Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
File:                     6A7DFjX02RuxExK6CjRlwY8jP2g.mft (raw, json)
Hash identifier:          9KskeqocaznIh6oZjsCiyoCab694wUpIsypNuBrAoNg=
Subject key identifier:   78:BB:0B:E7:26:1F:D1:75:48:C7:16:74:6C:50:D6:B8:C2:3B:73:1B
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Certificate issuer:       /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial:       0196A9F9E8825AC4D2BA1D9D784E6EE2B78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
Manifest number:          04AA
Signing time:             Wed 07 May 2025 09:00:49 +0000
Manifest this update:     Wed 07 May 2025 09:00:49 +0000
Manifest next update:     Thu 08 May 2025 09:00:49 +0000
Files and hashes:         1: 6A7DFjX02RuxExK6CjRlwY8jP2g.crl (hash: nI1W8PwOWZQUCmsMsnr14oM2qZJVMNfKA/VPuMQhqsc=)
                          2: jmdaY3jB9wAV5m6viUDXvKemdCo.roa (hash: KjRHU7c80LizE/Q/1z0ur21E4KmnhATUY3o4TcjtpmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a9:f9:e8:82:5a:c4:d2:ba:1d:9d:78:4e:6e:e2:b7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
        Validity
            Not Before: May  7 09:00:49 2025 GMT
            Not After : May  8 09:00:49 2025 GMT
        Subject: CN=78bb0be7261fd17548c716746c50d6b8c23b731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:46:49:1a:3e:7b:b0:38:ca:c3:50:05:19:51:
                    83:1a:f8:cf:14:6c:17:44:e9:a4:0e:27:33:ef:e0:
                    b1:5e:8d:1c:9b:e6:ba:c2:2c:9a:bf:df:04:6f:89:
                    e1:ac:4d:7b:fd:cc:dc:30:19:88:7b:a7:cd:33:65:
                    64:cf:ef:9b:eb:0a:ff:65:9e:fd:76:8d:1c:4c:da:
                    6e:ce:47:a7:5d:15:73:f4:3e:b1:0c:50:89:ca:9a:
                    d3:b4:c0:0a:3f:01:85:3f:1b:8c:2c:8e:b0:b9:93:
                    3d:50:39:e1:95:93:56:40:e4:13:8d:2f:ea:91:60:
                    4a:7e:ac:41:1d:c7:3f:90:58:bb:b3:60:a0:57:58:
                    2f:b5:33:5b:61:7f:a7:85:77:5e:b4:5f:e2:fa:9d:
                    71:fb:28:c1:06:23:c1:33:70:e7:09:56:e2:49:67:
                    80:7e:56:28:fb:69:3e:5d:ff:8d:fe:98:52:e0:cb:
                    5a:d1:e3:a8:80:de:bd:5b:02:e4:fb:47:14:f4:67:
                    e2:1a:a3:c8:8f:75:62:a6:6f:83:13:f6:b2:f3:ed:
                    5e:e4:51:00:11:1f:9f:a2:26:2f:c3:c0:00:ce:24:
                    82:d0:03:30:2c:1e:67:52:08:03:21:97:51:9f:b8:
                    97:a0:98:7d:2f:ba:0c:e8:4f:0a:1b:7e:a8:60:a8:
                    d8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BB:0B:E7:26:1F:D1:75:48:C7:16:74:6C:50:D6:B8:C2:3B:73:1B
            X509v3 Authority Key Identifier:
                keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:9c:1a:5e:77:2f:d5:b3:d5:9e:cc:61:e6:9a:1c:de:43:
         42:a1:67:cf:e4:0d:09:e9:d7:bc:b0:28:c0:51:82:3b:d3:6f:
         e6:54:08:b2:66:18:77:06:28:51:64:33:9a:df:37:70:09:4b:
         90:5c:98:8f:bc:63:b7:a2:06:5c:68:1d:33:e2:57:07:24:8d:
         d7:1e:b3:9c:15:e8:63:83:3f:c1:89:9b:13:67:3b:19:53:a4:
         e8:50:b2:98:0e:b0:69:97:cc:32:70:f8:8a:0f:48:b3:8d:a4:
         21:04:27:d2:7e:13:fb:65:da:48:c4:e4:bd:49:d1:4e:73:a1:
         63:db:2c:89:f3:65:c5:9d:b2:e2:f6:8c:25:30:0e:f8:ea:22:
         77:02:9b:05:97:1b:a9:bc:4c:4d:42:44:3b:73:30:2e:2a:b3:
         f2:8d:9d:5a:d7:50:b4:09:27:92:63:22:28:c5:6b:df:7c:8a:
         43:5b:c7:96:b1:d0:f8:c4:92:37:31:33:bd:b8:30:8c:07:65:
         bd:5e:bb:aa:91:d8:e2:0f:22:d4:33:57:30:6f:2d:14:8f:51:
         63:59:f3:28:92:17:d6:56:7a:cc:26:5c:6e:ae:66:16:ab:d0:
         1b:a4:fb:cf:9c:05:5d:80:0b:53:84:60:46:50:85:49:8a:0b:
         ef:7e:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:06:25 2025 by rpki-client