Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          w0M33ruEluOsAcnWQ1Ga18O6NFnbAeZGywwaU9pSnaY=
Subject key identifier:   DB:4C:FE:49:3F:80:54:D3:29:8F:C8:71:B9:FF:D5:57:66:5A:55:F7
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       01963FC26AC60E68BC41D520585CFEF79829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          0473
Signing time:             Wed 16 Apr 2025 18:00:28 +0000
Manifest this update:     Wed 16 Apr 2025 18:00:28 +0000
Manifest next update:     Thu 17 Apr 2025 18:00:28 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: gU91JgP/ldumO2c0riBD8mfz0lto8AF6zzhf77kxmFc=)
                          2: jmdaY3jB9wAV5m6viUDXvKemdCo.roa (hash: KjRHU7c80LizE/Q/1z0ur21E4KmnhATUY3o4TcjtpmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:c2:6a:c6:0e:68:bc:41:d5:20:58:5c:fe:f7:98:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: Apr 16 18:00:28 2025 GMT
            Not After : Apr 17 18:00:28 2025 GMT
        Subject: CN=db4cfe493f8054d3298fc871b9ffd557665a55f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:bd:3d:2d:25:f2:95:65:05:0b:1e:7b:36:
                    33:df:93:aa:1a:52:26:2b:98:c3:cd:2f:2a:4c:12:
                    c3:c4:25:55:f5:d1:28:43:8c:9d:4b:5b:c6:bf:46:
                    70:0b:12:77:75:23:a0:1b:be:36:e2:00:1a:d6:5d:
                    9c:52:ae:f3:da:5b:8f:72:60:c7:dc:43:9c:61:60:
                    6e:ac:50:e3:6d:f4:ab:53:6d:b0:51:19:0a:a8:e2:
                    65:cf:2a:f7:45:ec:40:15:2b:f6:a0:fd:20:95:83:
                    fb:0f:64:e7:c4:d2:45:58:e4:19:53:29:54:f1:2e:
                    6d:ed:58:d5:4b:bf:82:45:d3:56:8e:39:03:26:62:
                    44:7b:6c:ac:1c:7a:ef:88:2f:05:0f:62:ff:48:91:
                    e0:60:bc:36:ee:5c:1b:aa:36:e3:f1:0a:72:fe:54:
                    7f:52:4b:4a:14:76:ab:3f:51:bc:4a:a2:9a:ce:83:
                    7c:db:f3:ad:38:82:35:8f:55:ee:db:25:83:e2:cb:
                    8f:0e:db:f6:4c:3f:ba:99:be:26:7e:33:04:4a:9a:
                    23:51:bd:db:e8:6b:f0:ca:56:77:8c:ba:ff:01:c3:
                    01:dc:c6:cf:e7:19:d0:98:38:7b:86:bf:01:ea:7f:
                    de:32:ec:ab:9a:72:c8:ff:e9:02:df:39:08:f2:f0:
                    38:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4C:FE:49:3F:80:54:D3:29:8F:C8:71:B9:FF:D5:57:66:5A:55:F7
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:38:5c:37:3a:03:91:c9:41:38:bc:ad:ea:ad:97:f8:9e:e0:
         ee:62:c9:72:ac:9f:b4:1c:d3:67:db:78:18:02:34:df:56:8b:
         ad:d5:48:f2:f2:88:f3:1c:ca:d4:33:8c:6a:92:60:c2:ee:01:
         5a:eb:12:56:78:15:21:40:98:e2:c4:09:29:17:45:7d:25:30:
         6a:be:61:21:c4:77:d5:3b:a4:7c:12:00:79:5e:1d:9c:cb:88:
         ff:4c:0b:af:95:af:67:e3:5f:62:7c:23:5e:a1:e2:d7:80:95:
         4a:50:b5:07:ae:d0:cf:b5:17:36:68:d3:96:8f:25:a3:2f:b2:
         91:95:7a:09:6b:53:dc:f1:2e:5b:6a:fe:e2:f5:24:77:69:47:
         fd:c8:59:71:5f:b5:c1:3c:d6:01:de:7a:61:b4:16:43:46:83:
         92:17:75:bf:57:68:d8:a7:59:51:1a:7b:3b:26:64:95:b0:4f:
         66:a6:f1:59:fc:ab:a4:33:b1:1e:8f:b6:e0:00:70:47:2b:99:
         78:93:b8:f8:f1:3c:53:b5:fb:2a:0e:ed:26:73:b5:6a:a1:9d:
         21:7f:ae:d7:00:a2:24:e2:9e:98:96:38:94:a4:88:b8:d6:ad:
         30:aa:c2:45:17:77:1d:d3:31:5f:9e:23:c8:47:e4:fd:4f:ea:
         59:6a:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:03:40 2025 by rpki-client