Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
File:                     6B0tzytpq9vWCUNkQBFank6hmgU.mft (raw, json)
Hash identifier:          WpiOM+t3tYqhUfhWQFLIarB+zZLwEhlSbG5tjVbjVHI=
Subject key identifier:   9D:C6:D7:39:A4:7F:CD:55:EC:B5:B0:2E:AD:CD:DB:4F:00:CE:07:E6
Authority key identifier: E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05
Certificate issuer:       /CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
Certificate serial:       01965492B519BAE89B306648DE5EEB4F0EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
Manifest number:          1500
Signing time:             Sun 20 Apr 2025 19:00:22 +0000
Manifest this update:     Sun 20 Apr 2025 19:00:22 +0000
Manifest next update:     Mon 21 Apr 2025 19:00:22 +0000
Files and hashes:         1: 6B0tzytpq9vWCUNkQBFank6hmgU.crl (hash: ntm59qCdp/y7xrFIneFCF91XcsxiS4k/C7moTrGbgHY=)
                          2: rqSMK05KYSg_B0GzBcqvNHZV8BM.roa (hash: 7UiFO6ZTlzbJGR5qeW9I8KOwaVtEW4c742Prj97IAno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:54:92:b5:19:ba:e8:9b:30:66:48:de:5e:eb:4f:0e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81d2dcf2b69abdbd609436440115a9e4ea19a05
        Validity
            Not Before: Apr 20 19:00:22 2025 GMT
            Not After : Apr 21 19:00:22 2025 GMT
        Subject: CN=9dc6d739a47fcd55ecb5b02eadcddb4f00ce07e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:fc:c7:ca:df:74:89:fc:14:dc:3c:d6:6c:
                    cd:3c:33:c5:6e:bf:66:dc:e1:c4:09:ca:5d:b8:46:
                    68:d5:24:4a:59:62:65:9c:00:3a:b9:83:13:18:41:
                    bd:b0:cc:61:73:6b:b4:28:6d:49:e1:53:c1:83:1d:
                    32:15:d4:0f:df:13:59:09:3d:d1:3e:0e:54:67:9c:
                    65:f6:ef:02:62:06:f1:1a:a0:47:76:a1:0f:00:cd:
                    d3:b6:a6:fe:62:4f:05:da:e0:83:38:74:1a:99:e2:
                    7e:f2:8f:d2:4e:88:86:83:0f:86:80:5d:ec:d8:76:
                    5e:29:fa:21:9e:d5:80:6d:64:c9:5a:97:d4:f8:c9:
                    b8:3f:52:a3:8a:2c:cf:17:74:47:d7:ef:59:55:1c:
                    8f:44:88:5a:99:39:8c:97:3e:81:70:da:c4:a6:04:
                    e4:5a:b3:e3:79:ac:66:14:a7:6a:7b:71:2a:93:aa:
                    8c:6b:f3:9c:ab:3f:03:f1:1c:e0:b2:ad:7e:1b:a0:
                    7d:91:82:14:7c:67:00:ee:49:14:c5:30:17:ac:dd:
                    95:b5:d9:45:7a:47:2a:41:98:92:1f:a5:0b:ba:f0:
                    91:d9:2c:ac:a8:1a:07:f0:0c:25:20:fa:65:8c:20:
                    08:6c:41:40:08:16:80:f6:4e:f4:27:57:61:9d:2e:
                    3f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:D7:39:A4:7F:CD:55:EC:B5:B0:2E:AD:CD:DB:4F:00:CE:07:E6
            X509v3 Authority Key Identifier:
                keyid:E8:1D:2D:CF:2B:69:AB:DB:D6:09:43:64:40:11:5A:9E:4E:A1:9A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6B0tzytpq9vWCUNkQBFank6hmgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d2ff0f-e24a-4313-98c1-22e5547316b5/1/6B0tzytpq9vWCUNkQBFank6hmgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:bd:6e:55:41:98:24:b7:99:a9:91:6d:01:b4:8b:79:cc:a8:
         55:55:4d:b7:53:2f:f2:39:29:72:3b:1a:e5:d8:24:71:07:e1:
         9e:1a:70:26:e6:70:f9:09:bc:0f:ff:34:b8:16:45:28:b5:94:
         71:4b:c9:de:d7:9f:12:37:e7:53:c4:b2:5a:94:88:23:3a:b5:
         7f:84:a1:2e:81:57:c6:45:13:d3:ac:89:19:03:ca:f9:d0:28:
         40:00:a2:19:0a:a8:fc:bd:71:f5:7c:e3:98:27:f1:ed:6b:50:
         22:03:1f:a6:04:f0:07:5d:9f:0e:c8:98:b1:67:df:80:a1:c6:
         ec:8d:40:b3:74:08:05:4e:00:a9:71:cf:88:88:a3:d2:08:d0:
         e6:20:f1:f6:23:cb:52:f0:03:39:8e:fa:67:0a:dc:f8:b7:43:
         5e:e3:fe:87:d9:d5:aa:8c:78:d5:cb:23:62:16:16:4e:08:e0:
         58:62:c0:46:91:52:40:73:4a:84:8f:92:52:ff:e6:1d:5e:35:
         7d:b0:e3:2f:2e:c8:02:24:aa:d2:33:70:65:f5:51:d4:56:e5:
         f8:da:dd:e0:6b:d8:89:1c:e2:f7:4f:00:27:10:3d:76:97:bf:
         c2:f4:7b:b8:ef:89:dd:2c:d1:2f:f6:bf:e6:36:5b:95:06:70:
         c4:cf:94:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkrUZuuibMGZI3l7rTw7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MWQyZGNmMmI2OWFiZGJkNjA5NDM2NDQwMTE1YTllNGVh
MTlhMDUwHhcNMjUwNDIwMTkwMDIyWhcNMjUwNDIxMTkwMDIyWjAzMTEwLwYDVQQD
Eyg5ZGM2ZDczOWE0N2ZjZDU1ZWNiNWIwMmVhZGNkZGI0ZjAwY2UwN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz378x8rfdIn8FNw81mzNPDPFbr9m
3OHECcpduEZo1SRKWWJlnAA6uYMTGEG9sMxhc2u0KG1J4VPBgx0yFdQP3xNZCT3R
Pg5UZ5xl9u8CYgbxGqBHdqEPAM3Ttqb+Yk8F2uCDOHQameJ+8o/SToiGgw+GgF3s
2HZeKfohntWAbWTJWpfU+Mm4P1KjiizPF3RH1+9ZVRyPRIhamTmMlz6BcNrEpgTk
WrPjeaxmFKdqe3Eqk6qMa/Ocqz8D8Rzgsq1+G6B9kYIUfGcA7kkUxTAXrN2VtdlF
ekcqQZiSH6ULuvCR2SysqBoH8AwlIPpljCAIbEFACBaA9k70J1dhnS4/BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3G1zmkf81V7LWwLq3N208AzgfmMB8GA1UdIwQY
MBaAFOgdLc8raavb1glDZEARWp5OoZoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEt
MjJlNTU0NzMxNmI1LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kMmZmMGYtZTI0YS00MzEzLTk4YzEtMjJlNTU0NzMxNmI1
LzEvNkIwdHp5dHBxOXZXQ1VOa1FCRmFuazZobWdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1b1uVUGY
JLeZqZFtAbSLecyoVVVNt1Mv8jkpcjsa5dgkcQfhnhpwJuZw+Qm8D/80uBZFKLWU
cUvJ3tefEjfnU8SyWpSIIzq1f4ShLoFXxkUT06yJGQPK+dAoQACiGQqo/L1x9Xzj
mCfx7WtQIgMfpgTwB12fDsiYsWffgKHG7I1As3QIBU4AqXHPiIij0gjQ5iDx9iPL
UvADOY76Zwrc+LdDXuP+h9nVqox41csjYhYWTgjgWGLARpFSQHNKhI+SUv/mHV41
fbDjLy7IAiSq0jNwZfVR1Fbl+Nrd4GvYiRzi908AJxA9dpe/wvR7uO+J3SzRL/a/
5jZblQZwxM+UyQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:35:55 2025 by rpki-client