Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File:                     B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier:          MMmguhlRtm6yguF+ziVpQp739Y7rRymVM+L0bD/AsS4=
Subject key identifier:   18:3A:B0:D8:AF:6A:AD:DA:49:A7:32:CE:27:96:0A:83:79:51:8F:DE
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer:       /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial:       019760951DE994332C72C256AFEB8DA39417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number:          0D12
Signing time:             Wed 11 Jun 2025 20:01:14 +0000
Manifest this update:     Wed 11 Jun 2025 20:01:14 +0000
Manifest next update:     Thu 12 Jun 2025 20:01:14 +0000
Files and hashes:         1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
                          2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: Zw6FLVUmFU1R7Vnv2bncrJTBDlipAMwrW6hphWxgg4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 20:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:95:1d:e9:94:33:2c:72:c2:56:af:eb:8d:a3:94:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
        Validity
            Not Before: Jun 11 20:01:14 2025 GMT
            Not After : Jun 12 20:01:14 2025 GMT
        Subject: CN=183ab0d8af6aadda49a732ce27960a8379518fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e3:61:43:0d:0f:90:df:32:e1:93:8b:5b:03:
                    33:97:50:4e:74:03:89:c2:e6:c1:9a:f6:2f:6a:c3:
                    16:7a:6c:0a:10:cd:4d:33:6d:34:9e:8f:83:21:75:
                    f6:3e:63:1e:4e:06:65:d6:b4:a6:4b:0d:28:5b:3f:
                    33:81:73:46:3c:c1:65:e7:98:f0:b1:64:bf:e0:68:
                    87:2d:58:13:df:07:99:3e:0f:2b:60:4d:a1:ab:54:
                    ae:f3:e3:32:e6:52:7b:ac:03:ab:82:29:b7:02:e3:
                    75:36:45:90:22:5a:b9:46:ab:59:c7:b0:02:31:55:
                    ee:87:9f:53:f9:1c:ca:60:82:46:b4:dc:98:04:5c:
                    aa:39:00:3c:c0:97:e9:b6:1c:12:8d:57:6b:a8:eb:
                    16:53:7b:a3:bb:dc:a8:bf:4d:73:75:fb:1e:ea:03:
                    cd:4d:b5:08:60:f2:5f:d4:b9:50:ed:a5:12:99:e2:
                    af:81:20:49:c8:1d:58:a5:3b:64:77:0f:8b:6c:b1:
                    b0:ce:c2:bb:31:ed:09:b3:c9:de:22:46:18:c0:73:
                    e3:2a:e7:e4:b4:b3:58:8f:2b:09:8d:90:d0:db:87:
                    5b:88:79:04:1a:aa:b4:be:ed:f5:d6:e4:dc:1d:af:
                    23:c0:28:55:7d:d7:e2:7a:bc:79:96:6c:76:17:09:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:B0:D8:AF:6A:AD:DA:49:A7:32:CE:27:96:0A:83:79:51:8F:DE
            X509v3 Authority Key Identifier:
                keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:83:a7:9a:cb:1f:2e:66:3f:35:e1:ab:ff:91:5e:39:10:95:
         74:07:bf:3e:ba:12:61:ee:38:fa:40:1b:4b:7f:93:f9:47:42:
         10:ab:68:82:ae:b7:8c:03:3a:e8:99:66:6d:0e:e0:9b:52:63:
         f4:5d:93:48:db:dc:04:59:27:c5:1c:b8:14:b6:c1:85:c2:68:
         d7:e8:e5:4c:4b:fc:6b:68:dd:11:f9:7b:0c:47:df:52:40:2c:
         dc:c3:76:54:1c:11:b1:45:d8:4f:d7:6c:2c:ab:b6:4f:8e:ef:
         65:d3:1f:81:47:10:e3:55:93:b8:af:39:93:33:77:b2:de:29:
         cf:c4:5a:c9:06:aa:e2:93:e8:c4:23:a0:4c:db:41:6c:f8:5e:
         46:dd:62:c2:a0:39:ae:92:db:91:37:9d:e5:ab:fa:23:4a:17:
         c4:80:47:bf:b8:67:51:74:23:65:1b:c0:b2:3f:98:cd:02:b1:
         f1:f3:92:9f:c4:e9:b2:a0:b0:08:e9:e5:fa:b0:71:48:4b:69:
         a2:f9:53:2f:2f:ab:e4:1c:a8:f2:7b:14:a2:60:d6:4a:81:6b:
         88:ab:5c:2f:e4:68:1f:aa:93:27:1c:7f:e3:34:35:37:79:9c:
         f3:56:fb:2e:77:1f:98:ac:8c:6e:ae:f1:6c:1d:09:56:99:1b:
         15:14:dc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:01:05 2025 by rpki-client