Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File:                     aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier:          yk1vCxWcOdvIRlrxvNEZvpt5bKTk9NvPOxUXY2yOHAs=
Subject key identifier:   E0:49:93:D0:E6:F3:0E:D6:CC:AA:E7:9D:7D:C5:D7:27:B0:4D:17:34
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer:       /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial:       0196AA9EE81B9456892080B60950B1D28FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number:          152C
Signing time:             Wed 07 May 2025 12:01:02 +0000
Manifest this update:     Wed 07 May 2025 12:01:02 +0000
Manifest next update:     Thu 08 May 2025 12:01:02 +0000
Files and hashes:         1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: 5cjZsBlv3tZUK31xIvJeCqmFsRZT6p5ab+e8JzV7arU=)
                          2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:9e:e8:1b:94:56:89:20:80:b6:09:50:b1:d2:8f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
        Validity
            Not Before: May  7 12:01:02 2025 GMT
            Not After : May  8 12:01:02 2025 GMT
        Subject: CN=e04993d0e6f30ed6ccaae79d7dc5d727b04d1734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:bd:b4:57:9d:81:a4:c7:6a:85:a1:bd:d7:
                    10:36:31:dc:dd:29:c8:54:ff:30:f1:e7:7a:5e:64:
                    e6:9a:7e:bc:a2:06:5f:4a:7b:4e:82:a6:af:27:96:
                    18:42:f4:c6:f9:9d:1c:d7:c7:10:10:b0:b1:e9:75:
                    f9:09:c8:5f:16:4c:83:95:83:37:87:36:ea:cc:43:
                    35:25:ef:bb:d5:c3:ae:ee:68:8d:1f:63:2c:c4:6d:
                    cc:82:1e:79:d3:65:42:4f:1b:7e:75:a3:6b:8c:d3:
                    36:de:f8:dc:33:50:2a:d8:26:52:be:b3:64:86:75:
                    7b:9b:59:15:a9:fa:1b:ed:c0:09:9a:a3:79:47:84:
                    7e:4f:a6:19:1d:f7:de:4e:27:59:c0:ea:77:48:1d:
                    26:39:64:e8:09:c5:3c:4e:50:00:c0:1b:4e:c5:48:
                    03:0d:5e:81:b2:76:23:13:f9:f2:c5:d4:bc:b9:82:
                    ee:b0:c5:9e:89:41:8c:60:8a:38:de:1a:1f:b3:80:
                    27:c2:62:6c:47:c1:ed:c7:b4:87:a4:b7:67:9c:ab:
                    75:e1:6f:ae:10:f7:88:f1:2c:39:5d:80:88:03:87:
                    87:30:18:bd:4d:e8:9b:34:77:d9:73:ff:a0:56:cf:
                    b3:fa:33:be:e4:d9:9c:13:71:1c:4b:b2:27:66:ce:
                    72:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:49:93:D0:E6:F3:0E:D6:CC:AA:E7:9D:7D:C5:D7:27:B0:4D:17:34
            X509v3 Authority Key Identifier:
                keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a0:75:97:4c:d6:86:53:60:c4:57:d1:8f:1f:3d:2e:53:a2:
         61:89:86:5e:fb:73:c2:18:5a:ab:99:f0:21:d4:23:b5:19:84:
         36:d1:02:2e:c8:26:53:c2:51:51:54:43:fb:21:86:52:ef:c1:
         d5:a2:eb:e4:e7:e3:e1:25:2a:f8:51:cf:02:86:a9:2c:7d:8c:
         53:2c:0f:94:c1:ea:23:68:45:b4:c1:92:4d:15:1f:4b:cb:10:
         a4:b9:c0:e5:fe:9a:86:22:9a:e0:08:1c:c1:26:58:ac:bc:ff:
         37:e7:cd:07:38:2c:9e:40:f8:f8:fb:d5:df:83:6b:17:61:1b:
         84:df:10:84:e1:a2:bc:e7:d6:37:d5:c8:9d:f9:a1:bb:f6:fc:
         b1:ed:44:9c:14:c5:2a:cd:ed:de:69:c9:48:a1:8f:db:73:9d:
         a1:4d:d8:bb:90:48:7a:29:10:12:26:76:ab:e7:d2:4c:42:b3:
         fa:86:dc:2c:87:80:09:b1:d0:64:23:7d:ce:13:e0:15:31:fe:
         65:64:6f:db:29:68:65:61:2f:61:e0:91:14:0a:13:9a:1c:bc:
         d3:cb:82:38:f3:81:e0:c9:5f:0c:bd:1b:5e:14:3d:e3:ba:72:
         c0:52:02:4b:73:a9:ab:bb:01:23:5e:9b:15:c6:43:82:8b:b7:
         c8:0f:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:53:38 2025 by rpki-client