Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
File:                     9u6hCvrPOpwm6hsexIjpVeTfoGo.mft (raw, json)
Hash identifier:          pCdfzle8L5L/S0FLGsCEGgkpExkpdeVq1oC1JM4TjHU=
Subject key identifier:   46:42:A9:F5:44:B8:96:C5:FF:DF:61:52:71:93:23:66:A8:3A:F0:5F
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Certificate issuer:       /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial:       0196BFDCA0FB9DA6C3EE44E43CC26843C38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
Manifest number:          1541
Signing time:             Sun 11 May 2025 15:00:29 +0000
Manifest this update:     Sun 11 May 2025 15:00:29 +0000
Manifest next update:     Mon 12 May 2025 15:00:29 +0000
Files and hashes:         1: 0dNTZEq5DptnOPF9GxThQS9Incc.roa (hash: K3IDAOMZPtmDCUQG3o12zOPhER5UUHk6V0HVvvgUY+o=)
                          2: 1-GxQlBlFGJHcAazyAB7qxk49nFI.roa (hash: yCRlBJcQvTSDvuFtmYL9PAU1XEpTTz+YcM3/wQq8UL8=)
                          3: 4hsUqbd5LO4D6fnhO5qnh7yhqiM.roa (hash: F6zXQe351qelx+n33SXMqdZeB26na5v5s049a/YTZAk=)
                          4: 50wlov8H9aGngNudVMECszFS424.roa (hash: dLbggdfmrZy1eiBfCQXwFBEHCRJg6l6VnjvskjOec80=)
                          5: 76NAlm9TjFUCcmC50dxOYbJ3ibM.roa (hash: dyjeL6g6+zSZa2KMeYm0hKmHzgduNDSoQiug/KbB7TM=)
                          6: 9u6hCvrPOpwm6hsexIjpVeTfoGo.crl (hash: BGJeuHk1+zGhOfUgXFRmh1Lv8zUoKoQp0p1Xkvg2/qo=)
                          7: ah_GqTDVEWe_m_2XtA3CSK4WCBU.roa (hash: 4djoGuBcLzuWoLbXW+w8ctuVZlV6u7Q5gx4nhG+aFUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 15:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:dc:a0:fb:9d:a6:c3:ee:44:e4:3c:c2:68:43:c3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
        Validity
            Not Before: May 11 15:00:29 2025 GMT
            Not After : May 12 15:00:29 2025 GMT
        Subject: CN=4642a9f544b896c5ffdf615271932366a83af05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d2:cd:10:c3:39:f9:42:ec:6f:4a:26:ae:72:
                    5b:bf:15:02:54:dd:8d:e4:95:00:74:36:55:cb:4f:
                    35:39:8e:14:34:60:68:65:0f:e5:ea:72:1a:6d:8c:
                    09:a6:31:08:75:20:c0:90:97:e7:af:4d:13:d8:97:
                    0b:50:ee:d2:82:95:36:db:75:d2:e6:94:fd:73:da:
                    87:9d:28:f4:7e:49:32:0b:2a:8b:21:ba:e6:8a:ae:
                    1e:6b:33:df:36:62:58:49:e7:d4:49:a8:f9:0e:b7:
                    6f:14:0d:9e:19:ff:fa:c8:f0:18:7d:8b:8e:a6:09:
                    37:4b:c0:e3:7b:51:d9:35:1d:58:13:5b:fe:d7:be:
                    45:49:1a:82:19:9d:2e:e1:6a:6c:22:08:50:4e:e7:
                    0f:66:a7:83:99:02:97:d2:15:0a:5a:14:d1:4c:c0:
                    36:16:e9:9b:31:88:f5:7f:54:1f:68:85:58:df:49:
                    81:c9:7b:7d:89:9f:0e:ba:12:a7:b2:7f:0c:1e:59:
                    49:56:63:6b:73:a9:3b:03:fa:18:e1:3d:97:c4:91:
                    c7:27:5e:f1:95:6c:19:c4:d5:83:ff:1e:5c:e4:35:
                    24:a2:51:dd:c2:ef:40:89:6c:cd:05:16:80:3d:68:
                    31:d5:4c:7b:19:95:33:d0:53:9f:a8:ef:f3:2e:83:
                    e6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:42:A9:F5:44:B8:96:C5:FF:DF:61:52:71:93:23:66:A8:3A:F0:5F
            X509v3 Authority Key Identifier:
                keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b4:42:cc:ea:74:17:79:74:ae:5c:c9:3e:32:74:83:1e:3a:
         a5:52:f8:be:5b:46:28:a3:f7:6c:a7:f7:b9:1a:da:6a:41:20:
         0f:71:4b:5b:7b:16:b4:f0:55:f0:46:69:f8:d0:f7:9d:25:03:
         26:ab:b5:0c:ea:36:1a:e1:d7:a7:cc:ff:17:57:a8:b1:b0:7e:
         0b:37:97:42:73:ac:d3:e1:55:c9:66:88:d1:ab:16:f0:48:eb:
         d3:96:8c:0f:b7:95:5c:56:9b:96:f1:63:10:1b:46:54:02:a5:
         8f:9e:2d:2b:25:84:6f:47:99:dd:6c:65:2a:26:69:c2:f4:b1:
         97:2a:79:96:f9:2e:b6:16:35:02:20:6c:5d:26:8d:6c:dc:25:
         4a:51:a2:31:de:1f:ae:d0:9a:75:2a:34:e7:60:c6:7c:52:7e:
         52:b6:8d:8d:4e:20:7d:38:34:4a:19:e9:99:c3:8a:51:15:c4:
         a9:59:52:a9:35:cf:01:b8:62:a6:ec:41:ff:6a:5c:a8:24:33:
         a1:f0:b3:a4:58:c6:41:06:14:81:c8:52:bd:9f:fb:c7:9f:05:
         23:1e:9a:bc:09:61:c4:11:9f:89:ef:0c:51:e7:c3:5e:03:bb:
         5e:c0:59:37:b9:97:2e:2f:24:73:3e:67:e8:20:89:9a:13:79:
         a0:c6:57:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:24:55 2025 by rpki-client