Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          gg8lvqWhUo1ZuxCOi8Lxcxi5RqvPNopnlqBOGV9SZ7A=
Subject key identifier:   14:29:05:09:DB:C5:26:8A:43:26:89:E2:B9:79:DE:A8:78:9A:9B:20
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       0197469E4C6E389517C27A685316C589AB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          0DFC
Signing time:             Fri 06 Jun 2025 19:01:08 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:08 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:08 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: 2s0FoPTPt4DlYwrBxCiyZsSNDo3wzBoK+gx3r/lMUh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:4c:6e:38:95:17:c2:7a:68:53:16:c5:89:ab:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Jun  6 19:01:08 2025 GMT
            Not After : Jun  7 19:01:08 2025 GMT
        Subject: CN=14290509dbc5268a432689e2b979dea8789a9b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:ed:b8:8a:27:be:cf:d7:9a:73:10:9c:f9:
                    09:c1:a6:f1:f4:fe:af:ed:70:5a:6d:f6:47:0d:97:
                    1a:44:73:cc:69:92:79:26:ad:ea:38:01:68:ee:3c:
                    02:54:2d:2d:fb:1d:25:0d:af:7d:b9:d8:9e:35:6d:
                    b9:0d:b0:b1:20:49:05:d9:20:fc:41:1c:d4:9e:6b:
                    98:cc:28:4b:cf:75:fa:e8:b2:d2:05:fd:64:c9:ad:
                    0d:5f:e0:37:3c:5c:09:73:8e:e2:c6:90:e2:42:8a:
                    64:a6:34:22:17:2a:3c:82:37:74:94:fb:8e:cf:aa:
                    5b:35:a0:42:d9:a7:e9:d8:d8:c6:f6:fc:a7:fa:b6:
                    5d:b8:92:7f:4d:c8:79:c7:b5:5a:d1:74:78:6b:a3:
                    40:cf:c0:b4:20:8e:99:cf:49:23:bb:2a:a1:df:f8:
                    de:6c:69:13:7d:de:ba:cd:c0:1c:7e:9a:e1:39:43:
                    1c:96:95:b5:b4:fc:25:7e:a0:37:56:9e:aa:c9:8a:
                    ce:10:a0:ef:fc:cc:b3:fe:cf:f8:8f:4a:c5:a6:28:
                    7c:1b:4f:e9:bb:60:63:e4:4f:28:ad:79:fa:b1:11:
                    5c:22:1e:be:88:5f:d2:a8:70:f1:f9:47:bd:68:53:
                    35:01:c6:55:a1:af:72:8f:3f:ab:81:e3:05:64:71:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:05:09:DB:C5:26:8A:43:26:89:E2:B9:79:DE:A8:78:9A:9B:20
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:06:d2:dc:3a:25:66:0f:bb:ea:e4:00:ac:a2:20:24:cd:45:
         56:8f:af:5f:a1:33:36:cc:c5:a1:e6:61:1f:f1:50:ae:ba:aa:
         0f:fc:e7:fa:60:64:5d:f0:11:70:1a:06:f7:50:93:1d:b3:2f:
         f2:43:56:14:93:11:1a:a3:b9:d3:9a:49:c1:aa:c3:9c:05:3b:
         f8:e1:a5:70:c9:7f:b3:6e:a5:88:7e:9e:75:77:b9:be:ad:8b:
         59:f4:82:ea:21:35:02:cc:e5:af:6f:b2:2d:74:c5:19:d5:ca:
         3e:5d:e2:17:c6:2f:36:19:1e:a0:23:ed:de:be:74:01:47:77:
         dc:e8:16:6a:73:1a:c0:2a:5d:ae:1c:d6:19:b6:5a:e3:6b:f9:
         d4:0f:05:6b:b4:0b:f2:20:8c:06:a2:b0:fe:5a:13:5d:46:6b:
         2a:f3:c7:2f:ef:d9:81:e3:2c:c4:dc:9f:9f:5c:79:0e:0b:6d:
         8b:98:66:0f:9d:c7:b3:aa:06:35:d1:9d:d5:40:2e:c1:c0:48:
         18:62:b1:00:ca:a9:a0:f3:3e:87:0d:b0:28:03:07:bc:23:23:
         96:6a:70:fc:ee:a5:4a:4b:39:23:3e:96:f4:1d:7b:b5:13:06:
         65:02:2c:4c:61:26:e7:a0:53:a9:27:35:9c:a3:1d:fc:54:7b:
         88:dd:59:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnkxuOJUXwnpoUxbFiasEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWJlYWE2NGYzNzAzM2M2ODA5MzU0MGI1Y2Q5Y2UzMzc0
NzI4NmYwHhcNMjUwNjA2MTkwMTA4WhcNMjUwNjA3MTkwMTA4WjAzMTEwLwYDVQQD
EygxNDI5MDUwOWRiYzUyNjhhNDMyNjg5ZTJiOTc5ZGVhODc4OWE5YjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3XtuIonvs/XmnMQnPkJwabx9P6v
7XBabfZHDZcaRHPMaZJ5Jq3qOAFo7jwCVC0t+x0lDa99udieNW25DbCxIEkF2SD8
QRzUnmuYzChLz3X66LLSBf1kya0NX+A3PFwJc47ixpDiQopkpjQiFyo8gjd0lPuO
z6pbNaBC2afp2NjG9vyn+rZduJJ/Tch5x7Va0XR4a6NAz8C0II6Zz0kjuyqh3/je
bGkTfd66zcAcfprhOUMclpW1tPwlfqA3Vp6qyYrOEKDv/Myz/s/4j0rFpih8G0/p
u2Bj5E8orXn6sRFcIh6+iF/SqHDx+Ue9aFM1AcZVoa9yjz+rgeMFZHFiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQpBQnbxSaKQyaJ4rl53qh4mpsgMB8GA1UdIwQY
MBaAFOob6qZPNwM8aAk1QLXNnOM3RyhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQt
YzVkZWY3YmM2YTEzLzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9hMDQxY2MtN2VmMC00MDI4LThjZDQtYzVkZWY3YmM2YTEz
LzEvNmh2cXBrODNBenhvQ1RWQXRjMmM0emRIS0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQbS3Dol
Zg+76uQArKIgJM1FVo+vX6EzNszFoeZhH/FQrrqqD/zn+mBkXfARcBoG91CTHbMv
8kNWFJMRGqO505pJwarDnAU7+OGlcMl/s26liH6edXe5vq2LWfSC6iE1Aszlr2+y
LXTFGdXKPl3iF8YvNhkeoCPt3r50AUd33OgWanMawCpdrhzWGbZa42v51A8Fa7QL
8iCMBqKw/loTXUZrKvPHL+/ZgeMsxNyfn1x5Dgtti5hmD53Hs6oGNdGd1UAuwcBI
GGKxAMqpoPM+hw2wKAMHvCMjlmpw/O6lSks5Iz6W9B17tRMGZQIsTGEm56BTqSc1
nKMd/FR7iN1ZWg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:31 2025 by rpki-client