Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
File:                     6k4ChliRLmlpfBhVO5Up89HOQF0.mft (raw, json)
Hash identifier:          HZ+dffU1HxLr9Zs9CuLtllztVEVCFOHqPbAIcEcafz4=
Subject key identifier:   9C:16:5D:B1:B3:F9:5C:09:6D:BF:95:0C:34:D9:F5:B8:A0:CD:96:B5
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Certificate issuer:       /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial:       0196BD12BEEDCDEFC3021DD219BE494EBA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
Manifest number:          0E7D
Signing time:             Sun 11 May 2025 02:00:44 +0000
Manifest this update:     Sun 11 May 2025 02:00:44 +0000
Manifest next update:     Mon 12 May 2025 02:00:44 +0000
Files and hashes:         1: 6k4ChliRLmlpfBhVO5Up89HOQF0.crl (hash: hXx4267fXPtntJRI4Qi/bPZNaWLQw//Us/D49rsXnFs=)
                          2: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (hash: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:be:ed:cd:ef:c3:02:1d:d2:19:be:49:4e:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
        Validity
            Not Before: May 11 02:00:44 2025 GMT
            Not After : May 12 02:00:44 2025 GMT
        Subject: CN=9c165db1b3f95c096dbf950c34d9f5b8a0cd96b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c4:1a:54:66:78:dd:1c:1d:28:59:9b:65:2a:
                    bc:d6:d0:f7:97:9f:59:c3:59:71:f0:a7:e7:4b:c8:
                    1c:06:66:aa:4e:bb:36:63:9c:04:1e:7d:60:34:f4:
                    25:42:0c:2b:a0:75:a0:06:31:0c:91:42:62:e5:5d:
                    ad:8e:b2:91:d4:14:fb:99:19:ce:a0:ed:2d:23:e8:
                    69:cc:ba:f2:08:5f:43:ed:ba:3a:1c:14:71:a7:bb:
                    25:b4:52:41:35:42:55:83:13:72:4e:29:4d:2f:16:
                    2c:49:45:90:00:b8:a2:a6:6a:61:64:ba:0e:42:f4:
                    e0:fe:59:b5:02:5a:c4:c9:41:12:84:d6:62:4c:54:
                    b4:41:c2:0e:f5:70:e0:66:1d:fa:d0:07:0f:76:90:
                    21:af:d0:c7:d8:a0:78:a4:72:50:29:45:dc:09:2c:
                    c2:c2:95:7c:34:ca:9b:b5:c8:9b:68:ca:e5:1c:64:
                    a6:49:c4:3c:a0:c5:a8:aa:66:0f:e4:2a:d3:2c:d8:
                    f1:fe:93:e3:0a:5a:51:11:49:af:2b:81:7e:b4:58:
                    4a:f7:d1:aa:e4:cb:d2:16:8d:56:7c:eb:2c:31:73:
                    0c:09:e4:34:87:09:10:bc:7e:59:61:9e:41:25:e2:
                    c1:ee:ef:31:89:2a:26:50:38:c1:f5:30:80:2c:23:
                    f6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:5D:B1:B3:F9:5C:09:6D:BF:95:0C:34:D9:F5:B8:A0:CD:96:B5
            X509v3 Authority Key Identifier:
                keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f9:42:46:1a:e3:ce:c8:ab:2e:c4:b6:02:40:b9:0c:d4:5a:
         12:67:07:f7:16:84:0e:d5:9c:73:41:3a:9f:03:ab:70:a5:75:
         53:6c:e1:6e:02:87:39:cf:93:bb:48:86:1e:50:81:d0:31:df:
         1e:84:ff:36:00:07:8d:40:fe:f2:e6:cc:3b:4d:36:80:b1:52:
         d5:c2:34:5f:ca:5d:91:51:be:01:39:70:b6:b4:52:58:42:e2:
         a8:13:f5:77:da:b3:68:5e:56:97:43:2c:a9:b0:f3:e6:6a:92:
         b8:50:18:fc:d5:ff:ae:73:18:7a:8d:e4:80:0c:97:e0:cc:f7:
         6a:89:65:28:3f:71:5d:e9:92:48:72:22:24:9c:36:26:bc:3b:
         8c:2b:0c:25:d9:0c:73:cb:3b:8f:55:6b:73:1b:d9:8b:37:35:
         c8:41:03:25:44:6c:15:e3:d9:ab:de:00:e1:af:ff:46:f9:e7:
         42:74:13:73:2a:24:50:bd:a3:4b:df:26:3a:23:d5:e5:35:ec:
         7f:70:c9:82:b9:f5:48:dd:cf:b7:d3:fa:5e:fb:c4:7c:87:19:
         05:92:b4:94:7e:a2:46:ab:df:ea:bb:a3:7d:c6:68:03:17:4b:
         e6:16:81:c1:0f:c3:61:b9:4b:e7:96:dd:5d:7b:ba:42:a5:c4:
         69:e3:e7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:30:26 2025 by rpki-client