Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File:                     bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier:          PmIPeHGwiKAC8+RpyyO30uUpfRgL9mNMPXEWleidST4=
Subject key identifier:   1F:C5:BA:CE:D1:87:0D:5F:FB:01:C6:37:78:DE:4F:5B:CB:EB:5B:CC
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer:       /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial:       01974CD70D80B1D8EE7CE2DC850B35E715E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number:          14D4
Signing time:             Sun 08 Jun 2025 00:00:51 +0000
Manifest this update:     Sun 08 Jun 2025 00:00:51 +0000
Manifest next update:     Mon 09 Jun 2025 00:00:51 +0000
Files and hashes:         1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: HH87L9mDU/hvPsI0kmi/mr18ot88PUpAy8uYongNGgM=)
                          2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:d7:0d:80:b1:d8:ee:7c:e2:dc:85:0b:35:e7:15:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
        Validity
            Not Before: Jun  8 00:00:51 2025 GMT
            Not After : Jun  9 00:00:51 2025 GMT
        Subject: CN=1fc5baced1870d5ffb01c63778de4f5bcbeb5bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:04:9b:8d:47:79:65:3c:d6:9e:4b:7e:1b:e8:
                    84:20:97:01:aa:ad:ee:c2:4d:06:6f:08:07:73:86:
                    a2:6d:4b:02:fd:62:d3:d8:4b:6b:cc:3e:bb:c3:fd:
                    50:c8:ec:47:10:3a:49:0f:df:1c:fe:89:af:cc:44:
                    37:60:9a:14:bc:19:c1:be:1e:f9:ef:26:43:2e:03:
                    94:2d:d5:c0:f5:9e:e6:d3:a4:6d:12:02:61:5c:98:
                    1d:9b:83:70:d4:0b:f8:94:60:e0:b5:a9:40:70:32:
                    c8:c2:cc:45:19:8a:ef:22:1f:6e:1a:a9:30:e0:0f:
                    ea:15:c5:a7:72:c5:5f:f7:77:80:64:b7:80:2d:2d:
                    39:25:ed:e2:63:91:a5:f5:fe:5f:ca:3c:b3:63:45:
                    86:5d:6d:35:20:66:05:97:c8:51:83:45:49:18:e6:
                    24:9a:97:2d:87:cd:e8:76:16:42:52:ee:5d:a3:9d:
                    c6:15:09:29:2c:4b:c8:c2:74:1a:16:de:2b:38:4b:
                    45:92:ce:80:3a:b8:ff:de:9c:f8:50:17:48:de:3c:
                    03:8b:46:0b:65:cb:60:f1:36:0e:3d:ea:f9:fa:c1:
                    cd:cf:14:ba:4d:ce:67:cf:57:72:c2:8e:31:0a:05:
                    29:db:52:6b:71:97:43:32:b8:80:b3:42:e0:68:cb:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:BA:CE:D1:87:0D:5F:FB:01:C6:37:78:DE:4F:5B:CB:EB:5B:CC
            X509v3 Authority Key Identifier:
                keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:22:54:ac:56:ad:5d:c5:60:2c:4e:49:3e:b8:73:7f:22:0b:
         bd:16:42:97:5e:75:36:b2:e7:ae:93:76:fa:81:a8:43:1f:f7:
         fd:e3:26:41:44:13:08:56:5f:3d:f0:49:bd:96:d3:d0:29:2b:
         1b:ea:96:6e:d0:14:b5:86:b7:13:18:2d:c9:ea:3a:e6:81:7e:
         8d:01:ff:b6:81:2d:ff:75:a9:9d:9c:6f:1c:95:ae:57:76:97:
         60:08:10:60:b6:27:70:d3:a3:6e:3d:83:30:39:3a:09:05:0c:
         b4:9b:97:d1:de:0f:ae:8a:48:b3:a8:48:02:01:98:11:4f:20:
         64:13:ef:38:49:91:ba:1f:90:eb:94:b7:82:f5:18:f8:6c:07:
         46:54:47:52:9f:16:de:c3:13:70:39:3c:4e:1e:6c:71:ad:ef:
         6c:8a:c2:a8:e1:b7:17:c7:de:1f:c7:ce:89:46:dc:34:9f:29:
         82:70:07:2d:7e:f7:72:67:5f:d1:3d:ae:49:dd:11:44:77:28:
         b9:16:ed:2b:7c:00:83:9e:ff:0e:d0:30:06:7d:d5:79:ba:78:
         19:4b:13:ad:a7:37:83:07:a9:03:67:8e:76:3e:a0:34:78:84:
         32:e1:c7:b9:8a:2c:5f:27:5e:f8:61:20:a2:a5:8a:a2:e8:ae:
         ca:25:52:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:00 2025 by rpki-client