Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File:                     B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier:          CLnN/TEfGujnoZKy+QHA06e3abS/0E0W0gJUzTfcyUY=
Subject key identifier:   16:27:8F:C0:08:4A:0B:EB:0B:4D:3B:73:DF:DA:61:B0:4D:4D:7B:E2
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer:       /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial:       0196729D470542AC7A1BE32CC828A968D624
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number:          150D
Signing time:             Sat 26 Apr 2025 15:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:31 +0000
Files and hashes:         1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: e4zflx6k3ubpPdx7KxaIPdzj7Z9QioRk8sVHFnfw410=)
                          2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:47:05:42:ac:7a:1b:e3:2c:c8:28:a9:68:d6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
        Validity
            Not Before: Apr 26 15:00:31 2025 GMT
            Not After : Apr 27 15:00:31 2025 GMT
        Subject: CN=16278fc0084a0beb0b4d3b73dfda61b04d4d7be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:7a:d6:92:92:4f:9d:2a:36:ee:c9:c6:d1:
                    ca:ba:57:81:f5:bb:6d:1d:37:86:a6:20:4e:b5:c6:
                    e6:e1:89:a7:cc:4f:19:a5:8b:55:2e:db:24:fc:79:
                    05:a2:97:fb:9c:96:3d:28:6f:9f:92:3e:86:1d:95:
                    15:c5:7e:80:ca:21:63:39:45:de:e2:49:94:a3:7c:
                    88:c1:19:1f:fd:db:8a:b0:2a:f2:98:f2:bb:b1:9e:
                    38:75:63:f7:90:b5:0e:63:af:26:14:fd:21:11:f9:
                    02:e4:02:c5:91:0f:74:c5:d5:02:bb:27:fc:08:b7:
                    31:99:50:8a:3b:2d:0b:06:cd:11:cc:34:1f:7e:a7:
                    52:e6:a8:d3:15:2a:13:07:9c:41:23:ee:a8:70:b2:
                    12:30:7f:3d:f4:85:75:ea:f7:8a:4f:d5:c3:a3:17:
                    4d:4f:75:f2:82:03:88:0f:dc:d3:76:0b:cc:4b:6c:
                    5c:1e:f8:c9:b3:dc:1f:82:cf:40:51:aa:d7:2b:87:
                    fd:9c:4c:4a:a7:2c:29:68:18:40:dc:df:d3:bc:99:
                    43:15:5b:89:1b:9d:e9:90:88:46:de:10:03:a9:a5:
                    17:59:26:c9:73:18:28:5f:ba:3f:33:df:77:a2:77:
                    f1:60:5f:6e:80:6d:8d:f5:98:5c:92:ce:a2:d5:9b:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:27:8F:C0:08:4A:0B:EB:0B:4D:3B:73:DF:DA:61:B0:4D:4D:7B:E2
            X509v3 Authority Key Identifier:
                keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e7:ec:fb:13:3e:88:21:6d:5d:b5:59:a8:99:f1:74:f4:d4:
         c9:50:ca:9c:51:00:c8:be:57:b7:12:02:2f:cf:ec:09:ee:10:
         84:62:7a:21:61:39:2a:4c:8e:f7:02:a4:51:f7:00:52:89:aa:
         01:af:f6:a7:1f:08:9a:c6:44:c9:9c:0a:a7:a5:af:20:44:e3:
         c6:5e:ea:f4:1a:55:f9:5d:dc:5a:b3:5a:cf:1c:53:b2:3c:98:
         21:d8:45:eb:5e:4c:1d:73:ff:e8:a8:c6:f5:96:2a:dd:40:0b:
         72:e9:23:fd:54:a2:72:b2:19:91:44:79:5e:bf:41:6b:67:19:
         a1:a8:dd:d6:7e:df:09:1b:4f:d4:c2:46:00:d2:7d:20:1e:fc:
         1a:f0:07:b0:e0:b8:85:a7:ef:d0:b5:27:92:6d:b6:14:d2:7f:
         df:50:96:97:62:91:e8:af:b0:ad:54:46:61:22:c9:94:fb:d8:
         84:61:75:19:7c:f5:0c:13:47:8a:90:34:df:73:f0:93:47:2a:
         3f:a1:d8:a9:24:e1:92:95:40:7f:d6:b3:20:23:a6:fb:22:29:
         93:4f:d6:35:3e:57:79:b9:49:ef:0d:b1:d7:e2:c7:5a:eb:7b:
         6d:2f:aa:db:ae:5a:e6:cd:ac:66:24:5b:09:02:b6:5d:31:95:
         4e:b2:23:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynUcFQqx6G+MsyCipaNYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTA0ODZkYzBiNGJhNzMwOTAzNzg4ZmYzZjNmN2M4MjQ5
YjkyMWYwHhcNMjUwNDI2MTUwMDMxWhcNMjUwNDI3MTUwMDMxWjAzMTEwLwYDVQQD
EygxNjI3OGZjMDA4NGEwYmViMGI0ZDNiNzNkZmRhNjFiMDRkNGQ3YmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vV61pKST50qNu7JxtHKuleB9btt
HTeGpiBOtcbm4YmnzE8ZpYtVLtsk/HkFopf7nJY9KG+fkj6GHZUVxX6AyiFjOUXe
4kmUo3yIwRkf/duKsCrymPK7sZ44dWP3kLUOY68mFP0hEfkC5ALFkQ90xdUCuyf8
CLcxmVCKOy0LBs0RzDQffqdS5qjTFSoTB5xBI+6ocLISMH899IV16veKT9XDoxdN
T3XyggOID9zTdgvMS2xcHvjJs9wfgs9AUarXK4f9nExKpywpaBhA3N/TvJlDFVuJ
G53pkIhG3hADqaUXWSbJcxgoX7o/M993onfxYF9ugG2N9Zhcks6i1Zvt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYnj8AISgvrC007c9/aYbBNTXviMB8GA1UdIwQY
MBaAFAegSG3AtLpzCQN4j/Pz98gkm5IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2Yt
NmJkZGIzMTdlNzhiLzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2YtNmJkZGIzMTdlNzhi
LzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOfs+xM+
iCFtXbVZqJnxdPTUyVDKnFEAyL5XtxICL8/sCe4QhGJ6IWE5KkyO9wKkUfcAUomq
Aa/2px8ImsZEyZwKp6WvIETjxl7q9BpV+V3cWrNazxxTsjyYIdhF615MHXP/6KjG
9ZYq3UALcukj/VSicrIZkUR5Xr9Ba2cZoajd1n7fCRtP1MJGANJ9IB78GvAHsOC4
hafv0LUnkm22FNJ/31CWl2KR6K+wrVRGYSLJlPvYhGF1GXz1DBNHipA033Pwk0cq
P6HYqSThkpVAf9azICOm+yIpk0/WNT5XeblJ7w2x1+LHWut7bS+q265a5s2sZiRb
CQK2XTGVTrIjFA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:21 2025 by rpki-client