Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File:                     B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier:          Lg2A7JnQfytDD5JoocuoSkjLZZ3zDRvYRxt4vNWowSU=
Subject key identifier:   AC:25:01:42:CD:9D:A0:EC:3C:74:FC:17:07:F6:F4:F1:04:01:BF:28
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer:       /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial:       019748C36D03A5A4D1FA905D9F634C816FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number:          129F
Signing time:             Sat 07 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:56 +0000
Files and hashes:         1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: QSV82e2Cv9aYZyQ6+MOsJlh/Mv6ILNg5bKpLJD0oIgc=)
                          2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:6d:03:a5:a4:d1:fa:90:5d:9f:63:4c:81:6f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
        Validity
            Not Before: Jun  7 05:00:56 2025 GMT
            Not After : Jun  8 05:00:56 2025 GMT
        Subject: CN=ac250142cd9da0ec3c74fc1707f6f4f10401bf28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:54:10:0b:52:c8:06:33:3c:2e:5c:f0:a0:
                    7d:22:96:97:57:11:dc:09:f6:3c:ad:5b:6f:44:fd:
                    e6:f0:c6:d4:d6:66:77:72:f0:24:2e:2c:b3:8a:3e:
                    e1:4b:73:71:65:9d:23:b5:70:6c:cf:8a:ee:81:fb:
                    ca:de:3a:0d:5c:55:f2:c8:2d:c8:ec:1a:c4:ac:f3:
                    b0:8f:2b:c2:38:87:14:8c:72:02:5b:d8:d8:27:d6:
                    95:38:c5:e8:df:e0:26:3c:88:c6:64:34:55:5f:a5:
                    f2:15:7b:35:79:1f:36:35:c5:4e:c2:dc:95:66:89:
                    6f:8d:1b:fe:76:a1:95:d5:fb:5c:6b:07:3f:22:24:
                    8b:8b:3c:a4:5e:62:cd:c7:e7:b5:2f:0b:03:41:b7:
                    c0:6b:dc:67:81:6a:6e:b9:8e:84:f3:71:88:d3:1e:
                    27:7c:b8:de:2b:ab:8f:72:d7:2f:6b:48:63:49:83:
                    b4:d7:4e:d8:15:5a:24:93:b1:0f:fc:05:c5:6f:44:
                    b9:0c:a5:43:4a:fe:7d:42:22:ba:89:95:ca:6f:96:
                    e9:aa:c4:5c:a7:ca:18:5d:c5:0c:95:9a:86:f9:42:
                    c7:cc:93:92:84:b1:16:5d:21:78:d8:35:24:b8:65:
                    32:44:82:1a:21:11:0c:fa:df:84:46:0c:ad:0d:b3:
                    03:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:25:01:42:CD:9D:A0:EC:3C:74:FC:17:07:F6:F4:F1:04:01:BF:28
            X509v3 Authority Key Identifier:
                keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b7:27:47:fc:28:fa:75:c2:02:e5:d2:ac:3f:77:be:40:12:
         02:2d:a4:f9:2c:f3:d6:80:77:fd:46:c4:0a:96:35:21:9e:4c:
         b2:84:70:8d:fa:33:0b:9e:84:60:79:77:53:60:48:d7:ef:87:
         fe:f6:5e:9a:da:68:b5:80:5d:00:3a:59:42:a0:dc:23:ca:eb:
         2d:e8:d8:77:4f:62:2f:b2:f4:0b:78:7f:c3:7a:bf:e2:fd:ce:
         d8:e7:cb:5a:9d:c5:40:91:0d:3a:a1:d6:19:dc:17:8a:3e:dc:
         0e:a2:ae:0a:c9:b7:7e:ce:ff:dc:94:dc:20:6c:9b:69:33:35:
         55:8b:58:a8:ae:15:c9:1a:e5:7e:16:99:b1:eb:2b:09:6a:f7:
         1b:94:62:c8:34:3c:fa:a3:6a:02:03:9e:ed:5f:e3:5f:65:1c:
         d6:58:35:e9:7a:02:81:ed:cd:da:5c:43:2a:e5:2d:ce:31:ea:
         ed:b7:5a:36:fa:e7:7b:3f:05:0a:b6:b7:8b:02:9b:6d:f5:75:
         fb:44:93:d2:8e:07:84:2e:a3:a7:1b:c1:28:c0:90:5a:1f:c7:
         d7:8d:e3:e6:25:c5:2b:fe:ef:8f:3a:c6:1e:dd:93:fd:94:2f:
         c2:ee:be:ce:3e:4f:57:cf:53:4b:1c:45:a0:81:36:61:be:d8:
         32:70:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:05:55 2025 by rpki-client