Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
File:                     06xQ4EWCKCMXbkeDLeyPIRt08BM.mft (raw, json)
Hash identifier:          TsTWyr4sqv2yQ4OTYTINrygSFtjd+mye6B5yML6BTYA=
Subject key identifier:   A4:69:39:E8:26:DA:D1:C5:54:4D:CE:E0:67:7E:14:66:C5:09:C5:DD
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Certificate issuer:       /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial:       0197B6A18A5CA5CFDF30A083FB50431DB2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
Manifest number:          0273
Signing time:             Sat 28 Jun 2025 13:02:09 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:09 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:09 +0000
Files and hashes:         1: 06xQ4EWCKCMXbkeDLeyPIRt08BM.crl (hash: +tJCHLdmssxevLTjuK7MavVPq2wUoaaNhCb8FBHbUo8=)
                          2: J7at31yuwr6xPDnvAJre3wzoR9o.roa (hash: RbmaLbG1z0L4l1ON8n9W5icIKF2KnmAyzavN38bNAhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:8a:5c:a5:cf:df:30:a0:83:fb:50:43:1d:b2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
        Validity
            Not Before: Jun 28 13:02:09 2025 GMT
            Not After : Jun 29 13:02:09 2025 GMT
        Subject: CN=a46939e826dad1c5544dcee0677e1466c509c5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3e:fd:ed:e3:a3:62:3e:57:ae:76:76:ee:5a:
                    ee:96:c7:b7:35:80:5b:42:55:75:50:70:42:6b:ae:
                    46:c8:b5:57:6c:6d:8d:98:f0:2c:44:1a:8e:ef:bc:
                    d5:fe:9c:f5:50:c8:89:02:40:9e:ea:13:bf:da:3d:
                    6e:c3:88:fb:bb:1b:05:8c:e3:04:85:6d:c0:78:d3:
                    58:01:89:8c:15:4d:b1:17:4a:ee:17:16:b4:cd:22:
                    71:88:95:0d:b1:0a:7a:38:2e:a9:9a:99:2e:52:c1:
                    c0:7a:14:43:53:7d:1b:cc:25:1e:2d:19:94:a6:b0:
                    d1:92:78:0c:06:74:fc:1e:bb:ac:11:1b:4f:08:81:
                    ba:86:fd:a8:c6:c6:be:59:1b:62:13:f2:ad:a3:02:
                    5a:47:fe:44:a8:9d:6b:10:c0:b0:af:7c:8a:41:a4:
                    58:94:ba:6e:d2:05:33:42:fe:8c:82:e1:b6:fb:c7:
                    6f:1f:15:ec:b7:ee:47:af:bb:74:e7:5a:2f:d5:93:
                    42:17:13:40:ed:83:38:78:8c:ab:62:33:a5:01:6b:
                    87:b0:c2:4f:3e:91:1f:e9:ef:4a:d2:61:2e:0b:7d:
                    14:f1:01:8b:98:4c:b2:42:58:33:d5:2f:97:7d:fa:
                    6f:65:88:84:b8:e7:79:dd:f8:5a:14:da:81:41:87:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:69:39:E8:26:DA:D1:C5:54:4D:CE:E0:67:7E:14:66:C5:09:C5:DD
            X509v3 Authority Key Identifier:
                keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:b3:fa:0a:e7:ab:95:41:52:ac:82:34:da:5f:45:8a:c2:
         74:2e:f6:40:6d:97:1e:17:87:d3:92:04:19:1c:05:f7:26:99:
         c6:59:e8:d8:5e:cc:6e:db:f2:a6:98:f5:51:c8:e1:c6:02:95:
         04:ec:7f:0a:d8:0e:eb:3a:60:b7:65:b9:58:47:3b:49:67:2e:
         3c:92:11:bd:28:33:10:c4:35:4d:da:d2:44:61:dc:d5:04:74:
         c1:24:cd:2a:e6:05:a3:06:b6:33:d3:8e:71:40:20:c6:85:06:
         ea:17:22:cc:c1:97:6f:85:1c:ed:1f:68:9f:66:aa:c0:89:da:
         86:b2:ee:3e:5c:1d:df:1a:ba:68:fa:70:86:30:3c:8f:9d:f0:
         ca:90:72:14:8f:ab:45:12:31:b0:e1:9e:13:51:d1:3f:02:2a:
         eb:f9:78:30:79:54:20:6a:2c:a0:94:78:82:89:22:20:43:57:
         6d:81:d0:61:7a:18:ac:4e:f9:16:35:81:b6:1a:a6:86:21:ab:
         de:d5:49:dd:3e:56:8c:23:32:b7:62:34:0a:11:a5:5e:80:e6:
         19:da:4c:a3:a3:63:bc:43:88:98:2f:e7:b9:7f:d1:7a:7d:00:
         de:00:8b:47:2a:0a:d0:f6:07:9e:c7:fc:2c:37:cc:f3:89:19:
         11:c8:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:22 2025 by rpki-client