Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
File:                     6po2KjoeqNaaLSY__8GA2rWjgck.mft (raw, json)
Hash identifier:          84XsDAKMOJE+gtsXu5vfhjaZ9s3I7lYxtU2/OPEfvSA=
Subject key identifier:   06:0D:73:7B:A8:03:6B:45:B4:77:1A:29:C3:E9:77:13:F4:87:44:4E
Authority key identifier: EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9
Certificate issuer:       /CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
Certificate serial:       0196767AA28FD5743C67FDB2BBE24E207587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
Manifest number:          0902
Signing time:             Sun 27 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 27 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 28 Apr 2025 09:01:10 +0000
Files and hashes:         1: 6po2KjoeqNaaLSY__8GA2rWjgck.crl (hash: h4ujxOWaCCxf+Wh3/A8ZO6umVyxpk8dvflNI+Sf82rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:7a:a2:8f:d5:74:3c:67:fd:b2:bb:e2:4e:20:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea9a362a3a1ea8d69a2d263fffc180dab5a381c9
        Validity
            Not Before: Apr 27 09:01:10 2025 GMT
            Not After : Apr 28 09:01:10 2025 GMT
        Subject: CN=060d737ba8036b45b4771a29c3e97713f487444e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:63:f0:3b:56:f2:af:6c:23:88:b7:89:f6:ac:
                    b7:5f:ef:32:e3:61:e3:ea:33:49:37:8e:3b:39:05:
                    e1:50:b3:d0:fe:6a:e8:1c:49:8b:07:1b:b0:9e:b1:
                    6a:de:e5:3e:77:8e:c0:e5:bf:92:e3:c7:5b:fc:cb:
                    73:ca:76:03:df:5c:d9:07:de:40:f9:36:ca:43:19:
                    f4:77:e2:54:18:5a:11:79:bc:db:42:21:14:1f:ea:
                    78:e0:d7:26:3c:80:d7:80:84:f9:62:29:6a:3c:b4:
                    3f:5b:76:07:fc:ac:bb:e9:c0:2b:8e:22:de:f5:a3:
                    9c:04:99:9c:b0:a6:66:84:db:33:58:cc:d9:0f:2e:
                    8a:a6:f1:32:70:05:7d:ef:09:a5:c2:06:7a:fb:28:
                    93:24:96:94:38:d2:c6:08:bf:a9:2e:26:68:79:c9:
                    d1:9b:63:6e:57:18:be:c0:7e:9c:49:14:0b:22:30:
                    24:b2:70:b3:e4:d6:4f:d8:4d:a6:02:7d:4a:1a:e4:
                    e2:e9:4b:97:df:06:b1:e5:d6:8e:e3:5b:c4:b8:a9:
                    43:ee:9c:6b:01:3e:31:e0:20:42:1d:fe:9b:20:83:
                    7e:1a:cc:d5:a0:13:2d:d9:85:d6:e8:6e:53:2e:63:
                    c0:9f:4c:ed:56:de:1b:17:5b:ab:ae:a3:e8:73:7b:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:73:7B:A8:03:6B:45:B4:77:1A:29:C3:E9:77:13:F4:87:44:4E
            X509v3 Authority Key Identifier:
                keyid:EA:9A:36:2A:3A:1E:A8:D6:9A:2D:26:3F:FF:C1:80:DA:B5:A3:81:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6po2KjoeqNaaLSY__8GA2rWjgck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e7f441-12e4-41c3-8324-d4d8f896bff3/1/6po2KjoeqNaaLSY__8GA2rWjgck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:d8:56:8c:33:21:52:85:af:16:fa:db:35:b1:df:05:2b:b8:
         9e:3e:3e:10:15:7b:a6:df:d8:4b:eb:1a:65:7f:7a:af:3e:ec:
         cf:86:8e:b6:5b:77:e1:9f:14:ea:92:b0:f7:04:f7:84:43:e2:
         9c:51:00:a9:b9:bd:95:c7:06:79:37:40:99:6a:f9:5e:49:16:
         22:ec:94:81:21:73:28:06:89:72:1d:bd:0f:e2:74:87:9e:85:
         40:42:a4:b9:71:8a:61:dd:ed:42:15:9d:fa:b2:b2:cc:7a:ef:
         8c:d2:ae:d5:39:21:e0:d1:36:b8:77:69:61:4e:e2:61:1e:83:
         75:bb:8a:30:3e:a2:2a:24:c6:a8:55:39:4e:7f:0f:d6:6e:8e:
         2a:bd:f6:77:e4:95:17:4d:c4:87:96:c4:32:7b:10:16:72:52:
         71:c3:ec:af:de:af:1e:2b:fb:69:fc:9e:94:56:43:a8:dc:71:
         21:7d:3d:31:a5:a8:aa:8f:68:47:bd:93:00:03:0e:fd:08:46:
         18:55:51:b5:d6:36:23:7d:fa:71:07:24:f8:76:33:b9:79:f0:
         c2:87:74:1f:78:c0:4b:51:11:e0:21:90:be:4a:3d:09:ee:35:
         98:88:d1:26:e3:c1:1f:f8:20:aa:0a:61:93:a4:9a:3c:50:e9:
         fa:ff:e8:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2eqKP1XQ8Z/2yu+JOIHWHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhOWEzNjJhM2ExZWE4ZDY5YTJkMjYzZmZmYzE4MGRhYjVh
MzgxYzkwHhcNMjUwNDI3MDkwMTEwWhcNMjUwNDI4MDkwMTEwWjAzMTEwLwYDVQQD
EygwNjBkNzM3YmE4MDM2YjQ1YjQ3NzFhMjljM2U5NzcxM2Y0ODc0NDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mPwO1byr2wjiLeJ9qy3X+8y42Hj
6jNJN447OQXhULPQ/mroHEmLBxuwnrFq3uU+d47A5b+S48db/MtzynYD31zZB95A
+TbKQxn0d+JUGFoRebzbQiEUH+p44NcmPIDXgIT5YilqPLQ/W3YH/Ky76cArjiLe
9aOcBJmcsKZmhNszWMzZDy6KpvEycAV97wmlwgZ6+yiTJJaUONLGCL+pLiZoecnR
m2NuVxi+wH6cSRQLIjAksnCz5NZP2E2mAn1KGuTi6UuX3wax5daO41vEuKlD7pxr
AT4x4CBCHf6bIIN+GszVoBMt2YXW6G5TLmPAn0ztVt4bF1urrqPoc3uaHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYNc3uoA2tFtHcaKcPpdxP0h0ROMB8GA1UdIwQY
MBaAFOqaNio6HqjWmi0mP//BgNq1o4HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQt
ZDRkOGY4OTZiZmYzLzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9lN2Y0NDEtMTJlNC00MWMzLTgzMjQtZDRkOGY4OTZiZmYz
LzEvNnBvMktqb2VxTmFhTFNZX184R0EycldqZ2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1thWjDMh
UoWvFvrbNbHfBSu4nj4+EBV7pt/YS+saZX96rz7sz4aOtlt34Z8U6pKw9wT3hEPi
nFEAqbm9lccGeTdAmWr5XkkWIuyUgSFzKAaJch29D+J0h56FQEKkuXGKYd3tQhWd
+rKyzHrvjNKu1Tkh4NE2uHdpYU7iYR6DdbuKMD6iKiTGqFU5Tn8P1m6OKr32d+SV
F03Eh5bEMnsQFnJSccPsr96vHiv7afyelFZDqNxxIX09MaWoqo9oR72TAAMO/QhG
GFVRtdY2I336cQck+HYzuXnwwod0H3jAS1ER4CGQvko9Ce41mIjRJuPBH/ggqgph
k6SaPFDp+v/oCQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 15:03:27 2025 by rpki-client