Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
File:                     6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft (raw, json)
Hash identifier:          /NoV5xQ/qZ0gOkunEyNP9ehVEf+zTqEfHdWp+NQxkMg=
Subject key identifier:   82:11:94:79:18:A5:F2:32:66:CB:1B:47:BE:A5:BE:EA:12:9B:E8:32
Authority key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Certificate issuer:       /CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Certificate serial:       0196BC0068D07203B74894DE7D00842F5088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 21:01:05 +0000
Manifest this update:     Sat 10 May 2025 21:01:05 +0000
Manifest next update:     Sun 11 May 2025 21:01:05 +0000
Files and hashes:         1: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl (hash: 5lFHXXFDXRnxtmJKGgIGuaI37MMNgePCWxkuqMxcGTY=)
                          2: GK0Bp6TP9K4-qwdEgsDkQHad0Jw.roa (hash: vbPhg+vd0Vmphw6uDH8Qj3C//m4qsvwfSx93uUcGgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:00:68:d0:72:03:b7:48:94:de:7d:00:84:2f:50:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
        Validity
            Not Before: May 10 21:01:05 2025 GMT
            Not After : May 11 21:01:05 2025 GMT
        Subject: CN=8211947918a5f23266cb1b47bea5beea129be832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4f:0b:ea:54:70:02:7d:df:fc:45:12:8a:e9:
                    df:18:0e:ef:8b:35:cd:e7:14:4e:03:57:77:c1:75:
                    75:50:db:4c:71:06:03:b1:e7:a8:84:14:52:fd:fd:
                    21:10:50:99:04:72:2a:b6:b5:3f:32:d7:d7:dc:c0:
                    38:a2:b9:b0:c9:54:d7:a7:62:e2:69:00:7a:91:d1:
                    94:06:17:cc:bd:88:07:43:9a:1c:f7:39:72:37:89:
                    cf:0c:70:52:6b:24:ed:a5:ab:01:29:94:5e:77:f0:
                    58:ac:bb:a8:4d:52:67:df:7f:02:e1:ca:f3:b0:2e:
                    30:ab:9b:5b:d9:57:48:bd:a2:99:19:26:05:62:82:
                    21:da:2b:df:eb:20:06:a5:1d:d0:30:e4:c0:76:6f:
                    ab:c8:97:24:a4:44:6b:cc:b3:74:44:a9:4a:cd:7e:
                    36:d6:62:39:e5:ec:19:91:32:87:e8:9d:75:0b:f1:
                    3f:b4:eb:0c:26:d4:3d:42:d7:ca:a4:8c:6f:e0:95:
                    35:54:e7:9b:53:33:d3:6b:93:16:e2:fa:1c:94:5a:
                    e2:68:7f:71:df:7d:9f:53:79:d5:d2:d7:7b:b1:cd:
                    b5:92:41:2f:9d:d6:10:e0:73:17:3f:74:b4:10:9d:
                    be:fd:04:23:d8:90:d3:48:11:4f:9a:0c:81:42:09:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:11:94:79:18:A5:F2:32:66:CB:1B:47:BE:A5:BE:EA:12:9B:E8:32
            X509v3 Authority Key Identifier:
                keyid:E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:05:27:2d:92:db:e4:af:66:2f:2b:7c:71:a9:90:a8:f8:
         cb:2d:10:f1:24:93:80:cc:2c:0b:7f:7f:72:d9:dc:ba:b4:e7:
         3a:bf:7f:27:09:b8:00:fa:16:57:dd:f2:8a:2b:30:8d:c0:0b:
         be:55:f7:6e:60:23:51:e3:03:0a:17:22:b4:a8:4c:a1:af:2b:
         11:d7:e7:67:43:d8:b9:77:b4:3b:59:4c:ab:6b:a2:1e:9e:e5:
         b3:26:ea:3e:d3:0b:07:80:eb:0a:ac:a1:c3:24:8d:08:b7:37:
         d5:9e:72:05:d7:a5:e7:d8:92:0a:28:8e:3e:e6:3d:b2:e8:9b:
         ce:d0:35:d9:ff:1d:75:3b:36:ae:47:b6:6d:56:84:3b:81:9d:
         99:01:b5:a2:aa:9f:1c:20:55:e6:cb:46:e3:38:50:8d:89:9d:
         c4:11:00:2b:5d:56:d3:76:1f:0d:5b:00:e9:80:4c:03:d7:a3:
         09:f0:90:66:66:25:7f:78:5a:45:5e:19:c7:ed:2e:49:92:f6:
         65:aa:3f:08:d4:47:8e:70:58:a9:93:ee:12:61:28:7c:c9:00:
         fc:56:6b:49:c2:66:95:fb:d4:df:e4:77:2b:9d:70:3c:d1:65:
         3e:8c:36:86:69:61:b7:f3:d0:bb:93:79:e8:f9:e7:ad:dc:ad:
         08:f4:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:57:33 2025 by rpki-client