Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
File:                     6rBQEXItJcEknmWLLK7MEYwp6CI.mft (raw, json)
Hash identifier:          oZO+kHHN4Zlwz3V8C9ctWTuRnYm6boPR2mHqe3v2wv4=
Subject key identifier:   58:BA:D8:B1:C0:5D:E2:12:36:9C:BE:00:08:9B:F0:D7:05:DD:B0:B4
Authority key identifier: EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22
Certificate issuer:       /CN=eab05011722d25c1249e658b2caecc118c29e822
Certificate serial:       019684357E7A450BF516A62DAFE9C69A6656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
Manifest number:          0294
Signing time:             Wed 30 Apr 2025 01:00:20 +0000
Manifest this update:     Wed 30 Apr 2025 01:00:20 +0000
Manifest next update:     Thu 01 May 2025 01:00:20 +0000
Files and hashes:         1: 6rBQEXItJcEknmWLLK7MEYwp6CI.crl (hash: VvbWMWDSEF7OHgC/meES4YF68pc2jfuEAulSaU3pcKc=)
                          2: CJPWpn8RP7gsAwpJK6rfiafLL0g.roa (hash: MSILC9AgMAOaApiwEtXOHau49IMY7PQIrPiC8xgTPYU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:35:7e:7a:45:0b:f5:16:a6:2d:af:e9:c6:9a:66:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eab05011722d25c1249e658b2caecc118c29e822
        Validity
            Not Before: Apr 30 01:00:20 2025 GMT
            Not After : May  1 01:00:20 2025 GMT
        Subject: CN=58bad8b1c05de212369cbe00089bf0d705ddb0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5c:ca:61:72:0c:fa:57:07:91:b9:fe:91:62:
                    8b:77:f3:e6:c6:dd:7d:42:a7:95:5a:63:15:28:12:
                    d4:8a:6e:36:f4:db:a3:98:e9:68:a0:ef:53:4f:72:
                    e6:29:cc:37:7d:9e:fd:0c:7e:e9:de:40:cc:bd:3e:
                    0f:fe:84:17:52:aa:9e:61:52:89:0e:98:7c:79:1f:
                    a7:e6:11:50:03:78:4d:54:6c:fc:6d:a1:2f:65:ef:
                    a8:f6:c9:f9:90:63:a6:74:ea:27:f8:22:09:24:15:
                    3d:a3:a3:96:0b:7d:33:69:4e:16:b0:49:5a:1c:8e:
                    73:b5:bb:a3:6d:ca:84:35:e7:bb:fc:6a:a1:8a:58:
                    c7:ec:67:f8:be:f5:25:0c:96:94:c9:21:b9:ca:c8:
                    6f:bf:dd:8f:a8:ed:c0:ca:69:8a:3b:a8:cb:b1:16:
                    3b:e7:34:f5:91:b9:6a:8b:3c:fe:c8:06:32:b1:a6:
                    14:91:49:0a:8b:93:7b:22:15:6b:80:d9:0c:5c:dc:
                    db:99:b4:88:37:dc:3f:d5:08:77:93:1a:70:7e:b2:
                    43:e4:97:86:a2:5a:9c:3f:99:ea:00:82:d2:a6:75:
                    03:5d:7b:96:cb:fc:1e:9f:46:1d:2f:eb:ee:29:72:
                    69:e7:f6:a6:6a:f7:41:ea:5c:e8:3f:59:2f:88:34:
                    d4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BA:D8:B1:C0:5D:E2:12:36:9C:BE:00:08:9B:F0:D7:05:DD:B0:B4
            X509v3 Authority Key Identifier:
                keyid:EA:B0:50:11:72:2D:25:C1:24:9E:65:8B:2C:AE:CC:11:8C:29:E8:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rBQEXItJcEknmWLLK7MEYwp6CI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/3f9528-ba1a-4253-8507-7db8f816d077/1/6rBQEXItJcEknmWLLK7MEYwp6CI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:77:8d:84:7d:ea:56:44:18:2c:43:1b:1e:1d:39:91:17:
         cf:3e:4b:8f:a3:25:0e:b7:d6:66:9c:b1:53:02:c3:fb:0f:df:
         9e:85:e7:e5:f1:87:d0:59:95:8f:45:8b:18:a2:28:85:9a:d0:
         3d:ac:75:4b:fa:6f:75:6d:14:ee:9f:76:da:13:b0:66:72:74:
         b4:e6:69:30:df:92:f7:0d:fc:a8:46:3b:af:da:af:f8:21:5a:
         f2:77:75:4c:15:c4:5e:8e:01:ef:d0:f4:04:17:38:43:0f:06:
         cf:64:46:e5:3f:d6:84:c9:31:86:e1:6e:9f:0d:f3:90:bc:fb:
         b3:09:e2:88:d7:b7:97:15:83:21:79:74:37:db:c6:14:55:cf:
         9e:28:35:06:da:b2:64:6f:41:b1:cf:e7:39:bb:61:ac:c2:64:
         16:2b:51:85:2c:78:78:b6:cf:27:61:32:d2:c2:7c:45:f3:f6:
         5d:12:10:82:42:0c:26:2a:29:02:5e:62:e3:2e:a2:d6:d2:38:
         59:9c:fa:eb:a1:7a:ca:04:58:f9:24:4c:d4:21:c7:45:b7:b8:
         cd:37:7b:de:34:60:62:74:34:cf:7a:23:90:0a:e5:32:61:89:
         41:d7:8c:9d:c2:82:bc:4a:e6:3d:5f:58:05:49:c7:9b:11:3d:
         89:81:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:38:58 2025 by rpki-client