Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
File:                     6hvqpk83AzxoCTVAtc2c4zdHKG8.mft (raw, json)
Hash identifier:          idfsvJjU9MchenfI1XMLaBoSneaI8zHRqoyxM76Yvhw=
Subject key identifier:   0D:A7:56:FE:50:61:03:CE:08:F9:10:39:CD:F2:A7:BA:90:60:7B:81
Authority key identifier: EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F
Certificate issuer:       /CN=ea1beaa64f37033c68093540b5cd9ce33747286f
Certificate serial:       01964D7E7A5DDE1B4ED5D4341E5D0E530D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
Manifest number:          0D7B
Signing time:             Sat 19 Apr 2025 10:00:56 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:56 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:56 +0000
Files and hashes:         1: 6hvqpk83AzxoCTVAtc2c4zdHKG8.crl (hash: a/NOep4Pv9rWSTWlZW1mL2tooyR7Fu0Szg7pDcz4RWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:7a:5d:de:1b:4e:d5:d4:34:1e:5d:0e:53:0d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1beaa64f37033c68093540b5cd9ce33747286f
        Validity
            Not Before: Apr 19 10:00:56 2025 GMT
            Not After : Apr 20 10:00:56 2025 GMT
        Subject: CN=0da756fe506103ce08f91039cdf2a7ba90607b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:89:9e:7e:58:e6:0c:b6:db:0c:75:8b:55:
                    5b:5c:38:15:b3:e0:fa:91:96:e1:e8:6b:ab:e4:bf:
                    49:1b:c4:16:ed:af:d5:ee:d2:1c:a6:a2:10:4e:8f:
                    67:a7:99:5f:9c:96:d4:9d:a8:7b:4e:99:19:49:24:
                    9d:11:6b:2e:8b:83:b8:a6:0f:d3:4d:b0:03:3a:19:
                    7e:64:8b:18:4b:c1:7a:79:5b:e5:44:e9:ad:43:46:
                    4c:e6:53:44:68:49:22:1f:91:2a:54:d5:52:0c:02:
                    c2:0d:08:08:21:75:14:4f:59:72:d6:b0:76:93:db:
                    55:69:1e:e2:9b:9e:1f:d1:30:f3:88:f5:cd:ca:82:
                    ba:46:67:50:82:2b:aa:13:ef:7a:e4:0e:4a:c0:16:
                    fd:35:3d:68:f6:d5:0d:f1:c6:de:b0:d2:61:2a:d3:
                    17:38:30:c0:b9:dd:12:c8:a8:ff:0e:38:0a:20:1a:
                    65:8a:7b:69:c6:c4:db:f5:95:ac:62:61:82:8e:0d:
                    b0:3d:96:de:d6:5b:65:7b:f2:1d:1f:95:cb:2c:0e:
                    50:c2:eb:5a:ab:24:7a:a6:f1:fd:1f:e8:2c:e8:2d:
                    23:af:30:4b:9c:70:02:dd:34:4b:60:9a:72:0a:c6:
                    39:fc:17:5b:83:80:ec:37:cb:99:13:88:c2:d2:15:
                    d9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A7:56:FE:50:61:03:CE:08:F9:10:39:CD:F2:A7:BA:90:60:7B:81
            X509v3 Authority Key Identifier:
                keyid:EA:1B:EA:A6:4F:37:03:3C:68:09:35:40:B5:CD:9C:E3:37:47:28:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hvqpk83AzxoCTVAtc2c4zdHKG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a041cc-7ef0-4028-8cd4-c5def7bc6a13/1/6hvqpk83AzxoCTVAtc2c4zdHKG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:0e:61:52:8e:d9:05:3d:5e:fb:ea:55:82:9c:93:7e:31:
         ea:7e:97:a9:38:a3:6a:c2:52:97:9d:b7:e1:3e:96:26:b1:b3:
         4e:28:e3:2e:a7:c7:32:bd:cf:58:d7:11:7a:b4:ab:7d:0f:0f:
         05:9e:82:a1:ba:84:fb:07:cf:42:9d:21:4f:4a:44:b1:c6:1f:
         67:7b:4d:9a:25:27:17:dd:78:85:79:7c:f4:42:6a:f9:ec:18:
         14:48:fe:d9:4f:17:ef:ac:f0:0d:fa:2a:0f:cf:2f:3f:a7:06:
         be:8d:ea:5f:60:49:65:7e:b5:e2:d8:64:ef:5c:c1:74:fc:ae:
         ce:c9:ae:c3:ca:b7:9f:21:53:a5:5b:06:cb:01:2e:f9:b5:86:
         17:59:4f:f5:0f:3b:d3:c9:d8:c5:e3:e7:e0:66:91:a3:76:db:
         76:be:26:a5:2e:99:04:ce:70:66:36:36:fe:85:51:8e:79:78:
         2d:8f:8c:1b:e5:20:ba:fa:30:7b:6e:b6:3f:8a:77:25:a5:b0:
         78:84:24:3d:57:2b:61:cd:35:18:55:42:3b:0d:af:c5:4f:99:
         93:eb:cd:9b:42:da:de:a9:4f:17:f3:b5:bd:1c:fe:d1:0d:71:
         ff:64:b7:83:86:e3:03:f9:3e:9d:14:9b:ee:e5:31:21:73:e3:
         ae:2e:9f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:03:05 2025 by rpki-client