Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
File:                     aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft (raw, json)
Hash identifier:          yeeJS2E50hNqiHt3l+2YBHvecrdL6+XsyuArrjU5P4Y=
Subject key identifier:   F2:CE:6D:38:A8:8A:B3:F7:CD:82:7E:B6:90:6D:12:07:52:1D:CC:CA
Authority key identifier: 68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4
Certificate issuer:       /CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
Certificate serial:       0196A0BF51A990FA51D6466BD9AF72134DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
Manifest number:          1528
Signing time:             Mon 05 May 2025 14:00:14 +0000
Manifest this update:     Mon 05 May 2025 14:00:14 +0000
Manifest next update:     Tue 06 May 2025 14:00:14 +0000
Files and hashes:         1: aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl (hash: XdFhSsrKZrFOqu/gyeueVfcpEvv38Kny2uRbbZ2PRWg=)
                          2: dUqyD5dBwTvJ_qoTBxGI93eGedY.roa (hash: u/v6Ya7ReNYFR+FOK7OzZoy9GOIB91+hBxT7UAGsW1U=)
                          3: xf5euvYwoNkCugSTZpIpZIs6gdQ.roa (hash: TROZHBrJUwOEntOqJDRdHWhVUC4xDktW9XYJSjQLr0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:bf:51:a9:90:fa:51:d6:46:6b:d9:af:72:13:4d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894e1b8da80cac2ad1a2f3f09bf9db5a12486a4
        Validity
            Not Before: May  5 14:00:14 2025 GMT
            Not After : May  6 14:00:14 2025 GMT
        Subject: CN=f2ce6d38a88ab3f7cd827eb6906d1207521dccca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e5:39:a9:04:3e:8f:70:5e:92:7c:5f:0a:ec:
                    20:c1:c2:20:0e:4f:ab:05:0c:43:2b:c6:1d:2f:93:
                    31:cf:31:74:3a:d3:19:c9:44:4b:3c:4b:d5:c4:0c:
                    54:b7:b8:13:9a:b6:39:ec:61:34:14:c7:3d:a6:0a:
                    e0:62:c4:8e:73:eb:85:eb:9b:6c:2b:5d:0e:69:37:
                    7e:7f:af:de:88:aa:4f:e0:0d:c9:c4:11:d6:56:64:
                    d8:20:18:bc:36:7f:49:1e:cf:97:46:6e:b0:4e:59:
                    89:b8:5e:e9:86:92:50:44:d6:16:88:84:57:ff:1a:
                    ee:7a:39:10:6d:1b:c2:6d:47:d2:79:de:83:3d:49:
                    59:26:73:2a:dc:e0:d2:bf:3f:41:18:a7:9e:cb:cc:
                    92:55:30:72:23:ad:c1:46:c3:f0:cd:1e:7b:ef:80:
                    0a:ab:09:e7:89:c3:e5:be:ea:59:10:df:dc:44:fa:
                    f1:7c:b8:6b:8b:e3:f2:bd:90:70:41:51:f9:67:c4:
                    4d:cc:02:06:25:3c:b8:c4:3d:a6:2f:59:95:e5:bd:
                    bf:3d:53:cc:6d:c2:12:53:40:68:ee:a6:a4:44:2f:
                    58:a3:3b:44:c9:6c:c7:8d:74:1b:ac:fe:d1:7b:b2:
                    67:78:10:71:7f:4c:a4:4c:ee:00:89:7b:82:bd:1c:
                    36:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:CE:6D:38:A8:8A:B3:F7:CD:82:7E:B6:90:6D:12:07:52:1D:CC:CA
            X509v3 Authority Key Identifier:
                keyid:68:94:E1:B8:DA:80:CA:C2:AD:1A:2F:3F:09:BF:9D:B5:A1:24:86:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJThuNqAysKtGi8_Cb-dtaEkhqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2cab1a-df66-4187-b182-703cab4d0598/1/aJThuNqAysKtGi8_Cb-dtaEkhqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:8a:3a:34:8c:31:fe:46:1d:85:99:4b:6b:26:27:5b:e8:
         37:21:1c:7a:0d:8a:1d:73:24:8e:15:7f:23:b7:ad:0e:e5:ef:
         e3:3c:6d:46:54:82:4c:78:2b:60:b3:3c:f5:a6:f2:fb:c7:99:
         e1:47:98:87:cc:38:70:67:83:e1:68:88:1a:ec:c9:94:86:bc:
         df:6b:ca:4d:50:3e:14:d5:2b:8b:a5:e3:46:90:8b:b5:80:be:
         7f:d4:cb:e4:c7:65:28:b9:dc:43:99:20:ae:37:f0:99:02:c6:
         f6:af:f0:a4:47:df:e5:ee:f6:de:f6:9e:1f:67:69:b6:43:df:
         c9:03:47:b3:e2:89:b1:c4:59:d2:b2:29:7f:cf:4c:da:dc:b1:
         7e:b7:00:2f:92:b0:4e:41:00:c2:55:1e:57:e2:df:bd:e5:c3:
         c8:30:72:53:43:b1:b1:67:93:d7:06:8e:c2:5b:42:fd:50:90:
         a8:3f:21:55:89:ec:85:21:c9:de:7c:fc:76:4e:a7:8e:e0:36:
         30:28:4a:25:06:bb:c9:c4:45:90:5c:46:69:e1:ab:48:de:04:
         bb:a8:f8:c4:65:0f:df:3c:28:d1:21:25:d1:29:dd:6d:22:ba:
         c4:bd:98:6a:27:17:93:d4:e6:57:dc:fe:10:39:59:c6:f5:6c:
         3e:84:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 17:52:48 2025 by rpki-client