Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
File:                     aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft (raw, json)
Hash identifier:          fBwzVqlPor5W77Ou2CF+Dnt3uSkif+I4etr+SWEcmU0=
Subject key identifier:   83:67:DA:92:E5:26:57:AA:F8:DC:31:6E:CD:B5:5C:B1:47:04:18:61
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Certificate issuer:       /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial:       019671F82BF0BDE4328BB995D364197700EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
Manifest number:          0648
Signing time:             Sat 26 Apr 2025 12:00:11 +0000
Manifest this update:     Sat 26 Apr 2025 12:00:11 +0000
Manifest next update:     Sun 27 Apr 2025 12:00:11 +0000
Files and hashes:         1: 8IS2SGLZvuejfiILX_HZy4EbxZ8.roa (hash: rsd4qoWJU7YOxhWnkiEgm/sIgrMf/LleiBk2mG4ubQg=)
                          2: MUEabXTH7J0BwsIog7I6OfzuzkI.roa (hash: 9N5LvBOATRgD8zsq92oJDhXIXtyB1ta37GI9iUSZndY=)
                          3: aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl (hash: 5z1s0+KYxwen4gIKsbBHmxdRgfqkcWYQdl311tO8Uas=)
                          4: bG3vNkLD1dncPLRJXBDHmzwN_FU.roa (hash: VPIXy61pzu1bOvlxodUgzAm3JOVOrTVgSVJvZhBRPLs=)
                          5: hGNfz54gyRLnZ2HB0VrO-_rGRRI.roa (hash: 2wA4t/VhJsViZsRF1HYTf4ibOtlo6K3RuVWnrObKB0Q=)
                          6: pTfgjw72gQb1KU5LFVg2dslTLZE.roa (hash: MUEYHe0OUZ4/qxz+h+PGHmIUdQjzg2Ugg7s8SLtROzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:71:f8:2b:f0:bd:e4:32:8b:b9:95:d3:64:19:77:00:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
        Validity
            Not Before: Apr 26 12:00:11 2025 GMT
            Not After : Apr 27 12:00:11 2025 GMT
        Subject: CN=8367da92e52657aaf8dc316ecdb55cb147041861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c0:dc:10:ec:3f:a8:42:78:a3:20:6b:4a:1e:
                    d7:e8:d9:13:1d:ff:74:13:b6:bc:0a:ca:27:a5:3e:
                    82:af:ae:7b:ba:19:8a:50:ea:cf:09:62:99:38:59:
                    16:d8:a7:c0:e6:44:34:76:97:27:7c:b6:db:27:1b:
                    70:65:50:c2:c7:71:58:3d:16:6f:95:8c:fd:0e:98:
                    e6:52:2d:1d:40:40:82:97:b5:b4:46:45:a4:08:ef:
                    7b:3e:9d:ef:45:9c:6d:1a:d4:72:7f:fc:c9:48:ea:
                    29:d6:96:92:cf:09:8c:84:9c:1f:dd:95:5f:b3:3b:
                    22:c3:99:0b:a0:d4:fa:60:e3:49:34:a8:dd:da:36:
                    af:7f:ae:91:4b:65:99:e6:ab:a8:6e:6a:ee:f3:61:
                    84:ef:b8:aa:56:f1:8c:22:77:9c:93:c9:8e:11:2e:
                    f3:2c:db:46:61:af:b7:73:13:92:86:a1:b6:44:d8:
                    b3:93:f6:74:8b:2f:bb:80:38:58:24:93:c4:24:72:
                    41:7a:4d:68:74:6c:90:57:e1:23:0e:c2:6c:d7:10:
                    43:2b:c4:3e:86:20:0b:3f:01:86:06:e0:0f:4a:30:
                    26:57:6d:90:b2:ca:f9:1d:71:42:d3:2a:22:c2:1f:
                    a7:8d:cd:48:b2:1a:42:f8:c8:b1:69:ec:fa:ed:6c:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:67:DA:92:E5:26:57:AA:F8:DC:31:6E:CD:B5:5C:B1:47:04:18:61
            X509v3 Authority Key Identifier:
                keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:59:0f:ad:75:8e:52:62:f3:b6:7b:eb:e3:18:ed:e3:c5:eb:
         f4:76:6a:f1:21:f2:8d:9f:13:f3:3d:9e:32:03:d5:dc:63:e8:
         5a:1a:f3:a7:4d:27:d1:93:39:4e:d3:79:27:df:08:cf:35:29:
         a0:df:d8:a9:45:5a:5b:b5:ad:b6:35:17:c0:21:7d:01:db:e3:
         92:6b:58:9e:3f:6d:70:14:c2:72:e6:0c:9a:e4:6e:0c:3a:aa:
         79:ae:f2:d7:8b:e0:e4:32:a3:d5:99:68:6d:86:da:5b:a4:cb:
         79:fa:eb:88:71:a2:9b:fa:ad:75:e7:95:6e:82:d6:ca:25:88:
         1a:78:ea:8b:99:65:1b:fa:0d:cd:05:3f:07:e3:26:56:d1:97:
         34:d6:0b:d2:b3:0b:b2:e5:16:0e:f1:3a:4b:49:4b:aa:6b:b0:
         b4:6c:5d:67:87:57:51:9d:21:1b:3f:8a:8e:cc:43:80:dd:ba:
         a8:94:17:18:c0:f1:a8:ca:ee:8b:df:aa:be:46:7b:d8:f0:0a:
         53:23:21:3a:3c:b3:8d:9a:4b:18:af:57:19:ef:90:12:95:1c:
         bb:f6:ed:a4:b6:e3:87:d6:5f:c4:7c:ab:b6:71:11:ec:98:cb:
         d1:0d:6a:71:56:92:f1:f6:55:31:a4:cc:72:da:58:83:d7:b4:
         88:8c:77:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:09:11 2025 by rpki-client