Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
File:                     6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft (raw, json)
Hash identifier:          vBqk+7WDkD1yeNu5rlbj8xvZemO7n3H7WEKaCgDPaS8=
Subject key identifier:   6B:CA:49:E8:66:CE:B5:53:A6:8C:E6:CA:55:9B:52:4B:27:13:38:E2
Authority key identifier: E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33
Certificate issuer:       /CN=e8697eeb84673d81c3b7c07166d96cac1645f833
Certificate serial:       019684359FC40B748E7F08F6ED7DF13F0274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
Manifest number:          3C
Signing time:             Wed 30 Apr 2025 01:00:28 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:28 +0000
Manifest next update:     Thu 01 May 2025 01:00:28 +0000
Files and hashes:         1: 6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl (hash: YsmDRPDaSaXRdSsdoGxof19XgJmXs160kqLn5NL6nA4=)
                          2: gPEIYB37Zc_OzakKWk3m7XL2shI.roa (hash: ogeQ+ihI5RkgX54TXQ3mk3J6Yi4w+GDOualWoIRTMes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:9f:c4:0b:74:8e:7f:08:f6:ed:7d:f1:3f:02:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8697eeb84673d81c3b7c07166d96cac1645f833
        Validity
            Not Before: Apr 30 01:00:28 2025 GMT
            Not After : May  1 01:00:28 2025 GMT
        Subject: CN=6bca49e866ceb553a68ce6ca559b524b271338e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:14:48:51:bf:65:0f:f8:cd:ad:4f:13:bf:
                    9e:7c:31:97:39:71:7f:69:9d:01:f8:b3:26:a8:ca:
                    c9:36:5a:53:41:2c:bf:62:e7:67:a4:f5:31:db:26:
                    e7:34:f7:03:45:c4:a3:0f:d5:f0:e9:97:f8:e3:22:
                    ad:8f:f0:17:a6:0c:30:71:97:ec:3e:18:9b:77:d4:
                    ed:f9:18:06:c7:3f:f9:5e:14:4c:67:a0:90:ff:c9:
                    79:9b:01:c0:ee:f6:f2:2f:e3:c5:f6:25:2d:e9:80:
                    6d:6e:2f:ba:84:0f:41:71:b1:18:82:be:dc:91:35:
                    b8:8c:1f:69:c7:2e:72:cb:f9:9c:6e:54:61:5b:e4:
                    af:a6:0b:68:96:63:86:63:e3:4d:78:11:87:4e:41:
                    f2:79:9f:f0:27:5c:7b:af:8e:6b:ec:f9:a0:d7:06:
                    31:21:98:c5:e5:59:9b:79:dc:2c:bf:d8:27:d3:b3:
                    51:b6:b9:3b:19:29:d5:90:38:64:8f:3c:7e:d4:ec:
                    f4:18:40:51:45:4d:d3:09:09:d2:28:1a:1c:ad:99:
                    90:50:2b:f9:e7:92:bb:ff:8e:30:0d:bc:4c:2d:15:
                    f4:a1:23:e8:44:c2:d8:48:ca:58:bb:a9:81:01:20:
                    df:60:84:68:da:ce:56:d3:30:fd:fd:56:6a:19:e5:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CA:49:E8:66:CE:B5:53:A6:8C:E6:CA:55:9B:52:4B:27:13:38:E2
            X509v3 Authority Key Identifier:
                keyid:E8:69:7E:EB:84:67:3D:81:C3:B7:C0:71:66:D9:6C:AC:16:45:F8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Gl-64RnPYHDt8BxZtlsrBZF-DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/8bfab3-0671-475e-8203-937376eb23da/1/6Gl-64RnPYHDt8BxZtlsrBZF-DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:65:77:e7:8a:61:3d:c9:6d:59:59:87:97:0f:7d:55:01:13:
         f9:9a:00:1e:78:64:e3:be:a1:20:80:39:f0:41:8d:24:a6:a2:
         56:89:54:7d:f7:b7:0b:03:69:61:dc:46:e2:a6:be:03:78:7a:
         77:23:80:4a:49:88:b7:71:a2:b0:75:04:20:29:55:16:e3:d1:
         c5:e3:be:99:fe:e1:76:34:27:9a:09:7f:dd:89:bb:c0:c3:57:
         4c:c1:d8:0f:f8:03:be:7e:a4:df:89:60:33:11:f2:8f:95:0e:
         a4:8c:25:59:ce:45:3f:61:b8:56:33:89:50:98:b5:96:7f:7a:
         c1:4c:9f:9d:ef:97:4c:6b:28:be:2b:43:26:a7:8e:1c:9f:e5:
         ff:e9:74:9e:69:61:4b:01:0a:f9:19:e7:2a:60:85:1b:79:77:
         5c:ee:06:19:d5:fa:39:89:8c:35:b2:90:3b:d2:cd:e9:4f:80:
         72:04:b6:fe:83:b6:ba:da:ef:04:4d:2d:43:59:97:2b:10:67:
         8b:ef:ab:18:71:c1:c0:27:34:7a:d0:da:7e:29:ba:c9:1b:e4:
         96:12:4f:03:52:92:12:72:b2:f0:42:e7:e1:0e:44:3d:f5:65:
         fd:cb:c7:38:c8:3a:e1:8a:59:7d:cb:91:17:f4:51:56:c8:3f:
         9e:6d:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:21:24 2025 by rpki-client