Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
File:                     RmI6xd-e7899JPMXx7aUKX5PNio.mft (raw, json)
Hash identifier:          XSiiVLY6E5qzqbYosny3Y9HIAu5+lqzmrx6bC7gIihY=
Subject key identifier:   BF:BE:46:B7:46:AF:81:E2:CC:09:10:C1:C1:A4:E6:91:AA:A4:27:38
Authority key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Certificate issuer:       /CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Certificate serial:       01975D5CB1F20B99610385136C85FAA216A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
Manifest number:          066E
Signing time:             Wed 11 Jun 2025 05:00:45 +0000
Manifest this update:     Wed 11 Jun 2025 05:00:45 +0000
Manifest next update:     Thu 12 Jun 2025 05:00:45 +0000
Files and hashes:         1: RmI6xd-e7899JPMXx7aUKX5PNio.crl (hash: +URF2PFtuirh4tT9Wzw6pC11q9RQJVNfGgvfegO/+CE=)
                          2: nCIxCjPPY6DWPKx_WJ_D213f1h8.roa (hash: TAjRe+1L1yReCVm9dO/sWTs7kJtd/3RFn58xjlrbP+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:5c:b1:f2:0b:99:61:03:85:13:6c:85:fa:a2:16:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
        Validity
            Not Before: Jun 11 05:00:45 2025 GMT
            Not After : Jun 12 05:00:45 2025 GMT
        Subject: CN=bfbe46b746af81e2cc0910c1c1a4e691aaa42738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:6c:4a:91:a8:c9:07:67:b7:80:32:b9:21:
                    bd:ec:99:50:ed:96:07:a2:2a:50:e8:8b:f9:c7:88:
                    da:0c:80:28:a3:b9:1e:47:67:cc:2c:ba:e4:83:e2:
                    7a:84:80:47:1f:b3:d6:0a:ea:3b:25:4d:c8:69:58:
                    f6:33:3a:ac:0c:57:10:ea:cb:7a:b7:3d:eb:bc:6b:
                    ed:e9:9d:e2:ab:2e:95:16:23:38:df:aa:70:3e:1a:
                    7d:b3:e7:b1:2d:f4:95:99:60:24:39:40:5c:1c:c1:
                    55:89:23:8d:53:51:19:42:b1:b3:df:45:35:af:8d:
                    96:28:71:89:4b:fc:f6:0b:03:f8:30:fc:7c:a0:f0:
                    e2:68:fa:c1:a2:ee:09:de:8b:17:6e:5c:b8:96:05:
                    63:c6:84:0a:35:a1:45:15:d0:86:76:72:0b:5f:74:
                    87:e7:43:bd:46:7b:e8:9f:34:ab:9e:99:df:c7:0a:
                    1b:47:53:69:bc:db:74:46:6a:2a:89:51:18:44:e5:
                    6a:f3:38:7e:80:59:ea:19:32:d7:8b:0a:5e:0e:b8:
                    86:de:17:e6:fa:77:5b:3b:84:21:86:b0:8e:b1:fb:
                    19:29:12:93:a0:8a:76:3f:b3:c0:d3:86:2c:83:9c:
                    c7:f1:32:4b:37:71:43:33:a9:01:bc:c8:1b:fd:d1:
                    f9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:46:B7:46:AF:81:E2:CC:09:10:C1:C1:A4:E6:91:AA:A4:27:38
            X509v3 Authority Key Identifier:
                keyid:46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:af:f4:36:22:84:df:46:43:85:ef:18:dc:95:3b:5b:6c:
         26:74:1e:13:a2:63:99:0f:7c:00:23:d7:48:28:09:cc:09:0c:
         40:76:01:1c:36:f3:b9:aa:ff:b4:ec:63:1e:3b:86:64:d1:df:
         29:ea:79:88:06:58:71:17:c0:a1:a2:16:6f:61:47:ed:46:50:
         3d:3e:43:9b:8c:6d:95:c7:b8:d3:2e:bc:a5:f0:5e:2e:d7:71:
         de:c8:4d:33:06:2c:b5:4a:01:d1:d1:19:32:d0:70:d8:ec:59:
         c1:a4:08:5c:8a:f6:93:b2:42:c5:d9:80:98:66:fd:72:2b:63:
         23:52:e8:eb:2a:38:ba:38:3d:1c:68:21:0b:35:0e:c0:a6:e4:
         cf:20:f4:c4:6b:8e:c8:72:1f:2a:44:0a:97:c4:ba:b3:85:65:
         ab:80:ea:06:6e:1a:ba:b4:4f:be:12:9b:81:ca:ad:b7:e6:79:
         f5:33:7f:2f:8e:90:80:bf:06:82:9a:27:af:04:09:89:47:a0:
         0b:cd:26:4d:93:4b:82:d4:7f:43:be:db:3e:85:05:9d:4e:1f:
         49:65:7e:85:d0:46:21:a9:30:5d:dc:f3:39:e5:20:f6:8c:f5:
         dd:6b:34:03:43:65:03:2f:9b:03:1a:cc:0b:0b:74:48:4d:d2:
         ba:6e:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:46:53 2025 by rpki-client