Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
File:                     a6JrVs7pf2AglBuxfGp8bOoPgUo.mft (raw, json)
Hash identifier:          v0ptsxKkxKdG9PWTgm+pAAGbhpwKmBcOIVGkvttNrGA=
Subject key identifier:   1D:94:D5:59:2F:10:96:89:15:CC:FA:C8:FF:65:44:B7:E2:3A:B8:99
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Certificate issuer:       /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial:       019670AED3474CF61716E234E2FBA7FB9C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
Manifest number:          11CC
Signing time:             Sat 26 Apr 2025 06:00:27 +0000
Manifest this update:     Sat 26 Apr 2025 06:00:27 +0000
Manifest next update:     Sun 27 Apr 2025 06:00:27 +0000
Files and hashes:         1: Xv_k9B_Ol6KMXiDbnDdwE9msKgI.roa (hash: o2br+mpVDRPvcRh8PVchKStcPAlc6/q+ycf8CdzuWcA=)
                          2: a6JrVs7pf2AglBuxfGp8bOoPgUo.crl (hash: gGfF8ErThkBUOuAa1hpTwi5E8t9FWtZtKO/quq1VG6Y=)
                          3: j0LzYUhIgfi314lRG-UPK6juSV4.roa (hash: OB2pKs0VeSqp3qXLCAeqefAg0imNyv8nfRlrTm7jRsg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:70:ae:d3:47:4c:f6:17:16:e2:34:e2:fb:a7:fb:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
        Validity
            Not Before: Apr 26 06:00:27 2025 GMT
            Not After : Apr 27 06:00:27 2025 GMT
        Subject: CN=1d94d5592f10968915ccfac8ff6544b7e23ab899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4c:27:72:cf:6f:8f:0a:9d:74:d7:7e:58:09:
                    ca:b8:03:9f:78:ae:74:9d:15:a3:09:8a:ff:c5:b0:
                    6b:63:1f:c6:d0:51:e9:18:9e:a5:e2:35:2a:2b:3e:
                    52:30:93:e0:d0:00:37:6f:c8:1b:33:ab:ed:3f:a5:
                    3c:fb:2e:21:95:93:ec:45:50:15:c0:24:0e:25:dc:
                    41:f7:df:cb:72:a5:74:fc:96:f9:b3:1e:b3:a7:ec:
                    2a:ee:9c:6b:23:c2:c9:51:6b:de:11:fa:73:cf:61:
                    4d:5e:14:77:0d:8e:7e:ea:e3:f3:f2:50:3b:e2:8e:
                    9d:ae:02:ab:4e:6a:c9:73:b5:ea:5d:96:f4:5d:11:
                    19:78:51:54:e3:10:89:b2:72:4a:42:80:04:63:ff:
                    fc:1c:b4:bc:9b:ba:b5:ca:4b:fd:49:cb:45:4e:44:
                    35:6b:be:2c:5c:94:e4:1b:8d:0f:1b:97:21:b6:b3:
                    52:ea:8d:80:35:a3:39:40:c7:9a:ff:df:b4:10:1c:
                    b7:1e:e0:02:0d:c5:05:b7:bd:e9:33:a3:b7:9f:39:
                    a7:e7:5a:34:81:71:e3:a9:3f:af:8e:80:ad:a3:05:
                    03:48:7a:28:71:77:85:b7:ae:cd:db:0c:a9:13:20:
                    46:f7:5f:b5:f6:57:d2:ff:84:0d:47:5b:e3:5b:9b:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:D5:59:2F:10:96:89:15:CC:FA:C8:FF:65:44:B7:E2:3A:B8:99
            X509v3 Authority Key Identifier:
                keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a5:e4:7d:22:ea:6f:0f:e7:16:fb:39:34:9e:b1:25:fe:32:
         b3:d9:89:e8:9d:9d:07:63:57:2a:f5:44:6b:16:86:6e:fd:0b:
         90:1b:f4:e6:ad:35:9b:b8:92:e4:01:52:6d:1e:aa:ec:1e:de:
         14:45:93:21:09:95:14:4f:bf:55:9a:57:9e:9c:00:db:9d:a3:
         92:a3:4d:bf:12:ff:23:41:50:85:68:1a:75:d3:ff:ca:45:4d:
         d2:c9:ee:dd:40:e1:e1:8e:dc:99:62:41:94:d3:ff:8f:7e:ce:
         6e:01:20:2e:71:b0:bc:4a:13:60:55:94:b8:be:2b:0a:8e:54:
         a4:43:64:c9:5a:71:3d:c9:cf:c3:e9:4b:26:fd:5a:ca:15:5e:
         0e:1e:77:d2:ae:cd:7a:b9:fa:01:c9:4e:0f:cf:d1:3e:06:a7:
         75:a7:2e:8e:4b:40:1b:d7:60:8d:7b:6b:8d:b1:16:a8:10:a6:
         18:5a:78:92:3f:33:07:a4:98:0b:09:5d:2b:12:2a:3e:86:74:
         eb:0d:58:58:f0:6c:b2:43:25:49:1f:c7:65:5f:47:13:9e:d5:
         67:d0:d9:ed:b8:da:e2:0a:ce:f0:16:35:75:36:5e:e3:54:99:
         00:bd:9b:93:51:98:46:2e:ff:5a:6e:29:39:43:bf:0b:75:5e:
         de:0b:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:21:25 2025 by rpki-client