Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
File:                     HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json)
Hash identifier:          dNCaKOJrBYyeZlUzmFWpxVVLOXhYpn/m5CDqw6HILb8=
Subject key identifier:   6C:2F:F6:2B:80:0C:48:65:B3:F0:59:50:67:9C:E0:6D:C9:E1:F5:10
Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA
Certificate issuer:       /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
Certificate serial:       0196BB91F980335C5ADDF929219105F0F12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
Manifest number:          0BC6
Signing time:             Sat 10 May 2025 19:00:27 +0000
Manifest this update:     Sat 10 May 2025 19:00:27 +0000
Manifest next update:     Sun 11 May 2025 19:00:27 +0000
Files and hashes:         1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: jm6RFYILu0fAFIioXsCgQjQ3gbPriP5Ox1V7FjNlTKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:91:f9:80:33:5c:5a:dd:f9:29:21:91:05:f0:f1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca
        Validity
            Not Before: May 10 19:00:27 2025 GMT
            Not After : May 11 19:00:27 2025 GMT
        Subject: CN=6c2ff62b800c4865b3f05950679ce06dc9e1f510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:94:6d:dc:2d:a4:21:c9:67:7d:2b:f1:97:9c:
                    a5:04:dd:b7:8e:9a:9b:1b:0f:25:53:25:a4:f7:15:
                    71:f3:f5:63:b5:b9:78:31:16:2f:08:43:7b:22:ab:
                    67:42:ea:fd:ee:5d:a6:66:51:de:37:23:ff:a0:52:
                    a6:d1:77:78:99:eb:c0:2b:30:4e:3b:c9:fc:9f:a7:
                    bb:ae:95:e7:40:e2:bb:26:a2:09:62:dd:5b:51:2c:
                    a4:32:20:69:4a:a1:30:ab:56:13:5a:11:bf:ac:44:
                    2f:72:e2:cd:6d:a7:41:91:a7:2e:01:a9:0a:e1:2d:
                    1e:d5:fa:aa:76:92:e3:6c:29:e9:bf:fa:cc:b1:5c:
                    e4:e6:24:20:64:29:49:e4:4a:ce:76:a8:8b:06:45:
                    ab:a5:eb:b3:56:3d:7a:30:0a:96:90:1c:72:8d:ce:
                    24:72:5b:fb:11:a2:33:99:d6:6c:10:58:62:f0:3e:
                    59:a3:0c:77:ec:4e:d7:d0:e5:01:3f:48:45:0b:96:
                    e5:69:cd:91:92:ad:ab:10:fc:63:88:8a:76:3a:c7:
                    0e:26:50:75:82:7a:c7:f1:cd:c0:8f:90:3b:18:58:
                    a6:73:bf:81:c8:af:c9:c3:09:7d:d7:a7:75:11:be:
                    1c:4a:a5:f9:dd:ab:b0:96:a0:f5:5f:78:e4:d3:d3:
                    0f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2F:F6:2B:80:0C:48:65:B3:F0:59:50:67:9C:E0:6D:C9:E1:F5:10
            X509v3 Authority Key Identifier:
                keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:b8:dd:36:9e:52:b9:4c:76:36:f1:8f:9e:16:3e:de:2f:
         d0:f6:54:00:83:2b:88:6e:85:c3:46:ce:e4:65:21:2f:bc:6a:
         f9:07:dd:6c:72:92:c3:d5:3b:e5:4b:32:79:93:1e:08:02:c8:
         bb:b6:1a:cb:d8:11:2f:73:dd:ac:f7:47:44:57:f5:c4:25:28:
         56:a6:26:d4:b1:f1:a4:8f:a9:41:e5:3b:f6:23:5b:9f:1c:6b:
         13:80:c6:45:2c:e2:00:49:5d:3c:d7:95:06:14:fb:8e:bd:03:
         b6:4d:e5:08:b6:06:06:1f:57:97:e0:be:78:f0:eb:42:9a:a5:
         61:d0:24:9e:82:4b:49:ef:55:0a:b9:99:b5:8a:7a:f5:84:ee:
         ba:93:4d:2b:ba:ef:21:52:fc:25:bc:27:e1:81:94:54:0a:c1:
         6a:44:7a:02:5a:18:65:9d:3e:f2:f9:fc:53:53:16:be:c9:5f:
         da:21:e7:a1:9e:80:21:46:cf:6b:55:2c:2e:3b:3b:b0:a2:7e:
         04:31:97:b6:5a:14:ec:ae:d5:bb:99:0c:e4:46:bb:d4:f2:21:
         b3:3a:71:21:4f:52:5f:d9:ee:08:85:95:a6:90:09:28:be:28:
         f6:0d:d6:dd:39:54:c6:ef:19:96:10:bd:5a:5f:45:f2:c4:ab:
         78:50:df:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:25:57 2025 by rpki-client