Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          dlD4dTlKAbL51SWIRgomQaBdIefARRkpIjzUIE41Xs0=
Subject key identifier:   3F:F1:14:18:C5:04:D1:90:8C:1F:50:9D:26:EA:EE:04:88:E1:0E:A9
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019679E907ADBB195E063C5EAA1377CE84B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0CA7
Signing time:             Mon 28 Apr 2025 01:00:37 +0000
Manifest this update:     Mon 28 Apr 2025 01:00:37 +0000
Manifest next update:     Tue 29 Apr 2025 01:00:37 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: d9mXLelbIGE3nWqXGUCWugeag1LoY1bfPTJ1kV+NNdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:e9:07:ad:bb:19:5e:06:3c:5e:aa:13:77:ce:84:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Apr 28 01:00:37 2025 GMT
            Not After : Apr 29 01:00:37 2025 GMT
        Subject: CN=3ff11418c504d1908c1f509d26eaee0488e10ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:00:5b:bb:de:d5:c2:8b:27:47:f2:a3:ae:84:
                    bd:5d:b7:17:fc:79:31:c8:bf:16:80:e8:e8:2f:d9:
                    ac:49:08:ce:65:76:9a:65:43:e4:1c:0d:7d:45:d3:
                    ba:60:87:67:7d:c6:ed:85:78:fe:48:5e:a6:71:87:
                    de:b0:c1:ee:a6:44:ed:a1:ba:78:3f:56:83:e4:73:
                    fc:9a:71:43:94:6a:ce:b7:08:38:ce:46:f1:0c:5b:
                    df:9d:fe:65:b4:65:87:72:76:94:1c:29:48:1f:4a:
                    ac:55:3c:30:7e:c1:e4:e7:1d:c4:19:c8:d1:b9:68:
                    48:54:57:76:14:05:6c:86:7d:a0:bd:f1:b5:d2:57:
                    df:d4:b5:42:b0:a2:a8:45:01:36:f9:b4:06:ac:6a:
                    d4:ba:ea:21:cd:a5:73:f1:b1:02:b1:d5:80:ac:f7:
                    b8:97:27:53:75:5d:92:28:7f:3e:c4:2f:3d:b8:89:
                    5e:40:f5:f6:4e:c7:3e:78:d4:f8:1f:3a:12:56:f8:
                    cd:14:4c:d3:fc:93:af:71:b9:53:e2:a2:55:48:88:
                    88:16:ea:49:5c:2b:3d:a6:5b:90:dc:c4:e1:68:a7:
                    48:ca:f3:de:8a:81:fe:61:fb:d9:15:32:6b:e0:dc:
                    2f:ed:53:7d:9d:3c:9a:d3:3a:6c:44:b1:37:69:44:
                    b7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F1:14:18:C5:04:D1:90:8C:1F:50:9D:26:EA:EE:04:88:E1:0E:A9
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:f1:71:20:0a:89:e7:ed:9d:7d:41:ee:26:d7:9c:73:20:
         ec:89:68:1c:ad:1f:b0:bf:2b:0e:c4:0b:b0:95:79:10:8e:79:
         f5:c6:c4:ba:da:84:a8:dd:fb:78:ef:92:86:e0:d6:d2:29:7f:
         5c:64:9f:15:27:7f:6f:f7:36:63:46:4d:cf:30:42:43:0b:52:
         65:1c:86:67:07:2f:44:0c:d0:b4:3f:71:70:9b:c6:9b:a3:4c:
         ba:da:16:85:3d:af:10:10:1f:4e:4d:42:ee:72:65:91:dc:18:
         f2:95:bd:72:ef:06:05:5b:84:7c:ab:e3:fb:27:69:e7:27:24:
         7b:1d:cb:3a:e7:d5:a0:d6:36:5a:a2:0b:1f:b9:13:45:db:db:
         2e:5f:a5:b2:a3:22:b7:30:15:2e:15:67:2e:34:d8:8f:fc:06:
         25:05:6d:47:c9:fd:47:3b:cd:72:53:f3:db:2c:6b:fa:e1:0a:
         48:27:54:e0:c6:bb:87:6b:5c:c6:d0:a6:ab:1b:2f:58:e1:3e:
         98:4f:86:7b:74:87:2b:0c:93:d3:c2:44:3f:a2:16:69:60:ca:
         71:d1:7a:71:2c:7c:70:54:91:ce:0b:92:46:a3:51:10:53:9e:
         2f:64:25:33:5a:d0:2b:a2:b7:e0:0a:ae:bc:f9:47:d7:f8:6f:
         b3:17:86:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56QetuxleBjxeqhN3zoS3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTliNWVmMjNiYjQyM2E0N2QyYjhmMjMzZTgyYzM1NDA5
Y2NiZmMwHhcNMjUwNDI4MDEwMDM3WhcNMjUwNDI5MDEwMDM3WjAzMTEwLwYDVQQD
EygzZmYxMTQxOGM1MDRkMTkwOGMxZjUwOWQyNmVhZWUwNDg4ZTEwZWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ABbu97VwosnR/KjroS9XbcX/Hkx
yL8WgOjoL9msSQjOZXaaZUPkHA19RdO6YIdnfcbthXj+SF6mcYfesMHupkTtobp4
P1aD5HP8mnFDlGrOtwg4zkbxDFvfnf5ltGWHcnaUHClIH0qsVTwwfsHk5x3EGcjR
uWhIVFd2FAVshn2gvfG10lff1LVCsKKoRQE2+bQGrGrUuuohzaVz8bECsdWArPe4
lydTdV2SKH8+xC89uIleQPX2Tsc+eNT4HzoSVvjNFEzT/JOvcblT4qJVSIiIFupJ
XCs9pluQ3MThaKdIyvPeioH+YfvZFTJr4Nwv7VN9nTya0zpsRLE3aUS3cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/xFBjFBNGQjB9QnSbq7gSI4Q6pMB8GA1UdIwQY
MBaAFOiZte8ju0I6R9K48jPoLDVAnMv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYt
ZGIzMjRhN2UyOGU4LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYtZGIzMjRhN2UyOGU4
LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobXxcSAK
ieftnX1B7ibXnHMg7IloHK0fsL8rDsQLsJV5EI559cbEutqEqN37eO+ShuDW0il/
XGSfFSd/b/c2Y0ZNzzBCQwtSZRyGZwcvRAzQtD9xcJvGm6NMutoWhT2vEBAfTk1C
7nJlkdwY8pW9cu8GBVuEfKvj+ydp5yckex3LOufVoNY2WqILH7kTRdvbLl+lsqMi
tzAVLhVnLjTYj/wGJQVtR8n9RzvNclPz2yxr+uEKSCdU4Ma7h2tcxtCmqxsvWOE+
mE+Ge3SHKwyT08JEP6IWaWDKcdF6cSx8cFSRzguSRqNREFOeL2QlM1rQK6K34Aqu
vPlH1/hvsxeG6w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:10:38 2025 by rpki-client