Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
File:                     6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft (raw, json)
Hash identifier:          q6xZ0QKhEPKEG8HJDCuOikqEerVW7xQGTsXJELULTKc=
Subject key identifier:   74:8F:48:D1:44:0A:A9:DF:D3:19:C8:F7:60:53:CE:CE:55:48:FB:86
Authority key identifier: E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91
Certificate issuer:       /CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
Certificate serial:       0196CF4FA6827C540622BF871055D4041463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
Manifest number:          1540
Signing time:             Wed 14 May 2025 15:00:25 +0000
Manifest this update:     Wed 14 May 2025 15:00:25 +0000
Manifest next update:     Thu 15 May 2025 15:00:25 +0000
Files and hashes:         1: 6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl (hash: w/oq/eIHTwzKG3rWmGN2xKED8g+OTS/mZe/teHh2AOg=)
                          2: FI0vaC_-wS4Ctp40wQ6DLlcQC5Q.roa (hash: /18Wg9WgOUF/QfCmOwGmGVq/qijiG5C2ckmZROjPcZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cf:4f:a6:82:7c:54:06:22:bf:87:10:55:d4:04:14:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e89f228577fa91b2709e70b819ff469c4cc2ea91
        Validity
            Not Before: May 14 15:00:25 2025 GMT
            Not After : May 15 15:00:25 2025 GMT
        Subject: CN=748f48d1440aa9dfd319c8f76053cece5548fb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bd:86:5d:6f:b7:0e:fb:47:c7:dc:83:57:11:
                    d4:4f:2d:80:6c:4d:f1:2e:f7:fc:6e:91:e4:fc:87:
                    91:61:40:8d:0f:76:2c:a9:ac:e5:79:e4:47:61:ee:
                    b3:c2:62:17:57:82:3a:e1:0a:90:6c:48:cd:c9:59:
                    f6:c3:cc:8a:e0:92:4f:ca:09:bb:20:b7:73:c7:6a:
                    21:83:7f:ba:a4:c1:c2:cd:3e:17:ab:81:65:3d:44:
                    d4:1f:ba:cb:98:6f:c2:66:49:02:0d:df:d0:fc:f8:
                    4e:70:6f:bd:53:90:70:11:74:b3:75:6d:8e:f0:b1:
                    68:a3:50:18:69:90:96:64:8f:44:a1:74:13:85:1e:
                    52:dc:2e:01:69:23:0c:60:e6:80:d8:d5:af:46:b9:
                    96:76:89:82:71:08:48:c8:75:75:61:d7:09:b6:9b:
                    72:24:f1:bf:14:15:49:56:0a:85:d9:39:e2:4b:50:
                    9f:bc:57:03:b4:55:e2:90:a6:5f:bf:fa:f6:53:23:
                    a0:8f:a0:cb:5d:e0:f2:0e:c6:69:b2:61:c3:5c:56:
                    b1:a5:51:c3:9c:3d:e2:70:a2:67:d8:61:d3:42:4d:
                    c0:72:fe:f0:77:9b:0f:3a:cf:7d:28:be:58:85:ba:
                    48:52:d7:67:71:a4:8f:c7:8e:68:fa:31:12:e1:d0:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8F:48:D1:44:0A:A9:DF:D3:19:C8:F7:60:53:CE:CE:55:48:FB:86
            X509v3 Authority Key Identifier:
                keyid:E8:9F:22:85:77:FA:91:B2:70:9E:70:B8:19:FF:46:9C:4C:C2:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9e5259-3d31-402d-b390-4c8fae529936/1/6J8ihXf6kbJwnnC4Gf9GnEzC6pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:35:3d:91:6a:f7:30:03:ca:b6:3d:33:f3:9e:b0:77:2f:c5:
         b7:34:43:8d:7c:29:9f:52:25:bd:2b:00:b9:f2:ea:e7:8e:5a:
         d5:fe:e2:58:69:c9:99:ce:d7:f4:4b:42:21:21:e1:c6:17:63:
         fa:9a:14:b6:97:a6:77:5c:78:89:4f:3d:3e:64:ca:72:25:cb:
         07:10:3b:5f:3b:8a:38:eb:d8:37:51:8b:a6:ea:4a:57:02:c6:
         70:1e:96:48:f8:a2:4c:cb:89:1b:96:59:6f:94:f8:91:2c:c9:
         7f:4b:fc:e6:94:b1:e9:93:d1:6d:13:ac:f7:63:4e:c9:96:a2:
         ca:58:7e:c7:21:78:26:dd:99:28:3d:6b:5f:86:96:82:89:5e:
         f2:60:d6:62:30:85:03:16:10:f3:ea:1c:5c:56:1c:aa:63:d5:
         65:8e:fd:63:9a:86:7f:7c:27:65:d5:a5:76:1e:fc:a4:e6:5a:
         08:dd:4b:0a:08:c2:c2:82:40:56:8a:ef:fa:e9:a1:86:15:aa:
         69:e3:7f:df:65:21:66:b4:d2:af:bc:48:c6:13:1d:18:8e:6f:
         2b:14:fa:72:b2:46:df:24:7b:ff:4b:c9:6c:3f:fa:19:75:84:
         f9:9c:f4:fe:55:f1:4a:6b:30:1d:2f:b0:79:de:38:a4:b2:1b:
         12:06:0a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:06:18 2025 by rpki-client