Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
File:                     6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft (raw, json)
Hash identifier:          f2RJ+ZKbCZzJ32V8xpP50aryvrAXBnphKmTeqAAUaNY=
Subject key identifier:   29:1A:E7:90:83:62:6A:08:AB:71:E0:3F:21:FD:67:AD:37:A4:FF:4F
Authority key identifier: EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF
Certificate issuer:       /CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
Certificate serial:       0196C502E8DA1D95AA81428D4375AF5F12A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
Manifest number:          153B
Signing time:             Mon 12 May 2025 15:00:24 +0000
Manifest this update:     Mon 12 May 2025 15:00:24 +0000
Manifest next update:     Tue 13 May 2025 15:00:24 +0000
Files and hashes:         1: 6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl (hash: BRnFQLRjw0WPkQUFeoybRYdY7mHsLnEW9Jg51H3YXPI=)
                          2: DIYTcQL0kTTU2q4HEzGujm0gUwo.roa (hash: RDp4zi/HUT9tIKN8ofgNKdiyOgNtG9lWPQ4C3eVO32Y=)
                          3: uL0oA5oOVHGz1EKQthaeZ4nofOI.roa (hash: Ukj6KTn0iYnjxnepezeV1ye/hQ4gCPQyF7UCJwJgWx0=)
                          4: xEVUwNoistpr086p8wiZOj3lAS0.roa (hash: jssBpk2I1njjei0F0mwFNz5A15Y3I0c8WhHM6GhLppA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:02:e8:da:1d:95:aa:81:42:8d:43:75:af:5f:12:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea55dfd13021d5855ff194534933cd7d6cacd6cf
        Validity
            Not Before: May 12 15:00:24 2025 GMT
            Not After : May 13 15:00:24 2025 GMT
        Subject: CN=291ae79083626a08ab71e03f21fd67ad37a4ff4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:9a:f8:1d:63:cb:e4:f0:88:4d:6e:28:bf:
                    ca:b5:61:2a:7d:1c:a7:8e:c0:d3:dd:98:8a:3c:5d:
                    21:a8:9e:6c:52:05:f5:18:d8:76:dc:1d:c2:f5:9c:
                    2f:f9:db:e6:0d:6d:89:b6:fe:ba:77:67:b1:28:c3:
                    dd:ca:81:ae:fb:0b:dc:3c:d4:68:fe:9b:38:3e:e6:
                    c1:2b:95:d3:15:1c:f6:53:ea:ed:4f:8a:e8:f4:d9:
                    44:50:cf:5b:8c:ed:95:05:0b:be:2b:f9:b3:c5:e1:
                    e4:12:b2:73:87:91:f5:1c:e0:a9:1c:61:2d:0b:1d:
                    e0:74:79:dd:88:98:08:dd:21:fd:8f:4b:56:83:03:
                    4f:8d:e1:7f:57:72:2e:ab:5f:88:d3:d7:84:c7:1e:
                    0e:06:71:54:ff:a9:b8:9d:d3:72:f7:0c:a2:04:1b:
                    aa:20:9f:64:3b:4d:d6:08:e5:10:92:c6:3d:47:a3:
                    5d:a0:b2:9a:78:a6:01:9a:a7:c9:56:22:71:b8:ff:
                    62:8f:a1:7a:ec:64:3d:10:ef:ae:2c:bb:32:98:3e:
                    8c:4c:80:af:a5:3f:fe:4c:5f:03:bd:28:ed:35:21:
                    da:be:e5:7a:5b:ea:d6:20:6c:59:e9:56:61:00:8a:
                    cd:f8:0b:66:37:cd:17:10:69:6a:e1:c2:e2:51:be:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1A:E7:90:83:62:6A:08:AB:71:E0:3F:21:FD:67:AD:37:A4:FF:4F
            X509v3 Authority Key Identifier:
                keyid:EA:55:DF:D1:30:21:D5:85:5F:F1:94:53:49:33:CD:7D:6C:AC:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lXf0TAh1YVf8ZRTSTPNfWys1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f433b-dc32-45a2-979e-ff143368753f/1/6lXf0TAh1YVf8ZRTSTPNfWys1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8f:96:7d:6d:df:ba:eb:84:6d:e6:05:49:13:ae:a6:eb:0a:
         93:54:55:84:df:07:7f:d0:54:72:5e:a2:65:5e:06:c5:b4:f0:
         8d:52:a9:ad:56:2c:59:19:a6:07:f7:9a:0f:7b:73:c0:9c:1d:
         82:56:30:75:9f:7d:22:de:f7:1c:a5:a5:9d:59:04:5f:41:0b:
         4f:eb:d0:5f:4d:a4:bf:7c:3b:2c:b8:ce:5b:79:00:af:05:2a:
         01:6b:ee:72:bb:96:4a:5e:fb:e5:24:6f:65:33:f9:20:ad:a1:
         61:46:28:ad:40:c0:e5:78:bc:e6:7c:73:bc:c1:16:37:a1:ba:
         84:0b:87:91:fd:7a:e2:35:4e:a8:db:d7:e9:3f:f1:cf:c0:cf:
         34:69:31:64:70:39:ef:75:f9:30:d0:45:44:8d:41:09:60:3b:
         1f:23:89:b1:13:17:1b:bc:85:25:28:44:46:e0:a3:24:cf:fe:
         a1:4b:7d:98:ca:99:bd:75:58:0d:45:37:25:bf:81:10:5c:b9:
         13:df:37:29:83:cc:6a:1d:26:d6:96:33:8a:10:bc:04:3f:f9:
         0a:a1:95:15:34:f3:63:0b:15:7d:39:c8:39:52:ec:52:1a:b5:
         2c:fc:f6:92:50:52:e1:61:43:08:23:bc:7b:9a:0d:ba:a3:57:
         1d:c2:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:02:41 2025 by rpki-client