Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
File:                     B6WU0muI6GkdHYGGAjtp6_GNH-k.mft (raw, json)
Hash identifier:          d2kBXvHVhNOKDYW/GNrAXMUyzZpgis6hyIExcwrI6xM=
Subject key identifier:   7F:4B:F7:E5:54:13:7C:F7:16:E7:E3:DA:6B:40:E0:00:C9:E7:A7:96
Authority key identifier: 07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9
Certificate issuer:       /CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
Certificate serial:       01967C7C6A8A52B4FD99A6179D058A86B6E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
Manifest number:          150F
Signing time:             Mon 28 Apr 2025 13:00:50 +0000
Manifest this update:     Mon 28 Apr 2025 13:00:50 +0000
Manifest next update:     Tue 29 Apr 2025 13:00:50 +0000
Files and hashes:         1: B6WU0muI6GkdHYGGAjtp6_GNH-k.crl (hash: oXpJsMXbjm9glBPzTRu6tEGi/SgBVkWYG6+xqki7rYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7c:7c:6a:8a:52:b4:fd:99:a6:17:9d:05:8a:86:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a594d26b88e8691d1d8186023b69ebf18d1fe9
        Validity
            Not Before: Apr 28 13:00:50 2025 GMT
            Not After : Apr 29 13:00:50 2025 GMT
        Subject: CN=7f4bf7e554137cf716e7e3da6b40e000c9e7a796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:21:46:db:b7:35:87:b9:f1:86:68:52:5c:c2:
                    87:b7:2b:bf:f1:37:0b:29:05:9d:d3:aa:a1:68:43:
                    06:f8:1c:6e:d2:31:93:c0:dd:68:67:e1:91:46:8f:
                    92:61:23:06:85:19:61:cc:b7:ec:7c:d4:e9:aa:ea:
                    79:b1:81:1c:3d:99:2b:a8:86:20:9d:c7:1e:02:b9:
                    ff:87:d8:09:84:f9:1d:dd:78:b5:0d:b8:bd:0e:06:
                    1e:ff:e0:2b:e5:74:dd:bf:95:49:73:6e:81:0e:45:
                    b1:10:68:07:ce:91:e1:e2:0a:b7:db:16:c9:c8:9a:
                    5d:4b:ff:13:d9:c5:e6:3f:db:9e:9c:e3:89:d8:ed:
                    83:33:9e:3e:f0:3c:31:5e:dd:97:57:d7:d0:c7:87:
                    67:58:00:3f:5a:47:a9:5d:ef:44:c0:dc:f1:01:a0:
                    52:c6:17:0b:0e:3d:82:4e:5d:70:6b:04:56:2b:ff:
                    f1:b7:0f:20:d0:d2:80:2d:46:b6:3c:3b:d1:0d:86:
                    60:00:06:4b:d4:e5:00:7e:6d:c9:ff:f8:f1:d3:33:
                    6f:76:da:12:a3:80:fe:50:5c:64:c9:60:ae:0b:71:
                    67:94:30:d4:94:dc:f9:13:fd:8f:6f:17:80:28:7b:
                    7a:a1:44:7a:9b:c1:e2:ac:87:80:f1:e4:2c:36:74:
                    68:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:F7:E5:54:13:7C:F7:16:E7:E3:DA:6B:40:E0:00:C9:E7:A7:96
            X509v3 Authority Key Identifier:
                keyid:07:A5:94:D2:6B:88:E8:69:1D:1D:81:86:02:3B:69:EB:F1:8D:1F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6WU0muI6GkdHYGGAjtp6_GNH-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d819a7-e2ab-4050-afcd-4d9561f8b967/1/B6WU0muI6GkdHYGGAjtp6_GNH-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:5b:5f:d5:ca:a1:93:e2:34:5c:3b:18:8c:1b:95:b0:58:
         a7:a2:b6:42:53:11:9a:22:97:5f:fe:a4:b2:32:a8:3c:17:93:
         19:ee:f7:90:44:b7:6a:71:97:7f:c0:46:f6:b7:a1:d9:ed:e8:
         76:47:5a:54:99:c4:12:37:a5:a3:fd:1e:62:32:a6:a9:d4:41:
         68:ba:dd:16:3b:e2:e9:c2:b1:ab:fe:cb:5b:d7:19:93:1a:2d:
         47:57:49:ef:85:c7:eb:31:a8:c3:70:63:03:54:25:f2:82:71:
         6f:9e:b7:1a:92:77:4a:31:79:9d:7f:13:d0:0f:79:37:32:83:
         8e:3e:0e:c8:18:22:80:36:ef:cf:cf:50:71:d8:b4:16:3e:f9:
         7b:23:3c:79:e8:f5:8f:b7:4e:36:0c:b0:ef:65:bf:42:7f:ab:
         c7:e7:ba:c2:52:aa:b2:da:5f:07:98:71:18:11:15:a5:73:ca:
         fa:f0:7c:bb:af:31:b7:b8:22:d0:57:42:51:61:51:d2:2d:1f:
         39:32:81:a4:7d:bb:c9:b7:5d:86:db:98:f7:87:4a:d3:d5:ae:
         bb:8a:5a:36:61:99:02:40:46:d0:db:ba:73:19:4e:ee:91:88:
         5b:9f:d3:4a:45:27:74:ff:90:08:00:cc:9f:1b:d4:e5:1d:93:
         af:98:33:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:25:55 2025 by rpki-client