Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
File:                     k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft (raw, json)
Hash identifier:          wiE35U3rwYIvv/IlODXyd40kn1KVxh39/2Rp5ZjCYMw=
Subject key identifier:   93:43:71:BE:DC:E4:D1:60:88:C4:24:B4:73:AB:42:C9:C8:C7:65:CC
Authority key identifier: 93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC
Certificate issuer:       /CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
Certificate serial:       0196B8FEB59D1444DD7B5BA4CCB583141325
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
Manifest number:          0469
Signing time:             Sat 10 May 2025 07:00:22 +0000
Manifest this update:     Sat 10 May 2025 07:00:22 +0000
Manifest next update:     Sun 11 May 2025 07:00:22 +0000
Files and hashes:         1: eXKi70pVOkSciah0yxPymcceP7o.roa (hash: /QwJ8MrFkVplCOmNYJ6qPcPj5JI/tOF/FJ4aI1f1YYQ=)
                          2: k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl (hash: V6mhTQcP4rvrHb7lbjC9YeIcDK+8y13mrcqbDuRsvW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:fe:b5:9d:14:44:dd:7b:5b:a4:cc:b5:83:14:13:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93a9f90830fe226c908eaddb67b5b9096c5e91bc
        Validity
            Not Before: May 10 07:00:22 2025 GMT
            Not After : May 11 07:00:22 2025 GMT
        Subject: CN=934371bedce4d16088c424b473ab42c9c8c765cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:20:3b:39:d9:1d:0b:d5:bc:fc:19:d1:39:
                    f3:cc:55:1d:3d:21:ed:4e:16:48:6c:ef:f7:08:e3:
                    5c:ac:f8:35:bd:41:66:0b:9a:a6:4a:9c:c1:36:67:
                    02:a6:c8:fa:fc:a6:30:d8:a1:c2:ab:95:b4:0d:b6:
                    8b:2e:ef:c4:d3:05:a4:32:24:ac:01:c6:04:bd:43:
                    9e:7a:ab:2f:91:c6:7c:9f:fc:a7:f0:e1:6d:e3:54:
                    44:dd:2e:3e:26:e3:f9:9f:da:e7:65:c7:04:15:fe:
                    09:b8:ae:71:fb:4d:81:92:b2:ff:f7:fa:08:88:61:
                    1b:c2:58:b6:56:68:d3:76:33:7c:12:0c:01:9d:bb:
                    a4:36:2e:c4:25:78:60:52:5f:8c:30:9e:9b:4d:93:
                    c1:dd:72:fe:b7:d9:d9:8a:43:79:a4:1a:48:b5:c3:
                    21:a9:0d:b2:c9:f5:ca:c4:10:33:1b:fb:8e:99:6d:
                    8d:0a:a6:e0:47:21:55:3e:28:c3:ad:3e:ec:1a:0d:
                    8d:15:a6:14:d8:28:d0:e2:e7:2b:10:a9:b4:00:4e:
                    70:bb:91:72:d1:96:79:0d:51:f0:c2:3c:a4:1e:4d:
                    c6:8e:3c:ca:14:ea:bf:76:27:be:74:b6:5d:03:21:
                    dc:b6:39:93:26:e8:59:72:8e:cb:19:2a:ef:56:c6:
                    9b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:43:71:BE:DC:E4:D1:60:88:C4:24:B4:73:AB:42:C9:C8:C7:65:CC
            X509v3 Authority Key Identifier:
                keyid:93:A9:F9:08:30:FE:22:6C:90:8E:AD:DB:67:B5:B9:09:6C:5E:91:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6n5CDD-ImyQjq3bZ7W5CWxekbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/229303-fd3e-4b3b-814d-06806a0bd181/1/k6n5CDD-ImyQjq3bZ7W5CWxekbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d2:c8:ff:bd:20:4a:7b:05:83:70:8c:fc:91:e0:a9:9f:00:
         44:88:6e:8c:7b:47:a7:b8:af:9a:19:7a:c6:cd:e1:38:b1:11:
         1b:85:1d:fc:03:e5:c4:d8:88:73:ae:c7:cb:7b:d6:75:9b:10:
         69:01:f9:4b:e5:a1:2c:f1:2a:17:27:2c:ec:fb:51:a9:92:68:
         f0:ad:43:1d:20:f4:4e:33:58:8b:eb:47:61:8d:f1:58:6b:53:
         9d:36:b8:ae:40:c2:85:85:13:1c:20:83:de:c3:b2:81:90:f2:
         0b:a5:97:8f:e1:ed:8a:25:dc:70:17:79:d8:ee:6c:11:ff:87:
         f7:6f:8f:98:c6:92:21:8a:7a:cb:be:00:b7:55:38:a3:1d:22:
         9b:c1:72:f3:a8:76:e3:31:54:b4:09:8a:39:e7:88:2f:ef:14:
         e2:eb:7c:5b:b3:0a:c2:a8:42:ff:11:d6:4d:ad:93:0a:63:49:
         6a:ee:aa:dc:c4:57:a0:23:8f:cb:9b:41:c2:49:a8:f8:b4:46:
         aa:f1:a6:4c:01:c4:78:f9:cd:af:7f:26:09:0d:0a:e7:7d:bc:
         35:a0:f2:f7:e1:e5:91:f0:45:25:ed:f6:23:85:fc:5d:3b:ad:
         7d:cd:f4:03:8e:29:b7:7b:b1:01:89:44:55:7d:49:42:47:5e:
         93:0b:6a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:15:27 2025 by rpki-client