Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
File:                     6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft (raw, json)
Hash identifier:          Lq3Z97tYbAyddWSoLIB5KZ+56TTxhSiDQbcokGSsrzA=
Subject key identifier:   3C:C6:E4:99:94:C3:24:37:57:68:E1:8F:09:90:D4:13:EE:E3:36:1B
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Certificate issuer:       /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial:       01968BEF673CA610935D82A72BA4175E7D5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
Manifest number:          151F
Signing time:             Thu 01 May 2025 13:00:44 +0000
Manifest this update:     Thu 01 May 2025 13:00:44 +0000
Manifest next update:     Fri 02 May 2025 13:00:44 +0000
Files and hashes:         1: 6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl (hash: 28AOSCKhHIuYhsl/c3YUW+w11N0GHJpiQmuD5eY2kOU=)
                          2: rLcT__1y2Z0MCSBiT6_-YE4Q91I.roa (hash: 0aZ57+4HyGjyCi96NHu8lhNftEY/9TGUygRLm0qsl7Q=)
                          3: wTZUnAUsUUhPr2sXpZ8wRWxEN9c.roa (hash: /FD/PFrkkMvE4jKcijgxG0y9RWdd1hzm3r0Kxcyvp8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:ef:67:3c:a6:10:93:5d:82:a7:2b:a4:17:5e:7d:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
        Validity
            Not Before: May  1 13:00:44 2025 GMT
            Not After : May  2 13:00:44 2025 GMT
        Subject: CN=3cc6e49994c324375768e18f0990d413eee3361b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:72:38:32:37:30:34:11:4d:70:d9:f0:a0:
                    ad:00:1a:aa:36:43:6a:70:6a:0e:4c:7d:b8:0a:b3:
                    28:d2:49:ce:39:14:1c:df:9e:45:2f:d3:ca:0d:b3:
                    3c:2c:3a:89:f0:b3:1b:35:aa:f0:fd:07:32:b9:9b:
                    7f:77:79:0d:68:f5:a0:92:0c:97:97:de:0a:99:81:
                    c1:c0:22:29:53:74:3e:95:d6:b3:75:fe:11:f2:fd:
                    c5:5a:fe:b3:14:a3:d0:0f:fa:b6:95:d9:d5:de:ae:
                    bb:e6:61:14:57:ff:a8:66:a4:23:b1:18:8b:74:8f:
                    74:86:ea:fc:d4:0c:5a:65:44:13:b6:eb:13:c3:2f:
                    44:53:43:78:82:2a:20:b1:c8:59:c1:9a:97:d9:58:
                    86:66:43:db:2a:f7:15:7b:e7:3b:54:2d:1f:bb:66:
                    1a:5b:b8:5f:d7:a2:b9:5b:a4:3d:33:7a:6d:09:81:
                    f0:97:c1:a6:70:5f:02:32:18:0e:ed:49:d8:af:c3:
                    97:34:05:e2:fe:d4:fc:11:71:35:25:13:0a:4a:7d:
                    32:0a:b8:28:5d:b8:90:50:e8:77:f5:23:72:d6:6a:
                    9a:32:ee:23:22:6e:67:f2:4f:f2:00:a9:7b:89:15:
                    83:64:c0:14:6b:48:bc:13:33:02:72:54:22:a6:40:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C6:E4:99:94:C3:24:37:57:68:E1:8F:09:90:D4:13:EE:E3:36:1B
            X509v3 Authority Key Identifier:
                keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:4a:42:b6:6d:e9:83:80:a1:27:ee:31:d4:2b:ac:90:a2:26:
         96:b6:7b:e4:b2:e2:e2:6c:aa:50:36:45:24:50:64:96:0c:80:
         7d:23:21:2f:2a:f2:92:a4:06:e5:eb:04:64:c7:96:37:3b:7a:
         1e:4f:08:58:f9:c8:cb:ed:7a:22:b3:fc:2f:ee:b7:a8:c7:56:
         28:44:76:20:f8:07:f0:05:dd:31:86:9b:43:81:d4:7f:0c:52:
         01:6a:ce:09:c9:9b:b0:b2:77:2c:4d:39:55:49:aa:f6:6c:eb:
         60:f2:01:aa:b9:c4:f0:83:d9:19:10:ad:90:27:f2:0d:b3:6f:
         26:d3:92:63:53:04:78:40:2e:50:9d:7e:62:42:a1:94:2b:80:
         8d:54:be:58:72:84:4f:f0:0c:b5:4d:6e:ac:72:e7:20:c2:79:
         e9:4a:44:e6:61:a3:32:95:da:93:f5:62:58:6f:5c:f8:7d:4f:
         1e:02:15:c2:e5:fe:43:dd:85:53:cc:77:e6:23:20:cc:da:92:
         e6:e8:03:ae:a9:c6:b7:d0:25:ce:67:bc:b3:62:c4:3a:20:49:
         62:a3:c7:e0:da:1b:14:fa:2b:a0:c7:05:f7:2c:bd:e2:ef:d7:
         73:7e:7d:9d:95:05:1b:d1:2d:35:c7:7d:7c:eb:bd:48:35:09:
         56:03:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:58:34 2025 by rpki-client