Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
File:                     AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft (raw, json)
Hash identifier:          F/yk9bz9s/V/lcqgCBDnLBGVAipuZ8KgWgYc6XQxHn8=
Subject key identifier:   E3:6E:41:7E:C8:EB:45:57:40:4A:76:CD:39:A5:8D:40:53:D5:E7:C7
Authority key identifier: 01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56
Certificate issuer:       /CN=01bacccb74c77bd5fd2abea3e612d881eab73356
Certificate serial:       0196451FF4D7A862FF3011F5805716427FC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
Manifest number:          14F8
Signing time:             Thu 17 Apr 2025 19:00:44 +0000
Manifest this update:     Thu 17 Apr 2025 19:00:44 +0000
Manifest next update:     Fri 18 Apr 2025 19:00:44 +0000
Files and hashes:         1: AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl (hash: zZYWtWsExUp/+YVgaViQArwyDmyCdy5BKb/kMBrRD6s=)
                          2: K1Ne1nVDXTkowzkdUM3CXdE4E6A.roa (hash: yQEUlbKzH3JK4cDR8vmY0Ufn57XLcgJT+5SEVNFl3Yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:45:1f:f4:d7:a8:62:ff:30:11:f5:80:57:16:42:7f:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bacccb74c77bd5fd2abea3e612d881eab73356
        Validity
            Not Before: Apr 17 19:00:44 2025 GMT
            Not After : Apr 18 19:00:44 2025 GMT
        Subject: CN=e36e417ec8eb4557404a76cd39a58d4053d5e7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:56:c9:b4:8f:17:7c:fc:ea:67:dd:2f:3f:
                    b2:48:ac:2b:4b:64:0b:e8:ee:25:22:90:61:d6:9a:
                    c3:3f:70:e2:12:da:a8:ca:87:28:56:13:e1:9a:3f:
                    03:d5:50:01:52:00:da:94:d5:aa:6a:15:df:e9:ad:
                    a2:8c:dd:74:05:19:af:90:32:66:47:e0:31:63:4b:
                    4f:d0:22:d2:a4:13:58:25:a3:20:b4:a9:05:a4:4f:
                    17:2d:90:73:ff:50:47:9f:1d:34:2a:5e:59:f1:e3:
                    7f:69:56:10:25:fa:d4:50:e0:e6:8d:2b:b5:6b:08:
                    45:58:5d:36:1b:d6:f4:b3:2a:b6:63:8f:8a:2b:01:
                    3d:f4:c8:5d:87:f6:84:8b:80:87:f9:9f:40:91:19:
                    b6:2c:cc:32:d0:29:95:6a:55:13:4f:7a:04:52:97:
                    01:8d:a6:f4:c7:d5:45:46:fb:fc:94:db:08:2f:cc:
                    c5:2e:75:a8:40:73:f2:16:50:3b:f6:2b:d0:35:3d:
                    6c:64:a6:db:f6:ee:69:4a:d5:42:77:17:f8:53:69:
                    9d:5a:8b:db:6e:e1:6a:9b:0a:57:7f:33:21:e0:23:
                    46:a4:78:03:2a:95:ee:0a:03:a1:74:4f:5c:0e:96:
                    57:e7:34:bf:4b:ef:6f:ea:db:3e:0d:9a:99:20:43:
                    65:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6E:41:7E:C8:EB:45:57:40:4A:76:CD:39:A5:8D:40:53:D5:E7:C7
            X509v3 Authority Key Identifier:
                keyid:01:BA:CC:CB:74:C7:7B:D5:FD:2A:BE:A3:E6:12:D8:81:EA:B7:33:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a144e5-fce6-4a50-bd2a-83741041b8c7/1/AbrMy3THe9X9Kr6j5hLYgeq3M1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:13:bc:3a:92:c1:3e:97:ee:9b:30:97:fe:c3:94:1f:d5:f7:
         b5:82:3b:38:2e:23:f9:6b:17:aa:69:16:5b:65:b2:57:05:36:
         60:66:1e:20:fa:ea:ec:87:d7:e8:9c:9c:1b:e9:1d:12:e7:62:
         ce:28:25:ed:05:9d:f2:5b:f3:42:6f:5b:f4:e6:a7:be:c9:15:
         3a:d1:80:c3:2d:2f:03:88:8e:30:40:8f:3b:3e:84:42:85:d1:
         71:53:9b:f8:18:cd:2e:48:eb:0d:44:2a:f7:86:ac:c6:39:5a:
         b3:69:46:02:7b:2b:f2:d9:86:8c:14:7c:38:59:dc:d3:8f:cd:
         21:0a:93:81:7b:75:5c:67:d3:f6:de:e7:28:22:c1:f5:97:d3:
         27:cf:5e:cd:bb:1b:37:31:ee:9c:15:bd:42:b9:aa:53:ef:01:
         ae:9f:cf:8b:d8:35:cf:6c:94:10:8e:42:30:84:85:fc:60:3d:
         22:21:c6:35:85:e6:90:9f:65:6d:54:1c:b6:6a:4b:da:38:ab:
         60:97:8d:d0:da:ca:ca:c9:7d:bc:94:aa:ad:d7:ab:96:ee:d3:
         69:ae:cc:d2:2f:3f:cf:02:3e:96:d2:9a:7c:44:55:bb:6d:c6:
         1a:0d:1b:e6:ec:64:d5:a8:e1:cf:26:14:98:7f:82:ec:6e:55:
         33:86:ac:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:40 2025 by rpki-client