Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
File:                     6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft (raw, json)
Hash identifier:          ejwV9dPpgFvbZVBcdOBTMCVWY6cnP5J6Ni9ucT4aLMI=
Subject key identifier:   D2:BB:3E:61:4D:BB:7C:9A:55:1D:81:D0:77:3E:80:97:01:08:4E:96
Authority key identifier: E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C
Certificate issuer:       /CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
Certificate serial:       0196857FC98CEDD862A9660F3C9A873C39EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
Manifest number:          0BE8
Signing time:             Wed 30 Apr 2025 07:01:06 +0000
Manifest this update:     Wed 30 Apr 2025 07:01:06 +0000
Manifest next update:     Thu 01 May 2025 07:01:06 +0000
Files and hashes:         1: 6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl (hash: HG8qH7OTl9lP7bYrUoIgFGn54Zpneks4qkwRTcWlE6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:c9:8c:ed:d8:62:a9:66:0f:3c:9a:87:3c:39:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b0212e332dca8fc7d1ee5a8150ba385699c8c
        Validity
            Not Before: Apr 30 07:01:06 2025 GMT
            Not After : May  1 07:01:06 2025 GMT
        Subject: CN=d2bb3e614dbb7c9a551d81d0773e809701084e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1a:23:55:a9:cb:7e:d1:83:9a:56:e1:1c:08:
                    d5:3d:05:4b:90:88:36:86:06:43:5b:37:c7:79:46:
                    bb:f1:d5:03:e2:e6:87:48:8c:45:10:1d:c7:eb:02:
                    29:ed:18:cb:fa:0e:7d:84:77:ac:4d:ce:18:03:31:
                    ec:42:86:e6:f0:05:26:2f:53:77:0a:de:e6:bc:27:
                    1d:40:55:2d:7d:6b:7e:fb:6c:9c:18:82:04:cf:2e:
                    7e:d9:48:05:53:b0:d1:f5:44:15:af:2f:7a:22:3d:
                    bd:5a:f5:17:88:fd:19:c3:f1:b4:af:99:a7:6e:fe:
                    77:0c:92:1e:4a:3c:01:7a:07:08:10:b3:f5:bc:e7:
                    73:e3:d0:3a:f6:e7:1e:f5:d1:a9:c5:71:cc:ed:b8:
                    ab:75:e2:9d:f6:a4:85:1e:70:86:be:0a:9f:52:e2:
                    00:36:3e:f5:ae:2b:0f:f5:36:47:0b:60:12:0c:06:
                    cf:fc:d2:e1:27:cb:f1:b1:ba:d3:78:e1:ad:de:b5:
                    59:36:2d:28:ed:51:5b:8c:2f:85:98:50:ba:c4:aa:
                    fa:5c:11:14:cf:fa:a4:6a:22:a4:23:1f:c7:cc:31:
                    31:e8:73:f3:95:e0:48:d4:75:bb:8c:96:4a:37:da:
                    06:b0:e2:b8:53:40:0e:5f:6e:c9:59:ff:25:f0:20:
                    7d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:BB:3E:61:4D:BB:7C:9A:55:1D:81:D0:77:3E:80:97:01:08:4E:96
            X509v3 Authority Key Identifier:
                keyid:E9:6B:02:12:E3:32:DC:A8:FC:7D:1E:E5:A8:15:0B:A3:85:69:9C:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WsCEuMy3Kj8fR7lqBULo4VpnIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b20561-870d-4e92-bc0e-9091026abc71/1/6WsCEuMy3Kj8fR7lqBULo4VpnIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8c:bd:dc:53:28:e1:67:4d:6e:0d:b0:b9:64:18:46:19:e2:
         23:b7:e1:9f:b4:ee:65:b7:f7:15:ae:5f:7a:71:86:68:68:8d:
         34:b7:0d:d1:a1:c1:c7:75:4b:ca:58:29:3a:06:fb:11:b9:d1:
         3e:1a:32:32:61:2a:77:01:58:87:a1:1b:60:bb:8e:d4:11:5c:
         0b:ed:1d:ad:67:95:13:b5:70:0b:e2:64:98:d1:b2:8f:c5:aa:
         23:ea:f4:7d:77:49:cf:c6:fe:72:bc:a4:60:cf:3c:81:d4:be:
         6c:0b:90:15:0d:54:d5:71:86:08:2e:7d:ba:f5:1b:b1:06:b8:
         a5:48:a4:d1:61:f5:20:df:ee:2c:c0:4b:c1:76:09:3c:1b:78:
         42:e0:c3:08:46:21:17:9e:ad:18:f2:da:fa:8f:24:dd:70:db:
         ad:be:fe:70:37:6c:5a:85:05:91:2e:78:0a:c7:7f:13:64:6f:
         3e:6d:c1:e3:17:f0:f8:27:8c:3c:00:44:c5:47:bc:a7:8d:c6:
         69:1e:74:f7:79:35:17:73:f0:17:94:6d:cf:b2:bc:f8:f4:de:
         4d:ae:93:0f:e6:98:8a:eb:89:e8:80:3a:ad:91:2a:8d:48:8d:
         57:ff:90:43:86:c7:22:56:f8:3b:1a:e3:ad:b2:2b:48:2a:5d:
         c4:19:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:35:26 2025 by rpki-client