Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
File:                     6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft (raw, json)
Hash identifier:          Sqrn72h7boDfJI4Frt+dvqo2Vg/ZVUIGxCNyMYjmq/0=
Subject key identifier:   EE:BE:DD:E5:64:31:66:CB:C5:09:7E:6F:E3:48:5E:DE:B2:B2:25:70
Authority key identifier: E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41
Certificate issuer:       /CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
Certificate serial:       0196542529B897191265A3B03350C6B4E3AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
Manifest number:          12F9
Signing time:             Sun 20 Apr 2025 17:00:43 +0000
Manifest this update:     Sun 20 Apr 2025 17:00:43 +0000
Manifest next update:     Mon 21 Apr 2025 17:00:43 +0000
Files and hashes:         1: 6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl (hash: /atUQCGgn0jAhn9bgJjdgpPHsEanwHi5m1TAZ+WC7CI=)
                          2: XMQgiqcPelkjm7gWjsFCVZhyYlw.roa (hash: MplIqGMTS4jdBDFbxET40RGJ8kb7EFW6T8B0/VgkIdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 17:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:25:29:b8:97:19:12:65:a3:b0:33:50:c6:b4:e3:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b1a6c061455c08e9147b281fc7424cbc545f41
        Validity
            Not Before: Apr 20 17:00:43 2025 GMT
            Not After : Apr 21 17:00:43 2025 GMT
        Subject: CN=eebedde5643166cbc5097e6fe3485edeb2b22570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:73:e8:e3:1a:f2:ab:0b:a2:f9:d9:c2:8b:6f:
                    12:33:3f:e5:0b:b2:d7:6b:8a:14:b1:30:87:4f:2b:
                    0a:7d:0e:e2:c7:e8:e5:3c:29:e5:c7:7e:71:d9:00:
                    9a:fc:63:ef:fb:29:3d:dc:fa:3f:6c:30:29:26:ac:
                    8c:cc:f8:52:11:b8:f0:1d:4f:58:bb:ae:e6:e0:1c:
                    e2:a1:2d:bc:08:f2:2e:c9:78:4b:41:a7:26:87:08:
                    a5:51:56:40:e5:05:7b:7b:c0:f1:2d:92:a1:89:46:
                    de:c3:78:6e:b1:7d:52:d7:65:55:a2:bb:09:bf:71:
                    e7:82:e0:65:72:44:16:bf:4c:37:6f:c2:b1:d2:36:
                    94:a5:a5:f8:f1:19:62:8c:d3:21:07:36:cc:17:51:
                    59:77:b5:89:f3:bf:c7:21:93:0a:5e:78:70:c2:e9:
                    c4:66:ca:6e:4c:89:59:c3:0c:7d:10:e5:4b:be:34:
                    73:df:eb:75:4f:a7:1c:43:9a:42:1c:16:82:da:08:
                    f9:b2:27:33:c5:6b:43:43:5e:b5:8c:02:96:e2:73:
                    53:af:ee:23:86:dd:d9:d9:7d:9c:f8:5e:76:c0:70:
                    9e:7d:03:a4:48:e6:33:c9:61:72:8e:8e:e6:33:06:
                    fc:07:af:29:82:92:fd:02:73:5a:51:65:00:a2:10:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:BE:DD:E5:64:31:66:CB:C5:09:7E:6F:E3:48:5E:DE:B2:B2:25:70
            X509v3 Authority Key Identifier:
                keyid:E9:B1:A6:C0:61:45:5C:08:E9:14:7B:28:1F:C7:42:4C:BC:54:5F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bGmwGFFXAjpFHsoH8dCTLxUX0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/afdf95-2834-4dcc-b41d-3f9f264ceb20/1/6bGmwGFFXAjpFHsoH8dCTLxUX0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fe:6d:de:75:36:2b:00:09:e4:27:29:f5:42:02:82:06:b3:
         f7:35:b8:62:ae:0b:a3:78:b8:d0:77:e1:ea:25:c0:b5:9f:43:
         8a:41:88:cd:f8:8c:9e:50:d0:9c:36:96:31:68:2b:b5:0a:e5:
         ef:f9:b9:a3:e6:87:b4:cf:20:a6:64:f5:25:f1:f7:ac:54:20:
         d2:02:76:48:79:57:35:e8:7d:ad:65:a7:a4:bd:33:45:88:99:
         3c:57:0d:f3:e1:ec:88:4f:a9:ae:61:8e:56:52:50:d0:96:3d:
         83:a5:5d:03:f3:a2:58:4f:33:02:a8:b2:c3:8d:50:69:93:90:
         90:d2:55:a4:3f:9e:be:66:2e:97:42:6c:c7:da:c3:45:ba:92:
         fd:d8:58:fa:88:35:85:58:b6:2e:80:ca:94:fe:72:f4:2e:79:
         90:d8:a0:09:f3:f8:16:49:e5:fd:02:02:9a:07:2b:2e:0c:b2:
         f2:ae:f8:03:87:85:c5:c7:69:c0:85:31:bf:c2:15:29:f8:15:
         e9:31:6d:b3:6f:bb:77:f8:32:0d:8a:32:31:c0:bf:5b:52:fe:
         59:19:ae:34:ed:c7:93:98:71:6b:ef:db:e1:59:a2:1f:3b:fb:
         20:0c:40:96:4a:26:f7:80:e1:ff:b0:57:e0:d4:ce:b2:6c:12:
         b5:4a:3f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:59 2025 by rpki-client