Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
File:                     6NHRX1kR1I0cWe7zdPezf3HU678.mft (raw, json)
Hash identifier:          iF7qVrh29RZ9qtx2ydBMG6GUEBL4QpgqZWbCsn3zDCI=
Subject key identifier:   E4:25:4D:F6:29:BF:92:43:9D:7B:BD:99:C7:E2:03:DD:96:8A:34:3C
Authority key identifier: E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF
Certificate issuer:       /CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
Certificate serial:       019510FDEB69AEB368CC5D8989F0E6033778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
Manifest number:          0BF4
Signing time:             Sun 16 Feb 2025 23:00:31 +0000
Manifest this update:     Sun 16 Feb 2025 23:00:31 +0000
Manifest next update:     Mon 17 Feb 2025 23:00:31 +0000
Files and hashes:         1: 6NHRX1kR1I0cWe7zdPezf3HU678.crl (hash: lmUB3vzNkHsw+Ja4TeivshQzQX6lsSvacFcJmRMPKo0=)
                          2: mqack1zg1aDbcOyT4cRxSwy3UDQ.roa (hash: ZwWlDd1N6JTl2qCwygwMAx3Ukou4tkcRR0CWTPfDGaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:10:fd:eb:69:ae:b3:68:cc:5d:89:89:f0:e6:03:37:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d1d15f5911d48d1c59eef374f7b37f71d4ebbf
        Validity
            Not Before: Feb 16 23:00:31 2025 GMT
            Not After : Feb 17 23:00:31 2025 GMT
        Subject: CN=e4254df629bf92439d7bbd99c7e203dd968a343c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:75:6b:87:dc:5f:57:12:df:42:33:0e:00:
                    f5:a6:03:f2:e4:d4:6d:05:21:3e:c5:75:ca:63:c6:
                    19:9f:19:26:54:5c:a6:50:8e:a1:ea:2c:af:58:7e:
                    33:c3:91:55:e8:d3:c9:b9:dd:1f:c1:46:dd:58:31:
                    f5:6b:66:dc:96:7f:cf:7a:6c:dc:94:70:e6:0f:b2:
                    10:04:4d:50:e5:a6:b9:35:4f:9f:b2:c6:80:52:6a:
                    25:fd:55:f4:a4:e9:d2:43:7e:69:6b:ce:6c:7e:9a:
                    3a:6b:78:6e:6d:e2:03:c5:ed:ec:6e:f8:7b:1c:8d:
                    9e:1e:16:6b:1c:e2:c1:6a:cf:1a:f4:03:2d:93:11:
                    20:78:ee:fc:4a:cf:10:d7:d8:3e:38:3c:5e:d9:fa:
                    0f:24:37:3d:d9:8a:25:91:6e:32:71:d2:0b:30:9d:
                    a6:a1:b8:87:28:c2:3c:d0:01:9e:41:f6:ce:3a:22:
                    5f:e8:67:a6:37:f3:6d:34:34:dc:1b:cd:71:69:5b:
                    92:1f:21:f4:7b:c9:23:aa:17:55:9b:d3:ff:82:06:
                    88:37:80:8b:6a:f4:7c:ad:25:2c:14:ce:a0:b8:7e:
                    4d:ea:3c:f4:76:79:ac:f8:b8:9c:ae:7f:e3:21:24:
                    c2:cb:61:af:f8:c9:f2:2e:22:0c:01:17:6b:fc:da:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:25:4D:F6:29:BF:92:43:9D:7B:BD:99:C7:E2:03:DD:96:8A:34:3C
            X509v3 Authority Key Identifier:
                keyid:E8:D1:D1:5F:59:11:D4:8D:1C:59:EE:F3:74:F7:B3:7F:71:D4:EB:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NHRX1kR1I0cWe7zdPezf3HU678.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7729e4-6a6d-4bc5-88e1-66f8b6e16b8a/1/6NHRX1kR1I0cWe7zdPezf3HU678.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:20:e1:02:44:14:3d:fc:68:88:45:f9:36:98:ce:0f:1b:71:
         62:ca:06:06:36:03:41:2f:95:c8:aa:92:79:65:6e:40:87:96:
         e4:d3:c1:0e:b2:1a:6f:23:43:ff:22:2e:85:8a:28:43:2e:12:
         81:11:1f:00:43:84:60:12:b1:de:88:65:4f:05:1e:8e:53:95:
         f8:e3:ed:d4:94:b0:29:11:b4:09:90:59:5b:3c:9e:e3:de:8d:
         3d:13:52:76:94:5f:95:b0:37:e7:49:c8:df:bb:36:42:c6:12:
         b7:40:c2:ec:c4:cc:71:7a:e9:a5:b2:ad:be:e6:dc:24:58:59:
         da:3e:ea:a9:8c:43:1a:f4:25:82:1c:b3:cd:d6:89:a3:b0:ad:
         d2:34:f3:8a:e6:0e:27:2f:33:8c:8b:b2:35:0f:af:af:c2:b8:
         49:b5:48:4c:89:5f:d8:71:02:59:1f:26:a9:70:32:7e:af:16:
         ce:7a:49:4b:58:5b:e0:9f:7f:5a:9b:d9:18:80:90:16:c7:23:
         79:75:2a:44:7e:0d:ef:43:77:b4:a5:a5:53:d4:33:f3:0c:32:
         9c:d7:40:13:64:a4:eb:3e:e8:fb:ab:37:6b:95:ea:f8:c2:72:
         48:9c:ce:a5:26:2b:78:c5:c3:b2:f2:67:8d:ff:fe:7b:ab:9b:
         11:62:19:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:20 2025 by rpki-client