Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
File:                     B6_c1el6wcECR5yVTV-SKxJsvBQ.mft (raw, json)
Hash identifier:          hffEjwtWxPhL6GRCing5vAicAyLIEZu3g2g6qKlgizs=
Subject key identifier:   DF:B3:4E:A5:83:F9:B5:18:08:E2:AC:2C:97:26:15:4E:B8:1C:55:36
Authority key identifier: 07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14
Certificate issuer:       /CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
Certificate serial:       019679B2100C2DB88ACE6345262D21D3F7F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
Manifest number:          012A
Signing time:             Mon 28 Apr 2025 00:00:34 +0000
Manifest this update:     Mon 28 Apr 2025 00:00:34 +0000
Manifest next update:     Tue 29 Apr 2025 00:00:34 +0000
Files and hashes:         1: AkYoHCkYkqYJ4e6zgOpT_d4rAcc.roa (hash: DnY6vZRN7L3S7U3NUI/WYv9ICvZ75py/lkvoFGjOBWo=)
                          2: B6_c1el6wcECR5yVTV-SKxJsvBQ.crl (hash: c+8mHB6r7831dd7Dshi7C1jDRB1UETIjFxgDmATHnak=)
                          3: K_uU63IUWkuBSdujRaZVJyYDuQA.roa (hash: c36gCPnGo7y/i+lTuAsqFsR3biz87ULqS+Id7LIKINM=)
                          4: OXvCW8MMgkF4QZALyfIeJNaaoXA.roa (hash: /PcXdkDQ/rrC5eLGBEhuLOwRqaBJEq8rOAtu2iNHHtg=)
                          5: Obfrc8v6dEFGQ7AawtimQ35a5RE.roa (hash: uc9ErdPzOY2Bm4rwSrqZ+I27rdJg/4Wg0LANwfHzDP0=)
                          6: QZFqMpUTlcgeboKANl58QufnsKQ.roa (hash: NRvFYfoNhNqi7BWM2zeDShfUo2m9RhNxfQeL6DGdAxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:b2:10:0c:2d:b8:8a:ce:63:45:26:2d:21:d3:f7:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07afdcd5e97ac1c102479c954d5f922b126cbc14
        Validity
            Not Before: Apr 28 00:00:34 2025 GMT
            Not After : Apr 29 00:00:34 2025 GMT
        Subject: CN=dfb34ea583f9b51808e2ac2c9726154eb81c5536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:98:2c:ea:e2:92:1c:d9:42:de:0e:5c:e5:
                    6b:77:75:8f:bc:ec:bf:fc:62:f6:ef:c8:4c:03:e1:
                    8d:9e:6f:f1:6c:a9:71:6e:9c:1d:eb:8b:97:ec:b8:
                    cc:97:5f:fa:30:dd:1b:b4:6c:55:7b:60:29:9d:2b:
                    a7:b6:31:b3:6a:d0:ad:fb:ee:31:a2:5d:bf:23:f7:
                    64:1f:ae:20:83:5c:9f:be:f7:9a:ae:db:d9:9b:e0:
                    59:5c:fc:0f:0c:3a:6f:4d:36:b5:68:57:3e:cd:f8:
                    7b:1b:8d:ad:91:47:cd:30:52:86:f6:f4:b5:5a:32:
                    c1:64:62:a7:dd:6e:1b:f8:c7:32:58:e1:e3:e6:e2:
                    9d:26:70:25:3a:22:28:0f:19:1c:9f:3e:cc:f8:df:
                    cd:d4:29:5e:29:5d:3b:0c:10:78:ca:23:e5:c7:40:
                    b7:80:0c:88:c0:29:1b:4c:f5:2a:aa:16:7d:28:67:
                    c7:a8:26:50:19:6f:b9:a6:06:21:5f:c8:01:3e:04:
                    b8:ea:6b:16:b8:e6:b3:ce:99:76:15:d1:94:f8:60:
                    97:22:96:90:5c:39:da:a5:88:d1:79:2b:66:39:e3:
                    10:13:be:a9:00:a9:2c:6c:bf:2c:35:28:87:59:8b:
                    78:f6:c8:ab:47:9e:65:f2:dc:bb:e6:23:3a:1e:e7:
                    46:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B3:4E:A5:83:F9:B5:18:08:E2:AC:2C:97:26:15:4E:B8:1C:55:36
            X509v3 Authority Key Identifier:
                keyid:07:AF:DC:D5:E9:7A:C1:C1:02:47:9C:95:4D:5F:92:2B:12:6C:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6_c1el6wcECR5yVTV-SKxJsvBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/0e2744-f646-4429-a25a-ff68517770e4/1/B6_c1el6wcECR5yVTV-SKxJsvBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ca:95:d8:4d:08:62:38:5a:41:5e:cc:72:69:70:46:37:58:
         bd:35:e4:cf:08:96:fe:1e:fe:42:d5:f5:bb:8d:44:75:6f:e1:
         57:c7:c2:93:0e:5d:f3:4f:73:34:11:e2:cd:2d:cb:bc:c2:fe:
         97:79:12:75:dd:71:e3:f3:22:97:d7:22:c1:86:22:c5:98:e0:
         63:47:a9:b4:5e:3a:16:2d:c3:aa:ca:a1:e6:83:f9:70:92:c6:
         69:63:c1:ce:d9:6e:fa:fc:60:46:23:07:e6:a6:f2:ea:24:1d:
         1a:4a:0a:34:31:bc:11:cd:9a:24:a0:d0:2f:24:53:76:de:c3:
         8e:90:34:e1:dd:65:f7:87:65:fd:42:a0:d5:e7:c3:f2:45:98:
         07:6a:bc:c5:9e:c5:b9:a3:ce:d9:99:66:f6:ca:be:62:15:e8:
         02:6c:54:8b:a5:e4:04:23:80:12:64:42:df:8d:23:d4:19:65:
         d5:fd:45:d7:ac:fd:be:82:8a:8a:e7:55:cf:37:be:a7:04:cb:
         2e:0f:67:ab:a4:6a:ee:6a:b9:7a:74:1b:6f:6d:d2:40:64:22:
         10:c3:68:e8:b1:01:a8:6a:f0:0b:11:7d:d6:89:44:5b:f3:00:
         64:e7:68:c5:0d:cd:f1:3e:aa:ad:a1:00:27:a1:aa:2f:82:a8:
         0d:4f:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:15:21 2025 by rpki-client