Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
File:                     6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft (raw, json)
Hash identifier:          N/Yr8PpsgEQSq/HItJUs0Y1eWH660XcnVde8cdrdCGs=
Subject key identifier:   45:6E:7A:F0:6B:13:90:FB:1B:26:9F:6E:E0:77:09:6E:B7:E3:26:C5
Authority key identifier: E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00
Certificate issuer:       /CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
Certificate serial:       019644E8C1F3378F525B4FEBF34380BA84D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
Manifest number:          0549
Signing time:             Thu 17 Apr 2025 18:00:26 +0000
Manifest this update:     Thu 17 Apr 2025 18:00:26 +0000
Manifest next update:     Fri 18 Apr 2025 18:00:26 +0000
Files and hashes:         1: 4pppDVsEzxWcpvOQRzSfsEfJ_j4.roa (hash: QqOmQPrrioYAbFdEx9jvAv4IzYIgXNG6tw4Mnvbd0vE=)
                          2: 6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl (hash: 466RBCSVYK+9Nk9YUNF6iJ8TGC6b4H6qAA7aTLJEa4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:e8:c1:f3:37:8f:52:5b:4f:eb:f3:43:80:ba:84:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8cbbff218a437df8f80a98cd2faeb9c2418fd00
        Validity
            Not Before: Apr 17 18:00:26 2025 GMT
            Not After : Apr 18 18:00:26 2025 GMT
        Subject: CN=456e7af06b1390fb1b269f6ee077096eb7e326c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:6d:05:05:46:9a:d6:15:d1:27:0b:c7:2a:
                    a6:62:aa:78:f0:a5:46:b4:78:fa:26:73:f6:17:1e:
                    d2:c2:4e:da:ea:68:ef:af:1f:50:e7:db:21:85:e0:
                    c2:a8:e0:d5:a4:6f:00:aa:01:3b:34:f8:c4:dc:ab:
                    d6:cf:76:f1:70:fb:33:1f:ef:f8:dc:cd:a2:bb:74:
                    54:1b:03:d1:57:c1:8b:00:2e:79:ee:94:f7:ca:c4:
                    5c:bf:c1:55:4f:d0:79:06:83:72:29:5e:59:b6:79:
                    37:80:55:fd:7c:1a:a3:3c:5f:6d:5b:f7:b2:02:7b:
                    fd:50:9c:22:36:7d:58:e0:6e:29:73:ec:f6:ae:34:
                    e5:71:ae:6c:35:5d:c7:86:4e:7c:b1:e1:dd:d7:f0:
                    4f:3c:e6:2a:dc:62:d6:f8:4b:76:22:a7:4a:52:6c:
                    78:42:be:3c:25:12:ac:1f:4b:b7:82:40:43:90:15:
                    4e:d0:0a:33:b9:ce:70:83:b4:74:ee:8f:3d:d5:20:
                    40:21:26:31:9b:4b:6f:7c:a6:85:4f:08:44:57:e8:
                    1a:22:89:ab:e2:c7:ee:ca:7a:c6:f2:cc:4f:66:cc:
                    1b:e6:9a:d9:90:4c:85:1b:c2:4d:b4:ad:60:24:36:
                    74:18:79:71:9f:ce:e4:ce:37:fe:7d:44:85:7e:5f:
                    6a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6E:7A:F0:6B:13:90:FB:1B:26:9F:6E:E0:77:09:6E:B7:E3:26:C5
            X509v3 Authority Key Identifier:
                keyid:E8:CB:BF:F2:18:A4:37:DF:8F:80:A9:8C:D2:FA:EB:9C:24:18:FD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Mu_8hikN9-PgKmM0vrrnCQY_QA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1fd6bc-57e2-4f50-98b7-cc7635de6e7a/1/6Mu_8hikN9-PgKmM0vrrnCQY_QA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:1c:04:f6:d8:8d:59:4f:0b:ab:e7:46:5c:85:74:d2:0f:
         22:bf:75:8e:be:c2:c8:ad:b7:db:4f:d1:59:f1:fe:79:75:93:
         95:87:4d:4e:9a:99:17:df:67:a9:92:a1:9d:73:59:8d:89:88:
         9a:14:06:7f:2b:56:35:46:4f:b1:76:53:b7:3b:f3:f5:37:c7:
         c2:54:09:b5:44:ca:34:39:7f:68:15:9d:99:32:f9:3b:ee:08:
         cb:84:95:df:b1:21:af:25:c9:e4:fc:75:3a:75:b6:7f:56:0f:
         88:15:db:42:79:45:64:37:c8:33:5b:1a:c4:12:8d:25:e5:17:
         4f:fd:59:61:b0:7c:00:59:fc:0c:47:f1:e4:da:2f:4d:ea:25:
         af:f0:1d:22:07:94:8d:cb:5d:43:89:e7:f8:ea:2d:be:57:9c:
         ca:49:67:2c:4c:86:8c:5e:4a:e3:0c:1d:dd:29:99:5e:5b:aa:
         30:6d:78:e5:fe:85:58:e4:e5:df:54:b5:85:66:40:83:e5:39:
         36:db:35:c8:d1:99:24:a9:c0:a6:7e:c7:66:15:fe:db:ea:d5:
         80:ec:4e:c4:f1:d3:14:53:a1:5c:de:b3:da:c6:19:92:ad:8e:
         57:6f:92:7a:77:1f:ba:8c:21:cf:ee:97:bd:2d:6f:b6:58:c9:
         40:35:d4:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZE6MHzN49SW0/r80OAuoTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4Y2JiZmYyMThhNDM3ZGY4ZjgwYTk4Y2QyZmFlYjljMjQx
OGZkMDAwHhcNMjUwNDE3MTgwMDI2WhcNMjUwNDE4MTgwMDI2WjAzMTEwLwYDVQQD
Eyg0NTZlN2FmMDZiMTM5MGZiMWIyNjlmNmVlMDc3MDk2ZWI3ZTMyNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tVtBQVGmtYV0ScLxyqmYqp48KVG
tHj6JnP2Fx7Swk7a6mjvrx9Q59shheDCqODVpG8AqgE7NPjE3KvWz3bxcPszH+/4
3M2iu3RUGwPRV8GLAC557pT3ysRcv8FVT9B5BoNyKV5Ztnk3gFX9fBqjPF9tW/ey
Anv9UJwiNn1Y4G4pc+z2rjTlca5sNV3Hhk58seHd1/BPPOYq3GLW+Et2IqdKUmx4
Qr48JRKsH0u3gkBDkBVO0Aozuc5wg7R07o891SBAISYxm0tvfKaFTwhEV+gaIomr
4sfuynrG8sxPZswb5prZkEyFG8JNtK1gJDZ0GHlxn87kzjf+fUSFfl9qWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVuevBrE5D7GyafbuB3CW634ybFMB8GA1UdIwQY
MBaAFOjLv/IYpDffj4CpjNL665wkGP0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4Yjct
Y2M3NjM1ZGU2ZTdhLzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8xZmQ2YmMtNTdlMi00ZjUwLTk4YjctY2M3NjM1ZGU2ZTdh
LzEvNk11XzhoaWtOOS1QZ0ttTTB2cnJuQ1FZX1FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKkAcBPbY
jVlPC6vnRlyFdNIPIr91jr7CyK2320/RWfH+eXWTlYdNTpqZF99nqZKhnXNZjYmI
mhQGfytWNUZPsXZTtzvz9TfHwlQJtUTKNDl/aBWdmTL5O+4Iy4SV37EhryXJ5Px1
OnW2f1YPiBXbQnlFZDfIM1saxBKNJeUXT/1ZYbB8AFn8DEfx5NovTeolr/AdIgeU
jctdQ4nn+OotvlecyklnLEyGjF5K4wwd3SmZXluqMG145f6FWOTl31S1hWZAg+U5
Nts1yNGZJKnApn7HZhX+2+rVgOxOxPHTFFOhXN6z2sYZkq2OV2+Sencfuowhz+6X
vS1vtljJQDXUug==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:18:07 2025 by rpki-client