Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
File:                     6R-du-aLhAJ87U0x6IA_E-nWXRM.mft (raw, json)
Hash identifier:          F9PbCqJT98sjSKMP/Q219zzV9fD7nHwLKKuGlNBVQh0=
Subject key identifier:   4E:BC:FA:79:C0:7E:D0:2F:19:0D:65:AD:97:37:80:2B:50:20:57:09
Authority key identifier: E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13
Certificate issuer:       /CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
Certificate serial:       019745C28CC7BD63688696CCE2F2A7E09BB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
Manifest number:          128A
Signing time:             Fri 06 Jun 2025 15:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 15:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 15:01:07 +0000
Files and hashes:         1: 6R-du-aLhAJ87U0x6IA_E-nWXRM.crl (hash: q6dRonUZN+r+MssgE5QdPGfOjItQFlilRUyGPJ4/CYM=)
                          2: JQUZ8AmIUaKrA3xLbBffsdyduoM.roa (hash: JNfVnNEK9ITAEhIOPMGzXPcwJP4nPhm5O7ysI5end8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:8c:c7:bd:63:68:86:96:cc:e2:f2:a7:e0:9b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e91f9dbbe68b84027ced4d31e8803f13e9d65d13
        Validity
            Not Before: Jun  6 15:01:07 2025 GMT
            Not After : Jun  7 15:01:07 2025 GMT
        Subject: CN=4ebcfa79c07ed02f190d65ad9737802b50205709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:df:b3:34:e2:e0:bb:bd:17:bb:9f:04:0b:
                    b5:64:fa:68:d0:ba:ea:70:91:fb:4c:86:37:ee:67:
                    ae:bc:4f:21:27:38:b4:23:ae:cd:8d:30:44:6c:30:
                    f2:b5:35:bd:38:05:b0:77:fd:5b:48:b5:e5:43:88:
                    2a:61:27:97:44:e5:6a:73:30:64:1a:c1:1c:e6:0c:
                    d8:6c:d5:ee:75:6b:92:46:cb:cf:94:4a:4c:4f:f9:
                    42:2b:87:26:11:56:c9:ae:48:fb:19:4c:2f:11:2b:
                    d6:5a:ea:bd:1d:38:55:0e:a6:ea:35:81:a1:d9:24:
                    e7:ce:46:79:18:77:d4:dc:ab:af:8a:3b:cd:3e:b7:
                    a5:5c:a8:92:49:e4:2b:bd:21:7c:0f:41:b8:6b:18:
                    c6:a8:ac:aa:29:3b:76:3d:f8:ba:db:a9:40:bd:ba:
                    d5:f5:af:ef:77:d2:43:5b:dd:e2:b9:d4:dc:e0:1e:
                    5a:20:96:d6:a5:19:5f:b3:db:64:ae:cb:80:1f:e7:
                    fd:c5:4b:6f:d6:03:3a:33:c0:2a:36:60:ba:a6:7d:
                    d0:44:c7:77:fc:3c:4d:33:ab:7f:11:8f:d0:ba:cc:
                    46:e6:40:2d:84:98:f8:54:28:bc:a8:bc:14:4f:47:
                    b4:76:a0:63:06:dc:fc:96:e4:f0:89:b9:90:c2:f0:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BC:FA:79:C0:7E:D0:2F:19:0D:65:AD:97:37:80:2B:50:20:57:09
            X509v3 Authority Key Identifier:
                keyid:E9:1F:9D:BB:E6:8B:84:02:7C:ED:4D:31:E8:80:3F:13:E9:D6:5D:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R-du-aLhAJ87U0x6IA_E-nWXRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0afac0-27b9-4637-9cde-b4e79f781e4d/1/6R-du-aLhAJ87U0x6IA_E-nWXRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:39:ba:5a:31:ab:f9:fe:0f:8d:a5:1e:ec:66:b9:a4:9e:
         bd:7e:2c:53:8b:df:84:15:48:ed:1f:a8:d6:53:1d:f9:0f:39:
         89:02:a6:32:8f:4a:22:83:6b:5c:3d:8b:ca:a0:4f:af:7c:f3:
         3b:d1:fb:98:af:31:0e:99:ba:bf:4d:51:29:b3:36:69:4c:a4:
         08:e7:ad:0b:cb:60:e9:a2:8a:30:37:06:9e:72:03:39:ec:bc:
         fd:21:bf:08:6b:79:08:65:96:5e:85:a7:9a:58:ba:2a:3e:44:
         ef:88:25:e6:b5:86:f4:a3:3d:3d:87:e7:e4:fe:3e:3c:91:9c:
         df:ad:89:7b:43:a4:e0:9f:6d:30:18:8d:7f:72:69:6f:09:e7:
         30:72:63:c6:07:2e:59:37:29:df:d5:10:44:07:ea:f9:38:d7:
         a6:df:10:99:26:fd:0c:7d:3c:15:27:90:91:eb:5f:a0:cb:88:
         48:6f:d6:2d:72:fe:9f:95:15:61:c8:2d:64:91:25:97:3f:5d:
         ae:f3:10:74:90:6a:58:5c:d3:42:27:27:c3:37:cf:d8:28:00:
         52:ec:e7:37:bd:16:bf:74:8f:3b:1e:a2:c3:15:6f:df:dc:fd:
         a5:02:26:08:e4:f8:f0:8b:71:b4:c5:04:19:17:02:e2:4f:df:
         90:5c:1e:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwozHvWNohpbM4vKn4JuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWY5ZGJiZTY4Yjg0MDI3Y2VkNGQzMWU4ODAzZjEzZTlk
NjVkMTMwHhcNMjUwNjA2MTUwMTA3WhcNMjUwNjA3MTUwMTA3WjAzMTEwLwYDVQQD
Eyg0ZWJjZmE3OWMwN2VkMDJmMTkwZDY1YWQ5NzM3ODAyYjUwMjA1NzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplDfszTi4Lu9F7ufBAu1ZPpo0Lrq
cJH7TIY37meuvE8hJzi0I67NjTBEbDDytTW9OAWwd/1bSLXlQ4gqYSeXROVqczBk
GsEc5gzYbNXudWuSRsvPlEpMT/lCK4cmEVbJrkj7GUwvESvWWuq9HThVDqbqNYGh
2STnzkZ5GHfU3KuvijvNPrelXKiSSeQrvSF8D0G4axjGqKyqKTt2Pfi626lAvbrV
9a/vd9JDW93iudTc4B5aIJbWpRlfs9tkrsuAH+f9xUtv1gM6M8AqNmC6pn3QRMd3
/DxNM6t/EY/QusxG5kAthJj4VCi8qLwUT0e0dqBjBtz8luTwibmQwvD/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE68+nnAftAvGQ1lrZc3gCtQIFcJMB8GA1UdIwQY
MBaAFOkfnbvmi4QCfO1NMeiAPxPp1l0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUt
YjRlNzlmNzgxZTRkLzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wYWZhYzAtMjdiOS00NjM3LTljZGUtYjRlNzlmNzgxZTRk
LzEvNlItZHUtYUxoQUo4N1UweDZJQV9FLW5XWFJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtQ5ulox
q/n+D42lHuxmuaSevX4sU4vfhBVI7R+o1lMd+Q85iQKmMo9KIoNrXD2LyqBPr3zz
O9H7mK8xDpm6v01RKbM2aUykCOetC8tg6aKKMDcGnnIDOey8/SG/CGt5CGWWXoWn
mli6Kj5E74gl5rWG9KM9PYfn5P4+PJGc362Je0Ok4J9tMBiNf3JpbwnnMHJjxgcu
WTcp39UQRAfq+TjXpt8QmSb9DH08FSeQketfoMuISG/WLXL+n5UVYcgtZJEllz9d
rvMQdJBqWFzTQicnwzfP2CgAUuznN70Wv3SPOx6iwxVv39z9pQImCOT48ItxtMUE
GRcC4k/fkFwePg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:17:42 2025 by rpki-client