Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
File:                     6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft (raw, json)
Hash identifier:          7HdRyGDE5uy+SrB3tb83ppa6EyR+5WWCe3ZJej3vw90=
Subject key identifier:   DF:A6:86:F9:AB:17:72:1C:F0:C3:16:2B:DF:FB:F2:50:98:B1:15:48
Authority key identifier: EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0
Certificate issuer:       /CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
Certificate serial:       0196BE5C9DEDA92C8F68AB9DB291A55F7DB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
Manifest number:          0E35
Signing time:             Sun 11 May 2025 08:01:02 +0000
Manifest this update:     Sun 11 May 2025 08:01:02 +0000
Manifest next update:     Mon 12 May 2025 08:01:02 +0000
Files and hashes:         1: 6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl (hash: X9JZvSD/YUb/5tzWT64kRNnlhuVZxWrsdxfdy04IalI=)
                          2: bbiCAC8k2CawpBPgM6fTMAmYAY0.roa (hash: FIWbsZ3JZZD2fluaVWFHhluHhUwUg7ek5YY8fTNR7Ow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:9d:ed:a9:2c:8f:68:ab:9d:b2:91:a5:5f:7d:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb36779b13aec780b0d437f8444ab0f443a05dd0
        Validity
            Not Before: May 11 08:01:02 2025 GMT
            Not After : May 12 08:01:02 2025 GMT
        Subject: CN=dfa686f9ab17721cf0c3162bdffbf25098b11548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:72:0c:da:e4:45:57:1e:34:33:b4:10:07:
                    dc:1a:12:19:ee:83:1f:33:5c:66:a5:1a:df:54:8b:
                    d5:f6:ec:2d:e6:94:08:e8:18:34:c2:12:ad:be:2a:
                    3c:ba:da:bc:3e:d6:50:3d:d4:02:f7:a9:4c:98:4f:
                    07:99:c2:94:35:d7:cd:61:62:c4:02:8e:ad:b4:ad:
                    70:63:b7:70:bf:72:be:1c:73:3c:0f:24:08:42:b0:
                    55:d0:5f:ef:6c:e9:2e:7e:e9:83:b7:72:ba:6e:e7:
                    d6:1e:72:bb:42:b3:a5:b7:7d:b5:99:c4:aa:2d:c2:
                    a3:26:b3:56:55:d6:c8:42:20:19:dd:49:04:68:c5:
                    53:2e:47:ae:c4:72:d5:61:11:01:fd:86:32:b2:50:
                    1b:a7:2e:2e:c4:d6:a3:4e:73:e3:ca:de:0a:7b:88:
                    6a:8d:ba:c8:80:3f:f7:62:16:aa:04:55:11:17:d7:
                    64:37:42:ba:be:9b:d1:22:8e:b8:0a:7c:05:7b:51:
                    0d:94:29:9c:b6:f2:db:6d:47:f2:e4:85:eb:4b:bc:
                    2f:58:00:0e:8d:c8:8e:be:3f:57:57:3e:99:35:b6:
                    17:be:82:2f:fd:8c:de:8c:b8:fe:3b:19:91:ca:20:
                    9d:22:b6:fe:b2:2a:f0:a0:d4:07:9f:da:ec:51:62:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:86:F9:AB:17:72:1C:F0:C3:16:2B:DF:FB:F2:50:98:B1:15:48
            X509v3 Authority Key Identifier:
                keyid:EB:36:77:9B:13:AE:C7:80:B0:D4:37:F8:44:4A:B0:F4:43:A0:5D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zZ3mxOux4Cw1Df4REqw9EOgXdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9864ff-6341-4004-ab6d-0f3b9c05de45/1/6zZ3mxOux4Cw1Df4REqw9EOgXdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b0:c5:89:74:1b:67:08:69:d7:06:3d:e4:c5:d7:00:c1:20:
         bb:6c:fd:a0:cb:80:5d:5f:85:74:d8:ae:82:41:45:98:8f:4e:
         4f:a0:75:7b:c3:56:a3:30:14:b3:ec:24:73:cc:2d:7c:d3:0b:
         f5:4d:57:90:f6:b3:c9:b0:cf:50:ca:b4:6b:31:65:80:54:75:
         eb:95:66:88:3f:47:19:4f:61:95:06:e9:38:20:82:d2:b2:95:
         0a:f3:72:ab:0d:19:e1:32:bc:86:93:04:3b:da:ad:4a:87:05:
         d2:62:ff:1f:59:f4:f3:84:95:2a:d7:14:aa:7f:59:e6:3a:1e:
         55:7d:ec:d2:02:6b:f4:fc:10:16:d3:20:99:7d:6b:ae:fa:a0:
         16:fe:c5:32:90:79:21:dc:73:58:1d:4e:97:a8:35:6a:ee:45:
         08:89:dd:2f:ec:a1:18:df:8f:99:e1:57:ec:1a:e6:9c:eb:98:
         d2:ae:ac:9a:b5:ad:b1:b5:66:b1:bd:66:cb:bf:42:c2:bc:6e:
         61:d5:a2:bd:c8:7a:01:f1:f1:7f:f9:7e:27:8f:5b:05:a0:a6:
         9a:e4:2e:50:5d:a2:ab:8a:98:f7:16:20:5f:3f:ec:86:29:17:
         6d:9d:56:c6:50:43:45:3b:38:ef:cc:1c:79:4b:0e:1e:d6:b8:
         c1:2f:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:35:02 2025 by rpki-client