Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
File:                     EKllDXIX3bmfO8AOvd1rsgKFEuc.mft (raw, json)
Hash identifier:          aQJGEyrYbiYuI1Uy0dlqp7c9nnT6IsUV2Kw6fMWuo0Y=
Subject key identifier:   B6:A9:DB:2C:59:2B:6A:BA:D3:9B:73:F4:D0:1C:74:BA:19:52:71:C6
Authority key identifier: 10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7
Certificate issuer:       /CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
Certificate serial:       0196602905E9D9B2BA3FE02229E02781F785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
Manifest number:          1506
Signing time:             Wed 23 Apr 2025 01:00:23 +0000
Manifest this update:     Wed 23 Apr 2025 01:00:23 +0000
Manifest next update:     Thu 24 Apr 2025 01:00:23 +0000
Files and hashes:         1: EKllDXIX3bmfO8AOvd1rsgKFEuc.crl (hash: WrLvmopenWRIIFcCJpkl9oqVq3wfLnASCvMOnUaaGGM=)
                          2: hUJ0JgMLTl6DaNpa_6-3XqSGCm4.roa (hash: 5zuqR91vkYspzPXhPdWjldTSLonIqkx5t3d++X9qoRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:60:29:05:e9:d9:b2:ba:3f:e0:22:29:e0:27:81:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a9650d7217ddb99f3bc00ebddd6bb2028512e7
        Validity
            Not Before: Apr 23 01:00:23 2025 GMT
            Not After : Apr 24 01:00:23 2025 GMT
        Subject: CN=b6a9db2c592b6abad39b73f4d01c74ba195271c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c4:b1:ff:09:1e:1a:49:7c:67:a4:b4:60:2f:
                    36:de:f1:f7:69:3e:03:b9:54:fa:11:17:cc:03:7a:
                    93:86:c5:36:01:5d:9e:87:b2:9d:8e:30:e3:5e:42:
                    44:82:30:58:12:3e:1a:db:b3:d2:d1:97:fe:6a:f6:
                    b5:ba:50:e5:b4:37:36:51:7e:64:9e:c3:8b:d8:0d:
                    95:55:2c:5c:57:18:d4:d8:b7:d9:f1:47:fe:4f:50:
                    1c:a6:65:38:4d:4c:29:a5:45:16:01:63:d9:fb:fb:
                    6d:6c:14:3a:98:ab:07:59:9c:b3:ab:0b:f1:fb:e2:
                    cc:64:39:6d:1a:04:62:9a:f9:45:39:d2:a5:74:72:
                    e5:8c:32:fe:1e:9f:a6:a6:b1:af:2f:3a:39:47:54:
                    da:24:e0:35:bd:90:f9:5c:92:2e:2c:a3:7a:77:bc:
                    62:e1:c8:46:7c:e8:70:40:99:8f:54:31:9f:62:24:
                    20:67:85:ad:64:9f:27:f1:ed:b5:fc:ee:9c:0a:58:
                    29:c3:d3:a9:1a:10:67:70:cb:4f:85:74:25:49:69:
                    32:6d:92:b8:d7:cc:89:c4:75:6c:10:56:6f:d0:6d:
                    df:0b:8c:1f:26:6a:5c:ec:2b:86:68:62:a6:8a:cb:
                    07:11:fe:71:70:34:7b:48:2f:d2:81:d6:01:08:ae:
                    3c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A9:DB:2C:59:2B:6A:BA:D3:9B:73:F4:D0:1C:74:BA:19:52:71:C6
            X509v3 Authority Key Identifier:
                keyid:10:A9:65:0D:72:17:DD:B9:9F:3B:C0:0E:BD:DD:6B:B2:02:85:12:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKllDXIX3bmfO8AOvd1rsgKFEuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/231a4a-83de-42fd-9691-8062f241dd96/1/EKllDXIX3bmfO8AOvd1rsgKFEuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:e9:db:13:1f:42:b8:46:1f:09:77:5d:3d:59:e7:e4:45:0e:
         97:32:fb:c8:27:54:1f:b3:0b:52:fb:5b:3c:d9:3c:a7:85:d4:
         dd:00:21:73:8f:72:79:42:9d:15:49:8f:3b:53:d4:26:c2:8a:
         c9:fb:80:14:7c:8b:d5:b3:bc:52:28:b1:2c:7b:61:46:10:35:
         a9:36:6d:9f:0a:e9:1d:b6:56:e0:f9:54:83:56:6e:3d:7b:08:
         b2:53:5b:80:2f:60:27:ba:8d:99:82:72:85:c0:9e:85:63:63:
         06:51:01:48:78:42:51:41:05:fd:94:7f:95:ea:38:3b:bf:32:
         ee:7a:2f:56:22:63:1d:0c:96:bf:29:4d:db:20:86:3f:17:a5:
         8f:a8:e1:ac:e4:e3:9a:de:4e:ca:20:6a:e1:72:69:be:09:d0:
         07:ff:c5:f4:0a:57:a6:80:92:9a:86:41:ff:fc:db:e4:66:3b:
         c0:ec:c3:f4:a0:93:55:a7:8c:8e:73:aa:0c:2b:69:80:8c:af:
         62:ab:99:fb:14:43:00:84:f4:f2:00:02:7f:eb:a8:67:30:76:
         de:13:15:de:97:06:f8:4d:93:87:5b:74:17:d2:f9:2b:81:8b:
         dd:9e:fb:55:23:4c:db:fd:1c:f8:c7:f8:9d:35:62:1d:cd:3f:
         66:28:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:51:26 2025 by rpki-client