Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
File:                     6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft (raw, json)
Hash identifier:          z84VRP4MRGtQ/5ZWbT3Am3SJaEOf+qD9uZ6wlz9yf6E=
Subject key identifier:   D7:44:08:71:13:51:F5:10:18:30:4F:02:9A:79:F7:EE:9E:42:31:64
Authority key identifier: EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17
Certificate issuer:       /CN=ea7651c0f1bf648ec64952e8084574b900f08a17
Certificate serial:       019677C37A679CB1CF5E0E48BDDAFA21F1FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
Manifest number:          024A
Signing time:             Sun 27 Apr 2025 15:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:21 +0000
Files and hashes:         1: 6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl (hash: rhtPJrHj5guRw5a9Ml2ZiHAxxBaCopDwmVDk2jEj+nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:7a:67:9c:b1:cf:5e:0e:48:bd:da:fa:21:f1:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea7651c0f1bf648ec64952e8084574b900f08a17
        Validity
            Not Before: Apr 27 15:00:21 2025 GMT
            Not After : Apr 28 15:00:21 2025 GMT
        Subject: CN=d74408711351f51018304f029a79f7ee9e423164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:12:5b:3f:de:cb:98:b7:79:92:9e:06:e0:
                    a4:e5:11:82:fc:ac:31:15:d1:1b:0b:56:26:5b:a5:
                    67:81:67:91:0d:32:9d:c1:8f:5a:ee:d4:27:b9:e5:
                    ad:ed:76:4f:6f:5b:c0:d9:46:58:26:d1:39:2c:3a:
                    9f:86:08:50:12:f9:85:0e:53:19:b6:3a:25:71:f3:
                    e0:69:56:13:4f:76:ec:dd:27:b8:de:3a:77:56:26:
                    ce:3f:f5:2e:1b:cd:03:b5:36:b2:ea:60:1e:fc:f2:
                    e5:84:1f:ce:26:36:3f:d6:73:c6:84:5f:3a:c1:8d:
                    56:22:48:00:b7:05:38:6f:0b:63:29:8b:72:d0:80:
                    21:2d:fb:9a:87:42:3e:f5:dd:07:6f:cb:51:f3:26:
                    80:06:cf:e3:a4:db:c5:57:b9:cb:0e:ff:bb:08:9f:
                    38:3c:f3:36:da:fd:19:e1:4e:cf:e7:94:2b:42:cf:
                    d2:c1:49:99:79:ae:47:ba:22:67:f0:32:af:17:5b:
                    83:27:3a:01:ba:1b:61:af:de:65:3d:e3:53:1a:b0:
                    2e:83:4e:7c:f0:0b:99:79:2c:2d:ee:ae:60:fd:8c:
                    ee:7d:4e:bf:02:18:51:bd:6f:42:e3:a1:45:30:13:
                    8c:a3:9d:b6:8e:9b:b6:d6:65:54:0b:38:76:0c:78:
                    4a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:44:08:71:13:51:F5:10:18:30:4F:02:9A:79:F7:EE:9E:42:31:64
            X509v3 Authority Key Identifier:
                keyid:EA:76:51:C0:F1:BF:64:8E:C6:49:52:E8:08:45:74:B9:00:F0:8A:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6nZRwPG_ZI7GSVLoCEV0uQDwihc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4d0106-c1ed-4ff1-abd6-60dec97d6783/1/6nZRwPG_ZI7GSVLoCEV0uQDwihc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ea:e3:d8:fe:2c:e7:bf:fa:d8:b2:95:c6:08:29:cf:c7:11:
         7d:f4:0d:0d:ce:81:6f:c4:7b:e5:fa:20:1f:ea:0b:03:70:25:
         aa:f9:ac:08:25:95:07:74:e5:57:05:ee:aa:ae:66:8e:c2:ee:
         dd:46:25:59:16:3b:80:15:e8:e0:92:a9:22:e4:6a:81:56:c3:
         e6:d5:b9:24:ca:ad:b0:1b:91:07:72:ca:f9:de:42:ee:00:ec:
         41:b0:b5:78:50:76:86:64:db:1b:f0:c5:12:28:68:df:3c:27:
         17:82:78:96:eb:61:ab:5d:74:55:00:44:ac:5b:56:4c:88:f1:
         a2:18:7a:66:0a:77:3c:cc:68:cc:1c:b1:d5:11:1a:30:2e:ac:
         dc:d8:c3:fa:21:90:49:ef:0a:ae:2a:bb:d3:21:29:bf:52:00:
         39:27:99:48:62:fe:e8:b3:8d:46:54:84:64:b8:e2:b8:78:c4:
         c0:7f:08:6f:45:4f:83:7a:f2:3f:9a:aa:b6:98:42:c6:ee:2d:
         15:13:5d:6b:1b:bc:2e:83:80:91:94:df:ac:1b:2f:99:1a:6f:
         43:eb:87:52:00:45:d3:d4:fb:16:da:41:ff:07:f7:18:d5:de:
         d5:40:87:84:78:c7:9b:a8:6f:ba:b1:e4:26:6d:96:90:aa:b0:
         a6:44:c1:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3w3pnnLHPXg5Ivdr6IfH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNzY1MWMwZjFiZjY0OGVjNjQ5NTJlODA4NDU3NGI5MDBm
MDhhMTcwHhcNMjUwNDI3MTUwMDIxWhcNMjUwNDI4MTUwMDIxWjAzMTEwLwYDVQQD
EyhkNzQ0MDg3MTEzNTFmNTEwMTgzMDRmMDI5YTc5ZjdlZTllNDIzMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hESWz/ey5i3eZKeBuCk5RGC/Kwx
FdEbC1YmW6VngWeRDTKdwY9a7tQnueWt7XZPb1vA2UZYJtE5LDqfhghQEvmFDlMZ
tjolcfPgaVYTT3bs3Se43jp3VibOP/UuG80DtTay6mAe/PLlhB/OJjY/1nPGhF86
wY1WIkgAtwU4bwtjKYty0IAhLfuah0I+9d0Hb8tR8yaABs/jpNvFV7nLDv+7CJ84
PPM22v0Z4U7P55QrQs/SwUmZea5HuiJn8DKvF1uDJzoBuhthr95lPeNTGrAug058
8AuZeSwt7q5g/YzufU6/AhhRvW9C46FFMBOMo522jpu21mVUCzh2DHhKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdECHETUfUQGDBPApp59+6eQjFkMB8GA1UdIwQY
MBaAFOp2UcDxv2SOxklS6AhFdLkA8IoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYt
NjBkZWM5N2Q2NzgzLzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZDAxMDYtYzFlZC00ZmYxLWFiZDYtNjBkZWM5N2Q2Nzgz
LzEvNm5aUndQR19aSTdHU1ZMb0NFVjB1UUR3aWhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+rj2P4s
57/62LKVxggpz8cRffQNDc6Bb8R75fogH+oLA3AlqvmsCCWVB3TlVwXuqq5mjsLu
3UYlWRY7gBXo4JKpIuRqgVbD5tW5JMqtsBuRB3LK+d5C7gDsQbC1eFB2hmTbG/DF
Eiho3zwnF4J4luthq110VQBErFtWTIjxohh6Zgp3PMxozByx1REaMC6s3NjD+iGQ
Se8Kriq70yEpv1IAOSeZSGL+6LONRlSEZLjiuHjEwH8Ib0VPg3ryP5qqtphCxu4t
FRNdaxu8LoOAkZTfrBsvmRpvQ+uHUgBF09T7FtpB/wf3GNXe1UCHhHjHm6hvurHk
Jm2WkKqwpkTBVw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:58:13 2025 by rpki-client