Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
File:                     6IwEdx4r-sj2DxtMnL0JOq_ql04.mft (raw, json)
Hash identifier:          oa6IKXfGU40ZXGZDjzO1tp1V3tLWuiss7p9gDNHYI0k=
Subject key identifier:   E7:68:C9:9F:00:C0:AB:F7:4B:F9:B3:5F:D2:05:91:B4:B3:48:41:1A
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Certificate issuer:       /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial:       01974A43AE414E8A5DBF738DDC94FB085D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
Manifest number:          14D2
Signing time:             Sat 07 Jun 2025 12:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:38 +0000
Files and hashes:         1: 31Lnqd98aILf2Q9ICfWlWSchBQQ.roa (hash: DcqcrHdJNZRvLJWfvAXOgG6RHZHxR0/3JTue0isYM5w=)
                          2: 4AyXvezl-yqEPm9B7grorGuuaCU.roa (hash: nr0Tbymm5gT2Px5I4yZcmfEB00Mwgpc5V9ZF1AUNTUw=)
                          3: 6IwEdx4r-sj2DxtMnL0JOq_ql04.crl (hash: htOpfckFLkS952CHJ4YDH8mkIEjOrKOxOZ5QO6z5Mks=)
                          4: MVj_UryY6usDMGQf7jrICRKU9Xc.roa (hash: TvJrrNTxB79t+M5iqPy3C87lEZr00PLUFyfmpQY3E3Q=)
                          5: ptaM1onrhJcKal0fw9HXf-WMHZY.roa (hash: O+DKgB5l1bVNFuSJ+/nDkTvI9UVJFEJCp07K7RKqMQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:ae:41:4e:8a:5d:bf:73:8d:dc:94:fb:08:5d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
        Validity
            Not Before: Jun  7 12:00:38 2025 GMT
            Not After : Jun  8 12:00:38 2025 GMT
        Subject: CN=e768c99f00c0abf74bf9b35fd20591b4b348411a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b4:8b:cb:5f:04:b4:2a:7c:73:b2:3e:3f:a0:
                    b5:76:2f:d2:f1:27:37:6b:52:a5:3e:7f:d6:d6:32:
                    a1:e3:e8:84:a5:2e:1e:70:aa:bc:f6:fe:f7:c2:f3:
                    35:58:3f:34:74:b6:5a:cc:56:46:b8:81:02:96:ec:
                    81:a2:b1:96:4d:1e:dc:f9:96:57:99:e6:fb:fd:6b:
                    b6:a7:f9:39:7e:73:6a:7a:9d:84:62:c3:83:6e:18:
                    a2:76:73:a1:3d:d2:99:80:55:1b:27:b7:97:33:df:
                    e5:f0:9d:87:8c:aa:fe:0e:97:ae:f4:51:7f:d5:7e:
                    37:24:07:8e:f2:25:f9:25:5c:a1:34:9a:23:52:fa:
                    af:b9:7c:7a:18:2b:e1:f1:23:25:cf:38:d2:5c:b9:
                    27:36:01:55:fd:0c:3e:88:ed:88:fe:2e:4c:da:87:
                    71:10:0c:23:77:34:63:e9:16:9b:42:50:e1:dd:85:
                    ef:f5:44:59:e3:a7:5f:74:1e:51:0b:4a:ca:20:a1:
                    5a:0e:79:94:13:f4:9d:ae:a2:1e:be:5d:a4:53:8a:
                    48:3a:92:71:69:48:3a:2f:72:b6:72:10:17:6b:cf:
                    02:a3:2f:c2:55:79:0c:82:2e:2c:04:8a:da:f1:7b:
                    b6:ea:49:69:6d:7f:9d:53:f1:24:92:ab:d3:db:05:
                    b7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:68:C9:9F:00:C0:AB:F7:4B:F9:B3:5F:D2:05:91:B4:B3:48:41:1A
            X509v3 Authority Key Identifier:
                keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:8b:5b:af:39:ff:e5:c5:bc:67:a2:90:0a:34:7d:fc:88:c3:
         64:09:39:91:a0:ee:dd:72:03:62:d1:d5:96:9d:b7:08:01:d9:
         26:a7:d8:76:09:da:3f:e7:a5:79:58:60:b6:1c:63:6c:7e:62:
         05:88:74:66:d5:49:8e:43:d8:48:2a:be:33:14:97:55:79:6f:
         ef:cb:11:29:74:45:83:8b:98:aa:0f:31:68:7a:31:e5:43:b2:
         fd:d5:1b:06:f4:9c:f4:f9:f8:cd:62:8d:57:ca:36:d6:0e:63:
         e8:1a:62:fa:a2:18:21:a9:98:61:63:a6:a9:a3:db:2f:b1:89:
         69:b4:43:7b:f4:4e:7d:a3:21:68:d3:75:72:f1:ff:b8:73:d1:
         b4:28:61:29:cb:19:f1:a1:62:a7:ee:95:5d:c6:17:58:0a:17:
         2f:44:0c:11:4f:1f:7b:89:7d:76:98:1f:37:d9:d3:53:42:f6:
         4b:0e:c8:4f:7c:8d:59:c4:9a:90:31:43:fd:94:a0:e9:97:a2:
         9c:bf:e0:0c:9a:bb:67:dc:e9:ad:79:2f:af:22:2f:cc:91:a4:
         58:90:10:27:f3:7a:a6:86:43:19:b7:8f:0e:fc:e9:a1:13:c2:
         56:32:fc:13:15:8c:98:ef:3d:f3:06:a0:ad:fc:fd:75:ae:d6:
         34:07:c5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:00:13 2025 by rpki-client