Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File:                     1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier:          J+T8DQx6UM0KWPtVfVs2M9bcaRC3yt5RwVxfXqpcTv0=
Subject key identifier:   A8:F3:36:F5:42:A0:42:67:00:14:66:F5:83:EC:03:70:EE:7C:A7:FD
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer:       /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial:       0196C5DE9C6925394B6060CE245C9C420063
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number:          14C7
Signing time:             Mon 12 May 2025 19:00:22 +0000
Manifest this update:     Mon 12 May 2025 19:00:22 +0000
Manifest next update:     Tue 13 May 2025 19:00:22 +0000
Files and hashes:         1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: 4vHG0veHIIrxzVVg4J3D8zMKT3DGAmOIQdDKcyXGOXc=)
                          2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:9c:69:25:39:4b:60:60:ce:24:5c:9c:42:00:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
        Validity
            Not Before: May 12 19:00:22 2025 GMT
            Not After : May 13 19:00:22 2025 GMT
        Subject: CN=a8f336f542a04267001466f583ec0370ee7ca7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:07:ee:c1:b3:c6:3b:d9:63:b8:df:26:d8:
                    f8:b4:3c:bf:0f:79:70:b9:aa:70:56:af:94:17:27:
                    3d:2d:10:a4:d0:7e:93:4e:2d:98:66:9a:c8:cd:c8:
                    ee:fe:f5:72:0b:01:a4:ef:d6:30:21:ea:80:85:02:
                    a5:78:93:55:ac:f0:1c:49:a4:a9:cc:16:40:cd:62:
                    7c:12:21:e9:9a:b9:70:fd:90:56:2b:df:96:04:ee:
                    19:04:ae:cb:38:0b:da:ce:65:36:cf:61:5f:11:3e:
                    5c:9a:98:bd:40:4f:49:e4:f0:f4:25:c6:8a:96:92:
                    42:48:01:1e:32:51:76:2c:43:03:c4:ad:de:72:60:
                    4f:4f:04:e1:b5:6b:d1:99:04:7a:20:22:61:64:5e:
                    ec:07:33:3a:69:ae:26:d7:31:43:b4:96:ed:36:24:
                    33:df:01:31:b9:f1:44:ca:8b:c5:b4:2a:b5:93:70:
                    f9:5f:e5:cb:59:a7:44:46:6a:cb:1e:6f:5d:ef:14:
                    f6:d6:08:8b:21:26:5a:8f:44:e2:0a:4c:6d:b5:8e:
                    13:51:55:22:06:90:50:a2:28:6d:77:aa:e6:79:6b:
                    94:c7:6b:94:80:c1:48:98:eb:c1:f8:74:ae:58:fd:
                    ed:97:e5:e0:42:26:9d:8e:91:44:8a:21:cf:29:94:
                    11:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F3:36:F5:42:A0:42:67:00:14:66:F5:83:EC:03:70:EE:7C:A7:FD
            X509v3 Authority Key Identifier:
                keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c2:e9:5f:ca:cf:7c:23:f9:ab:43:f4:ff:68:86:b9:79:c4:
         3b:30:10:ca:17:60:c2:dd:0b:f8:6e:9d:16:59:45:fa:58:5f:
         ea:4f:57:8a:de:8a:fd:5d:78:a4:66:c7:a7:dc:06:3c:f2:79:
         07:e9:53:e9:41:12:c9:63:bf:99:65:f3:21:66:5a:80:ad:58:
         15:0f:33:34:fa:ff:9c:1d:72:04:a3:2f:e6:4f:a6:9e:3f:2e:
         8b:af:3d:33:dc:37:7a:28:cf:92:c2:99:a9:ba:6f:9f:b3:28:
         ec:be:2b:6a:76:f5:cf:82:aa:a3:74:55:10:35:fb:a4:80:3d:
         3e:c7:b4:b2:e2:f4:ba:8e:e2:50:84:7d:c7:62:4b:7b:fc:04:
         f8:81:1b:8d:03:35:a5:94:7c:51:b8:31:c0:ac:d9:ed:ce:12:
         0d:98:9e:8f:cf:42:06:5b:3c:6f:00:10:a6:e5:ac:38:b4:b5:
         60:da:99:2e:7a:c3:a3:68:ed:05:51:ed:5b:8a:00:6b:6c:57:
         58:de:ea:30:0c:8f:9b:6c:55:d5:8a:a8:42:53:7c:8e:cb:df:
         cc:c6:41:ab:81:ae:f7:08:db:37:0e:5a:b2:72:3c:d9:e2:6d:
         7c:90:fb:cf:8d:b8:a1:cf:15:12:72:58:01:42:f5:0f:4a:f7:
         7c:70:6f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:08:00 2025 by rpki-client