d:82:98:c3:38:69:08:26:00:ca:05:62:e3:d0:3b:f7:
         7c:8a:0e:66:7c:b6:3f:93:84:3d:b7:bd:82:76:15:fb:8c:8d:
         85:91:ed:84:dd:93:e4:3e:70:fc:17:51:e4:c1:8d:a9:44:7c:
         ad:1e:e6:9f:2c:13:6b:9c:21:77:aa:fd:d7:c6:42:21:a4:e4:
         6e:ce:89:fe:05:34:8a:51:dd:00:ee:88:e8:e0:5f:a0:dd:53:
         b2:82:88:89:b0:68:de:ea:47:aa:1d:8f:f2:2b:b2:b1:24:b3:
         4c:8c:89:c9:bc:d7:89:59:15:31:02:e0:41:af:72:7e:24:a8:
         19:6a:cd:43:81:05:a2:c5:85:4b:0d:31:bf:62:40:db:ca:7c:
         51:03:27:85:4f:15:e0:48:c1:3a:c3:91:77:2f:0f:b4:5d:61:
         53:ca:21:6a:0f:f8:d8:05:76:1d:4a:b1:da:d1:2c:05:df:3b:
         65:02:3a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:40:59 2025 by rpki-client