Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File:                     B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier:          agqnAbf0uLoXMWnpW12liUBPhI4Vs9Hz8SeCBNiAJZg=
Subject key identifier:   BE:0C:BA:14:2A:24:45:F8:0A:00:7F:47:A0:58:F5:2D:49:58:87:AA
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       019646D7448148D8A13D28F7967DD5E761E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number:          0B5C
Signing time:             Fri 18 Apr 2025 03:00:34 +0000
Manifest this update:     Fri 18 Apr 2025 03:00:34 +0000
Manifest next update:     Sat 19 Apr 2025 03:00:34 +0000
Files and hashes:         1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: RovqpyXFVDGMeCaNJSMA2YGOEA0D2yzX0EvGa9HOCh8=)
                          2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:46:d7:44:81:48:d8:a1:3d:28:f7:96:7d:d5:e7:61:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Apr 18 03:00:34 2025 GMT
            Not After : Apr 19 03:00:34 2025 GMT
        Subject: CN=be0cba142a2445f80a007f47a058f52d495887aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:e4:d6:3f:d1:40:0c:36:5d:63:72:49:59:
                    92:2f:b0:61:94:3c:46:8c:21:50:4c:72:c8:f2:dc:
                    22:51:d1:6b:1a:f5:89:65:09:44:57:13:87:34:19:
                    fe:b6:28:3f:27:7a:d2:09:02:63:48:b2:bf:79:69:
                    53:9e:41:0e:c3:e1:48:4b:80:ef:75:cf:41:a3:8e:
                    d1:96:a3:fd:6a:32:86:bd:7b:3f:ff:1f:e5:20:23:
                    dd:56:12:00:14:49:72:fa:08:91:23:42:83:fc:57:
                    c2:ca:f7:79:b3:e8:14:60:80:07:6b:f0:9e:c6:37:
                    e5:95:75:f3:9a:88:df:4a:98:b6:3b:8f:b0:8f:d9:
                    f6:87:94:28:40:99:25:21:ad:e9:df:f4:57:72:b3:
                    b5:91:2b:de:95:14:10:59:b9:44:56:e7:6b:fc:25:
                    57:6e:86:1c:4e:f8:b0:ec:37:74:34:27:7f:95:57:
                    79:bd:ea:8a:4b:67:6d:8a:d3:aa:b1:39:36:4f:c5:
                    f7:22:d6:85:64:a1:b3:f3:3f:2e:a6:99:d4:d8:46:
                    12:bd:68:99:52:57:30:2e:e6:81:02:7f:20:d1:0e:
                    e2:13:25:7c:e4:01:09:73:ac:d9:e2:54:3b:4c:a8:
                    db:ae:42:43:54:58:15:bd:df:03:9b:51:9c:21:96:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0C:BA:14:2A:24:45:F8:0A:00:7F:47:A0:58:F5:2D:49:58:87:AA
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:59:fa:8d:c1:d6:ae:f8:fb:b2:c9:47:02:63:2f:3c:a3:d4:
         a6:3c:5d:27:65:16:e0:8e:ce:bf:89:5a:68:85:82:6f:ec:08:
         35:aa:c6:c4:e4:02:ab:7e:1b:50:94:0e:2a:02:3c:df:d5:76:
         21:23:3d:a5:4a:6b:ce:c7:50:2b:9b:ff:83:2e:32:fc:b9:e2:
         ae:d0:81:95:16:06:b5:d0:b4:96:db:f3:a2:c6:50:79:d7:ad:
         8f:78:16:fa:ce:4e:67:ca:ae:a0:93:e8:82:5d:47:0c:7d:92:
         c8:5c:b0:94:8f:30:c8:44:00:ba:5f:60:1a:87:63:c7:19:8c:
         95:73:5d:a8:13:c9:d5:c8:a6:4b:d5:77:94:92:73:14:0c:e3:
         f6:59:5b:4e:0f:bc:cd:34:28:1a:b4:9a:5c:0e:03:b6:e4:3d:
         4f:0b:25:9e:b7:eb:92:9e:db:75:c2:35:ee:09:94:42:b6:79:
         59:0c:a6:53:9e:03:ad:80:80:29:47:35:b2:fa:bb:98:42:f7:
         4e:df:c7:f1:e0:43:86:9d:39:a4:5e:e0:ff:89:c4:d9:30:ee:
         fe:95:5c:75:73:b4:f4:a4:e1:66:52:96:4b:36:64:47:6c:f8:
         58:f8:e8:b6:f9:40:d4:5c:05:6e:03:9c:ad:07:db:e4:84:15:
         5f:58:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:40:20 2025 by rpki-client