Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
File:                     G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft (raw, json)
Hash identifier:          aZE279TW85Mx5OTtrdWG+JJhdZZTIsbglpVUI84P3gY=
Subject key identifier:   F5:BA:DA:2A:84:D1:E9:C1:00:E1:81:FE:48:92:09:2A:BE:DC:F4:B8
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Certificate issuer:       /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial:       0196790CF65AB840782C548B24F5082408A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
Manifest number:          10E6
Signing time:             Sun 27 Apr 2025 21:00:14 +0000
Manifest this update:     Sun 27 Apr 2025 21:00:14 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:14 +0000
Files and hashes:         1: DBze0gTqh5SDOw7x6hoGuoE8yr4.roa (hash: ZLoARLtI2IGjjdgEEhL+2Ku7l0nsKThYXfmPapH0dJU=)
                          2: G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl (hash: QxTfAlgvRzhuo0bxnVZmLtKaoaD7ZIhp3TWX4VPgLi0=)
                          3: JEDgkveNrJ65vuQX11mg8UnyJUY.roa (hash: q6FNEl8CDSP0PRckpcDIVuz5w5t1HfMs8z/qUPyjC5I=)
                          4: KjkD8Cm8Nvn5kLoxMWRB37y0yGg.roa (hash: HwYwsaGRIKEpmjSBA+wSKugW77viLOfzOy52g+ZRvys=)
                          5: SAifF78qmhwobbNifv-ncSGKlCQ.roa (hash: /saAmnnB/hN9KICwUzdIN9J64c5nmcrdQQhBsyGdv1o=)
                          6: TpQ5Z-UdKferYkvwPdK8R7DUnj0.roa (hash: QghfP6CKI1HCADXXFPrgTYVwEH/4oteFqhbAKuXsWlY=)
                          7: il06Z06HBr4UubVDG3con6FSTJE.roa (hash: 6jxCobZPgi+fb0sp+gKSIVfeSMM4jnCmJ/PQ50Rwxgc=)
                          8: n3eGk4GZdLWL8rCKUegiOGKLLGE.roa (hash: T8Y25mtZcw8oW9dkDTGN7ilbRkb3BxSHEAwHzK4aavQ=)
                          9: uVOilRs9nlSZX9PqVogOUrvkQSM.roa (hash: /mCUbTOWeinlY+5TK02vBXtRmjYZ4tmNd4E1mVfIF/4=)
                          10: xfa86z-_cd1JUN4qijUc-8zKEIc.roa (hash: V2BeXBWhsFE6+Rnj92uoYp038Gza7m9G0eWAbg/3QGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 21:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:0c:f6:5a:b8:40:78:2c:54:8b:24:f5:08:24:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
        Validity
            Not Before: Apr 27 21:00:14 2025 GMT
            Not After : Apr 28 21:00:14 2025 GMT
        Subject: CN=f5bada2a84d1e9c100e181fe4892092abedcf4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:79:c0:2a:23:58:11:07:e9:ef:75:c2:c6:91:
                    21:02:4d:67:3b:27:f3:d7:20:70:a3:46:5a:de:f4:
                    91:de:1f:79:b7:a6:f4:1b:30:75:bc:35:4c:fe:88:
                    f9:ae:c4:ff:50:f7:a3:07:8f:c6:44:c4:5d:ba:3f:
                    17:b9:99:35:57:e1:3e:0e:c7:40:4c:27:37:2c:ec:
                    04:b4:73:db:7d:6f:c0:19:de:1b:ff:84:f3:d2:6f:
                    a3:23:c6:26:3a:3a:06:cd:d1:94:09:cf:eb:7f:0d:
                    21:4d:40:e5:38:07:e9:c7:5c:c6:b5:3b:02:98:fb:
                    7d:f7:e4:b5:c2:f8:4e:e7:65:45:09:44:15:0c:94:
                    a9:6b:df:fb:8a:35:1b:33:2a:71:38:27:6d:cc:75:
                    75:81:28:a3:dd:f0:91:a3:ad:2f:c7:49:2a:a7:6e:
                    91:cd:91:41:66:24:f0:9e:7b:69:51:a8:11:29:a3:
                    83:a1:42:58:bf:7d:7a:80:1a:01:47:8f:c3:83:d9:
                    7f:b7:c4:38:e3:8a:e0:7f:24:a5:da:85:59:4a:3a:
                    bb:70:ae:41:4c:d9:d3:cd:d9:78:1f:03:97:57:5f:
                    b9:b9:4a:9d:67:fd:35:cb:74:9c:92:47:61:d6:6a:
                    29:5f:0d:da:2e:8d:80:6f:78:0e:23:b7:a9:f9:29:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BA:DA:2A:84:D1:E9:C1:00:E1:81:FE:48:92:09:2A:BE:DC:F4:B8
            X509v3 Authority Key Identifier:
                keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:71:5e:5a:dc:2f:7f:28:a8:4d:4b:55:59:ec:0e:53:a7:c6:
         2f:bc:c9:8f:ee:ed:1c:a7:b4:58:1d:8e:19:29:aa:b5:3d:d8:
         84:fe:33:da:4a:2c:33:d2:59:97:72:a8:38:e9:4c:05:36:5f:
         79:1d:4b:b2:c8:f7:7f:29:4a:d0:15:02:e8:fc:e8:bd:d7:d9:
         16:f2:7c:37:03:19:46:2f:2a:9c:7f:ce:f7:2e:83:5b:19:fe:
         f1:40:69:e7:05:53:3c:52:62:f5:69:19:8f:75:2b:73:9c:21:
         fd:be:54:7e:22:96:c0:10:34:39:e8:e4:15:78:40:72:8e:21:
         4c:cd:ac:39:9e:cd:0d:cb:33:a1:a7:48:59:d7:53:da:24:07:
         43:d0:70:6b:d8:67:13:6b:f2:c6:a7:98:fe:a9:38:33:eb:18:
         52:47:89:af:cc:f5:5a:3f:36:9b:2a:ad:21:f3:3f:97:44:eb:
         58:5f:0c:ae:bd:81:91:64:e8:4f:98:42:2c:a1:2b:86:3b:00:
         66:16:6d:de:d7:c7:e2:5c:c8:e2:06:f9:f8:5b:6e:c9:e1:fe:
         16:2d:14:09:6b:8a:ed:aa:cc:af:da:cd:1e:62:84:4e:32:8d:
         f0:7a:c3:93:b4:28:b0:0b:e4:9c:b9:60:2f:d4:a7:81:6e:db:
         32:6a:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:51:21 2025 by rpki-client