Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
File:                     6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft (raw, json)
Hash identifier:          GamxXJokRl+3CJ/uTxbBZGLqGjZ0vLQHrfCwKAlMisE=
Subject key identifier:   21:44:6E:9E:5C:A4:3E:E5:31:8E:8B:12:7F:D2:76:46:60:77:BB:47
Authority key identifier: E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB
Certificate issuer:       /CN=e8abec04fd529994f5456a13a8b88f13fde12abb
Certificate serial:       0196BB241558BDA1FF33388F8D5436385FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
Manifest number:          091B
Signing time:             Sat 10 May 2025 17:00:26 +0000
Manifest this update:     Sat 10 May 2025 17:00:26 +0000
Manifest next update:     Sun 11 May 2025 17:00:26 +0000
Files and hashes:         1: 6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl (hash: lyt5Y0BKR1rR7nCghzDIqSHJKjym6HTmxmV5xFjP/Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:24:15:58:bd:a1:ff:33:38:8f:8d:54:36:38:5f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8abec04fd529994f5456a13a8b88f13fde12abb
        Validity
            Not Before: May 10 17:00:26 2025 GMT
            Not After : May 11 17:00:26 2025 GMT
        Subject: CN=21446e9e5ca43ee5318e8b127fd276466077bb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c1:11:1c:f1:dc:87:71:4c:ae:32:2d:99:23:
                    55:e9:4c:d9:9b:b3:9a:7b:10:da:89:e4:d3:38:3d:
                    40:fe:fe:cd:fc:8f:29:c5:0e:04:36:1b:80:3f:c8:
                    32:9e:5e:db:10:68:6b:94:35:23:8c:8f:93:32:93:
                    6f:7a:7e:ad:32:76:b3:21:d1:27:9c:37:15:41:33:
                    05:3c:af:55:5d:6b:10:e0:7b:2e:a4:f4:81:86:a6:
                    e4:d8:31:39:f0:36:53:63:bb:c0:1a:a4:6b:c1:74:
                    be:55:11:07:69:b4:3f:82:e0:a9:12:6e:f4:3c:15:
                    1d:7f:4c:90:64:fb:0c:dd:e4:61:74:21:b0:fb:0a:
                    bd:b3:4e:33:bc:b4:25:d1:c0:89:dd:f7:ae:d6:c8:
                    cd:08:31:f9:ba:92:36:83:c5:78:12:0a:c1:cd:c4:
                    84:91:20:c9:a9:20:70:63:94:9a:f5:13:06:a7:1f:
                    37:a1:08:bc:87:a9:f7:cd:9b:88:8b:d2:6d:6e:5d:
                    65:b3:a0:72:35:92:f6:30:ef:ea:8c:5e:2b:77:2e:
                    a5:91:5a:e6:6e:74:e1:b8:73:7d:5c:dd:2a:12:2b:
                    62:cc:82:dc:37:f1:ce:ba:91:fa:59:81:0e:9d:65:
                    f3:23:34:76:c4:60:60:c1:d3:2a:15:1a:b2:19:57:
                    1d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:44:6E:9E:5C:A4:3E:E5:31:8E:8B:12:7F:D2:76:46:60:77:BB:47
            X509v3 Authority Key Identifier:
                keyid:E8:AB:EC:04:FD:52:99:94:F5:45:6A:13:A8:B8:8F:13:FD:E1:2A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KvsBP1SmZT1RWoTqLiPE_3hKrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f0eefe-abce-4387-be38-5fe22b983b9e/1/6KvsBP1SmZT1RWoTqLiPE_3hKrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:c9:56:f1:3d:1c:65:f2:4e:1b:31:0b:1f:d3:97:19:65:94:
         9f:a2:0a:85:8e:56:b5:d9:32:dd:fc:d3:64:9c:58:3d:52:36:
         31:6b:f6:07:2e:6a:db:87:ff:c7:93:ac:7c:09:f9:7d:d2:ce:
         14:5d:56:e2:b1:4e:37:e2:97:7b:44:fa:27:81:dc:b7:6f:97:
         1e:8c:b1:aa:36:49:ac:e4:0d:44:fa:05:50:6f:00:3a:25:b1:
         c7:de:77:d6:07:32:58:52:2f:18:af:0f:15:02:0e:1b:a0:26:
         4b:2d:59:ce:11:07:75:3b:88:46:10:a9:af:1a:75:1e:d1:dc:
         d7:8d:04:b3:62:4a:2a:e5:99:f7:fc:88:14:88:5f:43:29:9a:
         96:ce:e9:d2:93:30:74:e2:87:2b:a6:ff:3c:a8:56:0b:50:85:
         36:36:6f:48:4f:86:e2:df:52:87:c7:4d:9c:36:5c:67:41:c5:
         7d:89:f7:83:29:e6:4b:39:49:76:24:ec:50:69:0f:b3:e6:11:
         23:0b:cc:f6:73:57:0d:40:15:69:80:46:a1:ef:8b:a8:1a:ea:
         6f:2a:c8:f8:26:06:3c:4a:e4:16:e2:f1:fa:58:c6:13:3d:7f:
         cd:65:e8:55:e5:88:a9:f6:0a:84:cc:73:12:8d:16:53:42:77:
         9c:ca:c8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:56:20 2025 by rpki-client