Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
File:                     6hnxNhI41O6MRqpBsJwyLGLIh_0.mft (raw, json)
Hash identifier:          5fVLZi2zcI548D2WHzCQ6toPqy6xqQjLGXlPSwB2Sw4=
Subject key identifier:   85:01:25:6D:94:AF:88:62:4E:B2:35:08:43:34:AE:E2:BA:3F:0A:E2
Authority key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Certificate issuer:       /CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Certificate serial:       01969303A188B43205BD58C86FDE8DA18F02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
Manifest number:          14AB
Signing time:             Fri 02 May 2025 22:00:10 +0000
Manifest this update:     Fri 02 May 2025 22:00:10 +0000
Manifest next update:     Sat 03 May 2025 22:00:10 +0000
Files and hashes:         1: 6hnxNhI41O6MRqpBsJwyLGLIh_0.crl (hash: 4i6F70cZzElb0QdMVo4lGSjzW7ng0x6Et8HbjXO2FnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:93:03:a1:88:b4:32:05:bd:58:c8:6f:de:8d:a1:8f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
        Validity
            Not Before: May  2 22:00:10 2025 GMT
            Not After : May  3 22:00:10 2025 GMT
        Subject: CN=8501256d94af88624eb235084334aee2ba3f0ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:67:41:89:76:e1:c6:05:5d:5e:fb:1c:cd:
                    de:4a:c5:81:ca:e7:d3:c3:36:cd:de:ef:58:38:91:
                    86:c2:ae:31:30:95:76:6e:32:23:15:80:71:97:6a:
                    5d:38:5b:8b:c0:9a:54:81:20:ca:11:48:e0:a7:10:
                    68:cd:57:66:19:36:8b:65:82:d4:77:dc:b7:ce:07:
                    d0:dd:f9:7b:85:11:e7:2d:12:70:42:40:5a:8e:f6:
                    17:1f:52:b5:b1:5c:b6:71:d3:94:b6:ec:7f:ff:26:
                    26:f5:bd:20:49:f1:c8:f8:f5:9f:4c:b9:df:d4:15:
                    dd:a7:de:e7:66:44:f5:3e:3b:1f:b9:51:ef:3a:8e:
                    f8:f4:62:88:7d:1e:e2:9a:6c:99:d8:56:56:a6:d4:
                    44:7d:02:58:6a:fb:36:27:8c:54:0e:84:3a:f5:d6:
                    cd:80:20:23:32:2c:5b:6b:e6:df:8d:17:ef:17:7d:
                    8a:5b:92:5b:5d:eb:43:c9:c7:3d:e7:21:e9:b6:60:
                    34:34:47:79:6a:c0:70:90:00:20:3c:2d:32:fe:d7:
                    2f:10:5d:19:25:8a:06:a2:4d:b6:79:18:cf:da:50:
                    65:c8:7b:f5:93:9f:05:21:7b:31:4d:33:ed:10:f2:
                    29:d1:e4:e9:04:00:9d:78:ce:e8:79:f3:19:46:8f:
                    b9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:01:25:6D:94:AF:88:62:4E:B2:35:08:43:34:AE:E2:BA:3F:0A:E2
            X509v3 Authority Key Identifier:
                keyid:EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:e8:3e:93:b3:c8:f9:69:d7:75:5f:f4:c7:8c:e5:33:36:8f:
         1e:03:e6:7f:dd:5c:cd:5f:3d:29:d9:3f:44:6d:5e:57:3d:6e:
         7f:93:00:c5:e5:b0:16:62:8f:35:8a:d7:9c:20:59:be:c5:d5:
         1c:3b:51:95:d0:b8:35:f0:70:64:03:f6:af:12:ff:0a:31:a6:
         ea:fb:a0:61:f1:39:b3:74:4a:d1:e9:ef:5f:84:fa:13:64:cc:
         67:e6:a1:85:00:0a:e9:82:4e:f6:4d:6b:b3:40:05:bc:1f:b4:
         c5:71:af:f1:42:46:6b:9e:ac:17:20:20:3e:15:91:0e:5a:a9:
         5f:0e:9c:52:c2:b7:8e:a0:4e:f9:1b:73:1b:5f:b3:75:04:0d:
         49:c6:28:18:f7:49:d5:35:f5:ce:9b:f9:30:d1:08:86:fb:cd:
         72:52:56:57:dc:40:31:f7:35:d6:63:4c:70:56:26:db:f4:61:
         6c:65:0a:17:9e:42:84:c4:29:79:26:96:a8:d4:cd:30:3c:f4:
         71:09:ba:84:4b:74:f8:95:93:01:33:e1:fa:4f:d4:38:c8:1f:
         b2:af:1d:5a:7c:35:38:73:83:01:83:8c:83:f5:a9:fb:35:e3:
         ef:d9:64:b3:4f:e0:05:29:bc:9c:d7:68:5d:fb:1a:b6:f3:60:
         17:78:12:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:14:03 2025 by rpki-client