Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
File:                     azT6U9HYTbq-aY1bvMrt8QnRV64.mft (raw, json)
Hash identifier:          C9CQ8oDlS6o+OEAmxDAW9gBR1jMfV6x06kFGOnIseFo=
Subject key identifier:   1D:54:DE:07:54:30:04:65:D1:EA:4A:55:9A:91:A4:B5:90:E8:3E:0B
Authority key identifier: 6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE
Certificate issuer:       /CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
Certificate serial:       01968BB807CA68FF61177DE9B9F817BD885C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
Manifest number:          151E
Signing time:             Thu 01 May 2025 12:00:15 +0000
Manifest this update:     Thu 01 May 2025 12:00:15 +0000
Manifest next update:     Fri 02 May 2025 12:00:15 +0000
Files and hashes:         1: azT6U9HYTbq-aY1bvMrt8QnRV64.crl (hash: B5OhucMxSMmiP+kK0jKk0r1lwa6xswb7jd8zgKbpOlE=)
                          2: yFAScqy1SZnNR2xfePl0FenNN0g.roa (hash: vURxboeBcUQDk9P166WC/cJAnLRENen5C6McIffi+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 12:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8b:b8:07:ca:68:ff:61:17:7d:e9:b9:f8:17:bd:88:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b34fa53d1d84dbabe698d5bbccaedf109d157ae
        Validity
            Not Before: May  1 12:00:15 2025 GMT
            Not After : May  2 12:00:15 2025 GMT
        Subject: CN=1d54de0754300465d1ea4a559a91a4b590e83e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:96:4b:48:e0:1a:00:64:4e:c0:11:4b:66:
                    59:e4:cc:28:06:4f:7a:54:b5:64:f3:3d:30:81:1e:
                    f8:dc:07:eb:9f:65:c9:13:c4:b4:15:a9:30:3e:64:
                    b1:16:d9:e6:2a:fe:ee:2b:09:36:48:a1:70:40:51:
                    0f:88:3a:5d:f0:89:43:47:56:30:f4:47:8b:06:5b:
                    f1:54:cd:e4:11:5c:35:e2:9c:8e:02:64:e4:4d:a0:
                    a4:cd:a3:1e:15:b9:b0:25:58:26:19:a1:aa:1b:25:
                    f0:42:3f:33:61:7b:e8:c5:e2:34:49:3e:1e:cf:35:
                    c0:33:bd:50:dd:33:2c:67:17:8d:4d:f2:51:a0:e9:
                    f0:3e:db:d2:01:ae:34:67:93:b9:d6:11:5d:e1:08:
                    94:84:f3:bb:08:b1:72:b2:02:b6:79:b9:ec:5d:56:
                    8d:01:fe:26:96:3f:3e:ce:fc:7e:6e:36:ad:64:4f:
                    e9:51:9b:da:0e:16:db:17:28:05:64:7d:b0:01:df:
                    00:8b:ad:dc:e9:77:86:b6:9e:fb:0e:4c:96:e4:12:
                    e3:f6:ae:ee:7a:c8:2c:82:b8:19:8a:63:29:98:bb:
                    f4:c8:82:e5:23:80:6d:b3:5c:19:46:f5:e7:13:23:
                    93:b0:74:f5:fe:33:ae:fc:24:bd:a1:1c:e9:12:73:
                    02:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:54:DE:07:54:30:04:65:D1:EA:4A:55:9A:91:A4:B5:90:E8:3E:0B
            X509v3 Authority Key Identifier:
                keyid:6B:34:FA:53:D1:D8:4D:BA:BE:69:8D:5B:BC:CA:ED:F1:09:D1:57:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azT6U9HYTbq-aY1bvMrt8QnRV64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/528de1-8f68-4cb9-b6ce-ffaaa299af61/1/azT6U9HYTbq-aY1bvMrt8QnRV64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ac:66:e6:4e:69:66:94:3c:bd:f8:6e:e9:a3:b9:03:77:09:
         22:16:e3:5d:ce:43:bb:e4:f6:50:2f:8b:57:e7:00:74:d9:56:
         13:a4:61:43:38:1c:5b:ae:c5:ed:f5:5f:cb:97:12:18:56:59:
         cb:94:eb:02:ef:78:35:31:e8:86:fb:c9:d3:c5:5d:65:c2:af:
         53:3a:91:4b:07:87:e9:77:1f:8e:f2:a5:ae:83:2c:a9:d8:0c:
         0d:6d:7b:84:5e:6d:3a:02:b0:68:f3:94:39:36:b7:bb:90:a7:
         eb:4b:1e:76:34:a5:35:1f:6b:68:47:80:ea:23:3d:a3:11:f4:
         55:e9:f3:01:aa:71:b2:6f:08:a9:84:5b:8e:4b:11:ac:5b:2b:
         f3:1c:34:63:23:a9:d9:b8:72:6d:d6:1b:3b:90:28:32:16:91:
         54:80:4b:ab:3b:1a:57:31:be:53:81:69:a8:a6:5c:5d:6e:a4:
         21:29:2b:c6:4f:bd:65:9f:80:59:26:58:6e:2e:c1:fb:ea:a1:
         a9:39:ef:7e:7d:86:d9:78:e5:38:3c:ce:b4:8e:41:07:73:2e:
         28:ae:b2:93:bc:1c:67:02:de:2f:d0:46:66:5f:ec:a4:ea:fb:
         2b:52:26:27:45:37:44:ba:88:8f:5e:4b:22:0e:d6:ba:29:c0:
         41:ed:c0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:58:50 2025 by rpki-client