Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
File:                     p6dweK84e0jXCBDrFgTfCt4Rj9o.mft (raw, json)
Hash identifier:          D4PLxgmzjvEXKdfQa3sS2d4928Ljc56Wv8Ef4x5etYE=
Subject key identifier:   EA:C7:48:35:D9:E0:46:45:15:0B:84:3F:3A:0A:F4:B5:E7:F1:EB:71
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Certificate issuer:       /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial:       0196CCBC61A42B5AF6A1D14E7AAE51EEE804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
Manifest number:          117C
Signing time:             Wed 14 May 2025 03:00:19 +0000
Manifest this update:     Wed 14 May 2025 03:00:19 +0000
Manifest next update:     Thu 15 May 2025 03:00:19 +0000
Files and hashes:         1: 9xMeWe1NRlriC37gII2JZoSHiUQ.roa (hash: v9S3o8GCSV8SJhwMOSoO5rVmagcl/wlT4/BQbEi4mBI=)
                          2: p6dweK84e0jXCBDrFgTfCt4Rj9o.crl (hash: sdVXf9dvJ6ZKoaZeCCUDAoeJGWkft3CBOctXD+/BJro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 03:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:bc:61:a4:2b:5a:f6:a1:d1:4e:7a:ae:51:ee:e8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
        Validity
            Not Before: May 14 03:00:19 2025 GMT
            Not After : May 15 03:00:19 2025 GMT
        Subject: CN=eac74835d9e04645150b843f3a0af4b5e7f1eb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:d9:bb:b7:d3:08:06:c4:d5:cc:2a:9b:76:
                    ab:87:97:2c:73:c6:db:81:d1:07:68:66:71:1a:28:
                    8c:e6:07:01:9b:d0:a2:a7:09:8d:a6:78:e5:27:43:
                    12:43:2a:bc:42:0f:fd:bf:e2:b8:ed:8a:80:af:5f:
                    e1:1f:8c:6e:50:f6:4b:11:c1:72:60:e3:a2:66:2e:
                    fd:1a:7e:7c:e6:cf:7b:69:03:85:1c:e9:d2:0c:1b:
                    0a:7d:d4:8e:3f:24:8c:84:9f:c0:ac:34:ea:1f:4e:
                    fc:42:e6:25:22:18:9d:c5:29:4f:f2:eb:2b:6a:df:
                    d3:ce:02:7b:a3:19:49:f7:1e:1a:be:df:e8:86:2a:
                    d5:89:bf:71:61:6b:18:13:d2:21:63:41:1b:4d:ec:
                    e8:94:d8:15:4b:63:ea:40:da:db:af:c9:4b:4b:cb:
                    46:e3:d2:d3:9d:ed:f0:c6:3d:c4:5f:c0:53:c3:15:
                    1c:b7:b3:a3:bd:55:32:8f:12:a1:0c:52:78:3a:8e:
                    8d:54:89:e9:1c:71:f5:7c:3b:e4:41:85:7f:4e:71:
                    62:ac:c4:69:ab:6e:db:13:ed:54:25:49:25:1b:ee:
                    90:1a:61:92:5a:67:e0:8e:17:e4:f7:a5:0d:93:e9:
                    50:71:4e:b9:a9:f3:85:51:08:6d:af:29:9d:ad:48:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:48:35:D9:E0:46:45:15:0B:84:3F:3A:0A:F4:B5:E7:F1:EB:71
            X509v3 Authority Key Identifier:
                keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:8a:3d:0b:20:62:af:7f:4b:b2:b4:d9:48:8d:9a:24:bb:02:
         ad:a5:91:23:dc:b3:48:3a:4b:5f:d4:3b:fa:c0:9b:82:41:59:
         d2:dd:8f:ac:e1:2f:e0:0b:8e:97:61:04:4a:24:9c:fa:b0:68:
         84:24:7f:01:02:82:02:dd:85:b3:e6:d5:5c:cb:ec:c5:85:ca:
         a2:c2:cb:02:e3:56:14:7b:00:48:a1:8b:ca:dd:47:d4:4f:f5:
         da:7a:8c:42:85:e7:8e:00:66:15:27:a4:40:4b:d4:ca:9d:15:
         89:45:31:22:73:2d:95:85:6e:7c:c9:1d:5a:2b:eb:63:ba:22:
         6c:4a:2b:f9:6e:d8:43:a4:95:17:03:17:59:3b:ba:58:16:8c:
         6f:3c:1a:79:76:6b:99:94:40:ab:d0:8e:a2:66:1a:8c:7c:9b:
         b0:e7:57:af:54:69:60:5b:89:f3:c9:30:b4:6f:36:5d:76:49:
         ef:27:31:2e:89:9e:af:15:2a:07:cf:c4:86:92:91:c9:0e:1b:
         f8:1b:43:ed:7c:32:d0:9b:92:46:0b:ac:9c:db:67:1b:32:7a:
         e0:6f:6e:1d:52:cc:17:ff:38:7a:ec:d7:60:3c:0e:dd:4a:a5:
         6f:e8:c9:b7:82:eb:eb:d5:ea:9f:15:67:93:b8:c3:47:ea:53:
         08:43:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:33:02 2025 by rpki-client