Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
File:                     6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft (raw, json)
Hash identifier:          /OdIdBxLbTpwCL6D8W0GU1HbrsgpLALTQoVPEiEJVNg=
Subject key identifier:   B8:61:59:2E:BA:55:23:7D:3E:F1:48:1C:2A:95:D5:AD:2F:D9:57:6D
Authority key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Certificate issuer:       /CN=e994e74064158e97904990947510eb9941986ca1
Certificate serial:       01964556B982347E36F193892121638A987E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
Manifest number:          0491
Signing time:             Thu 17 Apr 2025 20:00:33 +0000
Manifest this update:     Thu 17 Apr 2025 20:00:33 +0000
Manifest next update:     Fri 18 Apr 2025 20:00:33 +0000
Files and hashes:         1: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl (hash: At1Cp0j0YtI5ANX8OfsBSg3gEYwdWmiK5wwHFHK5nE4=)
                          2: ADjr28xDnqYwCSe2YSx596u1Q58.roa (hash: ny7Wak3ibQOHmIHDaed11LtkQKFtuzxAsC/NXeIXupI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:56:b9:82:34:7e:36:f1:93:89:21:21:63:8a:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e994e74064158e97904990947510eb9941986ca1
        Validity
            Not Before: Apr 17 20:00:33 2025 GMT
            Not After : Apr 18 20:00:33 2025 GMT
        Subject: CN=b861592eba55237d3ef1481c2a95d5ad2fd9576d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:05:5b:dc:ea:f1:9a:f7:c8:5c:89:6f:c8:39:
                    48:09:6b:a6:65:95:0a:f3:d5:bb:15:cb:79:2f:ac:
                    8a:ed:8a:23:f2:bc:6c:12:94:a1:2d:de:d7:12:c1:
                    c2:74:bc:1c:72:55:90:36:e5:9e:ba:41:55:50:89:
                    b5:f9:b7:79:0f:51:ec:b6:19:4b:7e:f3:1e:16:80:
                    1b:45:77:e0:00:b7:17:e1:36:bf:47:06:2e:04:bd:
                    1e:fe:75:41:62:72:5a:60:96:c5:5d:0c:0e:d0:ae:
                    3c:d3:2c:e3:dd:b4:d6:19:7b:7e:21:62:7b:fd:d8:
                    bf:b7:12:3b:04:60:69:c5:e0:57:70:06:07:94:85:
                    3e:4f:9c:d0:51:b8:55:b8:c7:71:a3:66:e9:f8:ca:
                    89:8c:ba:86:e4:95:80:62:41:dc:64:ca:ec:a0:b7:
                    db:54:52:40:00:53:66:64:64:9a:dc:82:33:23:cd:
                    3f:c0:c5:bf:23:fc:9f:17:08:83:64:d6:f3:35:c6:
                    26:ad:5b:54:eb:62:9c:67:a1:a6:b3:fe:5e:5b:4b:
                    a4:c3:12:cc:f1:57:40:89:ef:4c:a3:f9:e5:a8:86:
                    94:6f:e7:fe:2a:5c:e4:ac:41:1d:c1:d3:57:ad:c6:
                    0a:bc:17:97:77:b2:a4:2d:16:ee:08:e4:37:ba:d0:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:61:59:2E:BA:55:23:7D:3E:F1:48:1C:2A:95:D5:AD:2F:D9:57:6D
            X509v3 Authority Key Identifier:
                keyid:E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:ef:0f:f5:da:34:0b:af:b9:52:ec:d0:4b:01:8a:dc:e2:
         e9:7b:17:71:bb:40:d1:53:25:cf:cd:e6:2f:bd:4e:25:84:d6:
         fc:91:10:2a:db:8f:18:92:45:41:0f:9b:d6:55:90:42:34:f9:
         36:3f:25:51:a4:c7:11:dd:0b:01:70:47:27:bb:a0:a1:fe:34:
         c3:39:93:38:72:a7:32:41:e2:f1:6f:52:7e:56:99:24:8d:a7:
         55:93:3a:c4:86:cd:80:80:a3:3c:68:b8:db:88:a5:fd:b6:e6:
         33:84:8a:d7:81:65:44:95:60:af:f3:b9:c5:77:b1:ea:43:1a:
         9f:9d:c9:0a:f6:5d:f5:be:75:ff:9d:19:68:1d:9a:40:32:7e:
         3f:bd:78:6d:e1:87:18:75:74:69:aa:ab:89:08:bd:8f:cc:da:
         7b:d1:59:1e:5d:62:fb:1d:f8:19:90:fb:94:65:b7:c9:ae:69:
         6e:61:91:81:68:d8:4b:cc:57:8d:d5:80:0e:8a:76:5e:0c:8d:
         57:c1:01:6a:06:c8:b2:03:43:31:bb:ae:6f:2f:0e:04:a9:c7:
         55:3f:94:55:4b:a7:58:0e:24:a4:9a:80:9d:79:b1:da:4c:f3:
         05:42:bf:42:ad:44:99:96:7d:bf:79:11:87:86:fd:f0:91:6c:
         d1:8c:ee:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:06:49 2025 by rpki-client