Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
File:                     6hnxNhI41O6MRqpBsJwyLGLIh_0.mft (raw, json)
Hash identifier:          GDPQwrejkXs2OYwhEaOgX/jCzzoY2Mx7U+2HGPVROu0=
Subject key identifier:   8F:1F:74:59:92:B1:BB:00:6B:02:6A:A7:28:BF:60:61:4A:2E:77:D4
Authority key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Certificate issuer:       /CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Certificate serial:       0196D0D08D6962F58CAD0911D4A2F732747B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
Manifest number:          14CB
Signing time:             Wed 14 May 2025 22:00:50 +0000
Manifest this update:     Wed 14 May 2025 22:00:50 +0000
Manifest next update:     Thu 15 May 2025 22:00:50 +0000
Files and hashes:         1: 6hnxNhI41O6MRqpBsJwyLGLIh_0.crl (hash: dDAb5VLdMK1/Ab+pphfOj9SWeBcyN54vNGSv/sUPsik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d0:d0:8d:69:62:f5:8c:ad:09:11:d4:a2:f7:32:74:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
        Validity
            Not Before: May 14 22:00:50 2025 GMT
            Not After : May 15 22:00:50 2025 GMT
        Subject: CN=8f1f745992b1bb006b026aa728bf60614a2e77d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:e7:34:62:2c:79:8b:52:f6:e3:db:44:f1:
                    e9:35:26:14:5e:7d:f0:28:5a:9d:87:bf:65:4b:6b:
                    59:71:52:8e:06:bd:b3:b9:34:00:d2:4a:52:f7:61:
                    3a:8c:07:49:b4:47:8e:45:f7:83:61:46:7e:32:cc:
                    e5:f7:13:09:91:87:95:25:fc:d3:8f:db:89:e0:f8:
                    50:8d:e6:61:92:33:e7:59:43:24:7c:9c:4a:be:d9:
                    7c:00:50:33:43:00:af:a9:97:a1:89:e7:1c:28:4e:
                    3a:cf:db:66:c0:a4:e6:b9:f6:96:23:71:e7:7b:69:
                    39:3f:8b:79:22:a8:e3:81:c6:4b:78:5a:77:38:59:
                    8d:80:ae:fc:d2:87:9d:0d:78:0e:04:d9:0a:56:36:
                    0e:4b:d5:37:91:ac:8c:f7:ef:b4:c0:95:3c:86:1a:
                    b4:c1:b0:c1:be:a7:9e:d2:05:55:60:a4:51:ed:43:
                    07:2d:7d:64:9a:55:08:87:1b:fa:d9:3d:9f:7c:2b:
                    c5:e5:ff:69:17:9c:be:f1:75:3f:35:d0:0b:c5:73:
                    1a:4b:7a:d5:7c:6b:e4:21:d4:e7:96:dd:c1:5a:db:
                    40:8d:5a:7f:0d:b5:c0:1e:9a:54:45:46:f0:4a:a2:
                    a7:72:8d:29:bc:97:d0:b1:69:f8:20:f6:f0:1e:84:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1F:74:59:92:B1:BB:00:6B:02:6A:A7:28:BF:60:61:4A:2E:77:D4
            X509v3 Authority Key Identifier:
                keyid:EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:3a:88:82:87:24:9d:61:0e:21:99:e5:87:9f:b8:f5:b0:7f:
         0b:cc:6c:79:4f:e8:6b:ad:fa:94:53:3e:36:d7:08:93:01:82:
         05:6b:83:0b:6a:a8:d6:1a:93:76:80:c8:87:71:e2:19:94:b8:
         34:40:4a:e7:c0:21:d5:69:96:8c:33:4f:e1:49:d1:0a:10:2c:
         ba:e0:ee:f6:5f:a3:c9:a1:97:20:86:7c:f9:c7:61:9d:41:75:
         99:91:17:fa:fe:f0:09:1c:d1:98:44:69:e4:f2:2e:b7:1e:33:
         de:b7:ee:74:de:9f:bc:12:e1:14:40:00:9a:20:4a:97:a1:67:
         11:fc:2d:58:05:bf:e3:90:3d:f8:71:bd:2f:99:40:54:e2:11:
         23:9d:a4:0e:c7:4f:5e:4a:d4:b6:0e:a0:47:47:a3:08:a4:b4:
         af:f1:39:d4:5d:3d:6d:cd:2c:ca:48:50:53:8e:37:f0:73:fd:
         d2:18:84:ac:d3:df:78:cb:06:05:6a:ba:82:79:36:f9:02:bc:
         86:52:b2:ed:7c:52:cb:d3:c0:23:a1:80:c5:32:1f:ae:b3:fe:
         06:01:e5:ca:c2:a2:53:73:26:26:1f:11:88:b0:20:36:5b:83:
         a9:4f:87:06:1c:d5:cb:b5:6c:24:76:12:89:05:42:e2:89:66:
         9f:21:9b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:11:52 2025 by rpki-client