Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
File:                     aiEWQxh--SWKEyXN_B0b9zg76Fs.mft (raw, json)
Hash identifier:          cckEbwGjdqDE6u4/T63FqBgpQSKc26Id7vfdOuuj4Q8=
Subject key identifier:   A1:3B:D4:64:55:FD:B0:29:C5:B0:92:F9:F3:B1:AE:B5:C2:5F:AB:0B
Authority key identifier: 6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B
Certificate issuer:       /CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
Certificate serial:       01967868DA9A2727B66B82D6D365A1118170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
Manifest number:          1512
Signing time:             Sun 27 Apr 2025 18:00:59 +0000
Manifest this update:     Sun 27 Apr 2025 18:00:59 +0000
Manifest next update:     Mon 28 Apr 2025 18:00:59 +0000
Files and hashes:         1: aiEWQxh--SWKEyXN_B0b9zg76Fs.crl (hash: OEObfwpuSkgmqaaDtQITm+8b1AgyzRrtGg2z/M+PUqo=)
                          2: g6TmhqoG_IADwsC-GEbQq9xKePg.roa (hash: L2BybzQCICOxY6zkJoh+UHB/hV65BYdz7sNC8RSFIvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:78:68:da:9a:27:27:b6:6b:82:d6:d3:65:a1:11:81:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a211643187ef9258a1325cdfc1d1bf7383be85b
        Validity
            Not Before: Apr 27 18:00:59 2025 GMT
            Not After : Apr 28 18:00:59 2025 GMT
        Subject: CN=a13bd46455fdb029c5b092f9f3b1aeb5c25fab0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ee:54:9a:75:4c:7b:53:ee:9c:7b:5a:a5:e6:
                    f2:38:60:fc:58:1b:48:57:e2:f8:50:43:80:0e:33:
                    35:50:c2:e9:f5:23:a4:24:cf:63:0f:39:cf:d4:b6:
                    34:7b:2b:ab:5a:c9:3e:58:ea:a8:5f:b1:01:81:d4:
                    ae:e7:1a:b5:3b:16:54:1e:a4:cb:58:e3:52:86:1a:
                    98:b7:22:e5:df:29:0b:02:0d:df:f0:62:43:24:4e:
                    3c:ff:8f:c8:cf:ac:b9:3f:29:7f:47:78:c7:c4:ce:
                    1b:9e:38:30:d5:23:72:b9:c5:e4:b9:cc:bd:65:6f:
                    64:ae:fd:70:e2:52:73:c7:46:fd:25:9d:09:91:9d:
                    86:35:89:ab:dc:45:89:07:69:8b:09:ea:08:24:0c:
                    11:22:8a:d5:e4:3c:07:f2:ef:6b:dd:3c:01:68:a9:
                    66:c3:43:a5:20:39:09:c9:02:5f:75:80:c2:13:9f:
                    5f:7a:c4:a7:a5:af:9d:69:57:57:61:97:7c:ab:b3:
                    5a:f4:68:94:c7:23:83:29:ad:72:b3:d9:88:d4:39:
                    fc:07:85:2a:ac:a1:96:7d:02:73:6a:45:79:dc:99:
                    39:66:bc:4b:84:4d:da:35:5f:5e:fd:be:be:6c:07:
                    a9:3e:a0:3e:92:c9:04:f0:36:c3:45:53:db:16:88:
                    52:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3B:D4:64:55:FD:B0:29:C5:B0:92:F9:F3:B1:AE:B5:C2:5F:AB:0B
            X509v3 Authority Key Identifier:
                keyid:6A:21:16:43:18:7E:F9:25:8A:13:25:CD:FC:1D:1B:F7:38:3B:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aiEWQxh--SWKEyXN_B0b9zg76Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b6a1cd-65a0-49d3-9c5f-f06fc48c8e4c/1/aiEWQxh--SWKEyXN_B0b9zg76Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:3a:b2:01:25:f0:87:bc:cc:3e:a3:63:26:43:5d:dc:7a:d3:
         9a:e3:4b:51:bf:70:c5:b6:a5:7b:8c:48:09:79:81:89:c4:20:
         ee:04:43:84:3e:79:62:71:32:8e:1e:f3:dc:87:33:03:a4:33:
         4e:6f:ba:fd:83:b1:45:e1:61:82:09:03:a8:12:ff:48:48:2c:
         4f:16:1e:42:46:09:6e:ec:a3:8b:a1:da:84:b7:a0:65:5a:ce:
         66:4c:16:b0:ab:bc:2a:b8:9f:67:4b:e9:c7:98:d2:35:a6:d9:
         d5:28:ba:4a:a4:d4:e4:e0:69:40:7b:e9:bc:93:8e:b4:f8:d7:
         c5:e2:d2:a2:a8:1c:92:25:68:a3:3a:f7:f1:2d:da:a1:6f:ca:
         e2:6f:a4:82:78:68:7a:9a:3e:49:dd:f4:67:0a:d5:e9:49:c1:
         c6:8b:49:85:2d:68:3c:3c:1c:e1:47:61:8a:01:f1:ff:10:40:
         53:61:7d:3c:c2:46:e2:de:9d:81:2c:d3:b6:f9:70:d3:95:72:
         f9:97:4f:03:e5:a9:47:23:37:ee:23:c6:17:e4:fa:7f:09:d2:
         56:13:57:fb:41:57:91:d8:fe:33:19:20:36:7a:df:5b:ae:a4:
         f0:94:21:b1:43:4e:fa:97:33:c7:e6:d3:f9:26:74:d0:31:02:
         bb:92:b0:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aNqaJye2a4LW02WhEYFwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMjExNjQzMTg3ZWY5MjU4YTEzMjVjZGZjMWQxYmY3Mzgz
YmU4NWIwHhcNMjUwNDI3MTgwMDU5WhcNMjUwNDI4MTgwMDU5WjAzMTEwLwYDVQQD
EyhhMTNiZDQ2NDU1ZmRiMDI5YzViMDkyZjlmM2IxYWViNWMyNWZhYjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwe5UmnVMe1PunHtapebyOGD8WBtI
V+L4UEOADjM1UMLp9SOkJM9jDznP1LY0eyurWsk+WOqoX7EBgdSu5xq1OxZUHqTL
WONShhqYtyLl3ykLAg3f8GJDJE48/4/Iz6y5Pyl/R3jHxM4bnjgw1SNyucXkucy9
ZW9krv1w4lJzx0b9JZ0JkZ2GNYmr3EWJB2mLCeoIJAwRIorV5DwH8u9r3TwBaKlm
w0OlIDkJyQJfdYDCE59fesSnpa+daVdXYZd8q7Na9GiUxyODKa1ys9mI1Dn8B4Uq
rKGWfQJzakV53Jk5ZrxLhE3aNV9e/b6+bAepPqA+kskE8DbDRVPbFohSjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKE71GRV/bApxbCS+fOxrrXCX6sLMB8GA1UdIwQY
MBaAFGohFkMYfvklihMlzfwdG/c4O+hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYt
ZjA2ZmM0OGM4ZTRjLzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9iNmExY2QtNjVhMC00OWQzLTljNWYtZjA2ZmM0OGM4ZTRj
LzEvYWlFV1F4aC0tU1dLRXlYTl9CMGI5emc3NkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzqyASXw
h7zMPqNjJkNd3HrTmuNLUb9wxbale4xICXmBicQg7gRDhD55YnEyjh7z3IczA6Qz
Tm+6/YOxReFhggkDqBL/SEgsTxYeQkYJbuyji6HahLegZVrOZkwWsKu8KrifZ0vp
x5jSNabZ1Si6SqTU5OBpQHvpvJOOtPjXxeLSoqgckiVoozr38S3aoW/K4m+kgnho
epo+Sd30ZwrV6UnBxotJhS1oPDwc4UdhigHx/xBAU2F9PMJG4t6dgSzTtvlw05Vy
+ZdPA+WpRyM37iPGF+T6fwnSVhNX+0FXkdj+MxkgNnrfW66k8JQhsUNO+pczx+bT
+SZ00DECu5KwRQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:18:17 2025 by rpki-client