Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
File:                     s6qVFyKhmXGkTmLKktHJEoTRLiE.mft (raw, json)
Hash identifier:          MtQVsQ7LGG5vtWOIqlCxq/NXkVMZA+25Y2IGXN9z3aE=
Subject key identifier:   66:92:33:FB:B1:CC:14:E2:6E:10:29:F8:1F:1F:D4:79:B0:2E:36:21
Authority key identifier: B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21
Certificate issuer:       /CN=b3aa951722a19971a44e62ca92d1c91284d12e21
Certificate serial:       0196B28F4413D67FA3E230A7A35DABF5816F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
Manifest number:          152F
Signing time:             Fri 09 May 2025 01:00:55 +0000
Manifest this update:     Fri 09 May 2025 01:00:55 +0000
Manifest next update:     Sat 10 May 2025 01:00:55 +0000
Files and hashes:         1: fcyT5TdBuZSpYCMKnr2rChuJmjI.roa (hash: Fmex2r2S8TmdcqcCkZmisW8YFG5UQhik8Ca5wAVTb7s=)
                          2: s6qVFyKhmXGkTmLKktHJEoTRLiE.crl (hash: jmfbMZloLEcuiW36Et/sfl/hJi9JMZI4aXOLeZNzOGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:8f:44:13:d6:7f:a3:e2:30:a7:a3:5d:ab:f5:81:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3aa951722a19971a44e62ca92d1c91284d12e21
        Validity
            Not Before: May  9 01:00:55 2025 GMT
            Not After : May 10 01:00:55 2025 GMT
        Subject: CN=669233fbb1cc14e26e1029f81f1fd479b02e3621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:19:41:27:4f:c6:3b:11:b5:df:63:27:ee:9b:
                    8c:eb:f0:9a:52:23:04:83:39:ba:9b:41:7e:62:06:
                    c5:1c:07:5a:1d:bc:cf:0e:9f:e5:71:8c:59:ad:b7:
                    fb:6b:d0:c6:a9:c8:f4:e1:5d:fc:3d:63:05:4e:b5:
                    b9:a3:bc:0d:f6:6d:03:d0:f2:dd:70:10:11:49:e6:
                    14:21:0a:20:43:8e:e5:1e:b9:39:39:92:39:39:75:
                    83:e8:a2:6b:fe:28:70:39:d9:dc:a5:d2:a5:bb:e9:
                    da:6b:5f:62:ab:98:71:10:f8:71:21:8e:80:0d:15:
                    33:55:ae:29:b2:fe:43:59:23:2b:c5:6c:62:80:b9:
                    52:7b:0e:c0:cc:93:9b:80:0c:56:bc:db:25:ee:3a:
                    dc:7c:b5:d7:30:ab:83:3f:5b:f6:9a:8c:2e:d0:c7:
                    ca:70:15:c4:ab:1c:3b:48:a8:d8:5d:92:08:97:93:
                    78:56:ad:6d:3b:6d:2b:c0:73:4c:b3:2b:00:f2:08:
                    86:5b:03:e2:a8:bc:d3:99:7b:ac:e1:69:59:4a:b4:
                    81:35:92:aa:73:30:67:b8:44:a9:29:18:65:88:f7:
                    9c:c3:47:bd:b3:a1:8d:1b:03:21:2d:7f:5d:5c:a9:
                    d6:fa:81:ee:a4:be:c5:ca:6f:aa:40:49:21:d0:40:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:92:33:FB:B1:CC:14:E2:6E:10:29:F8:1F:1F:D4:79:B0:2E:36:21
            X509v3 Authority Key Identifier:
                keyid:B3:AA:95:17:22:A1:99:71:A4:4E:62:CA:92:D1:C9:12:84:D1:2E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6qVFyKhmXGkTmLKktHJEoTRLiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fdea7c-a1bc-48a9-acd3-a003c4b61a5f/1/s6qVFyKhmXGkTmLKktHJEoTRLiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:16:c4:d0:61:f7:d2:b9:b3:8c:44:30:59:fe:99:d9:66:ce:
         9c:f8:f9:58:99:fd:11:62:05:45:37:16:73:d7:9a:5a:6a:98:
         66:88:fa:42:a8:48:95:c4:ab:6d:20:00:cf:5f:22:97:b0:a7:
         51:55:3d:31:2e:18:27:f2:72:92:83:b4:59:20:6b:a8:a8:93:
         f9:9f:d4:b5:97:01:9b:23:c9:a2:5f:77:8c:d5:6e:08:6b:e5:
         da:5c:ca:4a:ad:b5:4d:29:f1:23:5b:b3:a9:67:63:5e:26:0b:
         f4:3c:1a:c7:00:fa:23:f4:52:c9:68:cb:56:81:bf:51:d6:a5:
         2f:6d:0b:d3:22:d3:8f:64:a0:fe:0e:3e:6b:eb:1a:c3:f2:ca:
         a3:9f:94:a7:e9:95:bc:18:e0:fa:76:6c:d1:fb:f4:8f:7d:6a:
         9f:50:be:3f:bf:55:18:3e:78:14:bc:f0:7e:1e:95:41:f3:b4:
         50:0c:81:7e:fd:3d:aa:56:71:a4:c9:ea:06:74:dc:60:3d:33:
         f7:f9:fb:11:0a:cf:78:6a:c1:52:6d:3d:e2:fb:d2:27:54:bf:
         70:05:99:75:2b:69:85:36:e4:dc:e0:2d:90:46:4a:5d:c6:d6:
         6e:33:fb:b0:73:99:0a:6b:35:c3:e6:66:9e:f9:c6:5a:57:36:
         56:2c:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:21:32 2025 by rpki-client