Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          yg1GVWBPQ/EWOUpgfmkVwVAUqCkvAoTCtHcz4a4e7yc=
Subject key identifier:   CC:67:72:F7:63:87:55:68:A5:8B:44:98:D8:92:E5:DE:AB:ED:01:6F
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       01967567ADD3C91A3BB88EFCB2383C061912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          0187
Signing time:             Sun 27 Apr 2025 04:00:51 +0000
Manifest this update:     Sun 27 Apr 2025 04:00:51 +0000
Manifest next update:     Mon 28 Apr 2025 04:00:51 +0000
Files and hashes:         1: EojBLE-kejfyfqtsbOflpbWdQR8.roa (hash: RAQIxXhtS5DacFq9O32LjkXlaDp6cgdHs91Xbraog08=)
                          2: G-IyOfxP0oIKcgqsyvK7PQysJI4.roa (hash: J12Xsn1iPdPrEhwd+oE2AQU+Dv20weYAXKmMI/VZwUY=)
                          3: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
                          4: YbYIY0qTeSsp6g9hGcy8a1n63ZI.roa (hash: Gjz0NNqi1uea9ZdNKd1fYQPsBvHDVmsLfdpqjwRA4dc=)
                          5: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: eR05nYmp+HSVqq2C/afx2Bn7Wtys8SL/1bsPgK+NX/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:67:ad:d3:c9:1a:3b:b8:8e:fc:b2:38:3c:06:19:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Apr 27 04:00:51 2025 GMT
            Not After : Apr 28 04:00:51 2025 GMT
        Subject: CN=cc6772f763875568a58b4498d892e5deabed016f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:54:4c:44:55:92:b3:62:ac:c0:42:2d:d5:
                    e6:cb:40:f1:3d:e5:46:cb:be:c0:e0:bc:d8:7b:67:
                    42:ad:f4:a6:b7:62:26:c4:07:17:13:84:86:e2:4e:
                    3f:52:70:58:6f:58:d9:f5:ad:0f:df:44:20:c4:6b:
                    be:00:7b:3d:99:90:d4:42:dc:2a:20:1d:19:50:37:
                    d1:a3:4d:5f:8f:8d:12:77:3d:75:4c:50:3d:35:6a:
                    f2:ca:8c:0d:0b:96:ac:6e:d5:5f:f7:1a:70:95:c7:
                    79:92:67:ba:ab:69:aa:ac:52:de:da:f6:00:a0:c4:
                    9b:ee:51:df:6b:06:2c:77:4a:ad:b5:54:f6:b8:4d:
                    75:9b:ab:5c:fb:ef:59:5b:b8:7d:b1:0a:77:a2:f5:
                    e1:dd:fb:07:06:79:83:27:c3:e2:23:9f:3d:ba:c9:
                    7e:10:9e:94:e7:1e:4d:ba:9f:15:3d:52:88:1a:24:
                    cc:41:ec:75:0e:6b:90:ff:18:92:96:ff:55:b7:8c:
                    15:9c:c4:f8:c0:44:06:3e:27:5a:b3:73:eb:36:5f:
                    5c:ac:75:c9:1d:a1:2a:35:e4:5e:5c:1c:37:21:ed:
                    a4:06:24:fe:d5:ae:fc:14:a8:e4:55:89:0d:8e:e6:
                    30:5a:59:0b:d8:5c:8c:e6:95:38:cd:78:33:57:ff:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:67:72:F7:63:87:55:68:A5:8B:44:98:D8:92:E5:DE:AB:ED:01:6F
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:bf:22:1b:42:f3:d7:ab:60:60:c8:59:4a:33:83:9d:9a:9c:
         48:30:2a:a4:15:de:7c:7d:d4:4d:27:9a:2f:44:45:dc:60:80:
         96:e6:43:f0:59:4a:cc:98:e9:89:ae:75:9b:a5:76:32:e5:da:
         31:d8:c2:b2:c8:52:98:5f:2b:c5:80:d6:3b:ac:d2:51:cf:1a:
         bc:a4:3a:a4:03:c4:47:74:5b:c8:71:81:cc:fd:37:89:e0:05:
         33:41:a6:17:fc:1d:4d:bc:44:61:38:12:8a:ca:18:ee:fd:a3:
         36:8c:24:a4:a1:c3:07:df:02:da:35:91:d2:6f:1f:9f:69:4e:
         65:ad:fb:65:a4:66:7c:64:aa:0a:b6:4e:b6:db:69:25:f2:48:
         9c:c3:73:25:da:46:69:49:4b:95:d1:70:ae:1a:a5:89:55:7d:
         c4:ca:66:ae:d2:17:dc:9b:40:69:46:92:0d:d3:26:a5:5b:26:
         5c:c9:54:55:41:5c:51:d5:6e:7b:86:fc:90:c8:26:ef:3a:f2:
         06:a1:82:57:8f:e9:b5:e5:c9:36:1e:db:0b:b5:a2:7c:5b:21:
         48:8d:1a:5d:e0:a7:00:68:9b:64:f3:4b:46:89:16:a7:af:f4:
         b8:e4:c7:4b:4d:7b:47:eb:05:bc:12:a3:04:f5:cf:7e:0b:48:
         a4:3d:51:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:19 2025 by rpki-client