Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
File:                     1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft (raw, json)
Hash identifier:          01jqWv3mD/FDfNTkPgZFaFZMxxTCJHT56nZ3HzrNOBw=
Subject key identifier:   B6:A3:41:C8:D0:0D:06:06:44:78:1F:3A:8B:2F:6D:8E:A6:B3:D0:BA
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Certificate issuer:       /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial:       0196C5DE8F9D127BC0DCA07B51DAD7A3FAEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
Manifest number:          11CB
Signing time:             Mon 12 May 2025 19:00:19 +0000
Manifest this update:     Mon 12 May 2025 19:00:19 +0000
Manifest next update:     Tue 13 May 2025 19:00:19 +0000
Files and hashes:         1: 1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl (hash: P+YReJM/me+rCJc+hfQn+i1HWhwgH5BX5RMieSOiZwI=)
                          2: ZyGucPSPOyM0P5b_DaUXvuzWUOE.roa (hash: ztfMzzwOj8VE7vTZ4CVj6RjRwBwxtzf26mpD1v7zIUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:8f:9d:12:7b:c0:dc:a0:7b:51:da:d7:a3:fa:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
        Validity
            Not Before: May 12 19:00:19 2025 GMT
            Not After : May 13 19:00:19 2025 GMT
        Subject: CN=b6a341c8d00d060644781f3a8b2f6d8ea6b3d0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:87:ac:97:0e:55:81:b7:2e:11:7d:5d:7f:f5:
                    67:4c:07:82:45:d5:1d:70:02:71:46:2a:88:54:dd:
                    e6:63:8f:75:9a:ab:ac:14:93:03:ce:ad:6c:80:82:
                    49:22:88:61:84:ba:04:bf:f1:12:f4:a6:4f:0d:3c:
                    d7:dd:c6:fe:71:ec:80:97:d1:fb:16:2a:cd:ba:f7:
                    14:f4:92:86:2c:21:33:a0:82:3b:e8:73:ff:49:94:
                    04:63:9b:39:42:22:77:0e:48:a1:d5:c7:d9:e3:fd:
                    34:58:95:07:92:04:9b:ba:a6:0b:d1:24:14:c9:ab:
                    69:68:8a:0e:d7:02:d7:eb:cc:23:27:5f:c6:f9:17:
                    0d:1b:f0:42:95:a7:af:0d:49:d9:a8:e3:97:44:6f:
                    cd:9f:ce:32:42:dc:78:91:e7:b0:7d:a6:4f:4c:0b:
                    c3:27:11:c6:af:1a:34:85:59:f2:10:eb:e4:69:e7:
                    3d:f9:18:ca:17:f9:36:be:65:be:6f:8e:a6:e8:fa:
                    52:e6:06:b2:e9:e4:92:27:2f:ca:30:a6:83:4f:b5:
                    1c:69:eb:86:04:dc:c9:4c:99:21:61:46:01:68:62:
                    d5:df:15:45:c5:9f:7f:ae:4a:6e:1a:49:68:31:b5:
                    08:69:aa:4a:c7:3b:a7:13:c4:f8:97:90:4e:a3:ef:
                    07:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:41:C8:D0:0D:06:06:44:78:1F:3A:8B:2F:6D:8E:A6:B3:D0:BA
            X509v3 Authority Key Identifier:
                keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ac:8f:27:fb:e0:39:74:b3:11:c0:50:14:8e:7f:12:dd:b9:
         79:c1:71:e9:75:e3:3f:a0:6e:9e:19:de:6e:38:59:08:cb:ad:
         c9:4a:66:7b:13:75:5f:b5:6c:67:fc:dc:21:b9:60:d9:a4:ee:
         bc:a2:9a:27:16:8c:dd:af:fe:db:09:f1:4f:1f:41:f0:6b:fb:
         e7:d4:b9:38:57:55:ae:41:3b:4b:76:ed:93:84:d5:c1:41:75:
         fa:c2:e1:db:f2:cb:ee:7c:35:00:66:b0:f6:22:b1:6b:07:27:
         c5:73:2c:b8:82:34:c0:06:57:2c:f3:70:a2:01:9e:f4:fd:30:
         5c:fe:09:65:9a:1a:6f:5e:a3:da:ba:19:14:47:7b:4f:67:8d:
         2b:f7:ab:41:a8:67:42:55:43:3a:4f:df:30:0a:2c:76:52:c5:
         98:f1:cc:1a:c2:7d:ac:10:5b:d1:56:01:fd:17:bd:7b:4f:92:
         62:fa:29:71:82:5f:72:05:82:4a:ae:2b:24:4a:47:f4:a9:73:
         df:47:5a:3d:b1:af:9f:ef:85:6e:7e:d4:67:f5:ff:64:3d:30:
         e4:f5:7d:83:98:e7:51:fb:cb:cf:d0:d9:a7:8b:9e:88:2d:17:
         6f:97:9d:6a:5b:c7:66:4c:6d:bf:ce:be:e8:6f:82:30:21:9d:
         76:4b:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:32:39 2025 by rpki-client