Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
File:                     t_bDO_udlL0PdKc45_FtDp2gw7k.mft (raw, json)
Hash identifier:          3mo3ugQFOnoOAqiC5Rcd9SzemuhiuBnGIRmKD+P8Ook=
Subject key identifier:   F1:E5:68:77:0C:40:9F:9E:89:FE:89:16:62:EB:C4:35:81:BE:6A:7D
Authority key identifier: B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9
Certificate issuer:       /CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
Certificate serial:       01963464AA205BC8E9FB783DD9AB72F88379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
Manifest number:          14BE
Signing time:             Mon 14 Apr 2025 13:02:14 +0000
Manifest this update:     Mon 14 Apr 2025 13:02:14 +0000
Manifest next update:     Tue 15 Apr 2025 13:02:14 +0000
Files and hashes:         1: dQipKZolIhGkhWFJoygF3CDiTvg.roa (hash: +eA96uDNL0C8CyvGH+7b3dtqwE+sSbn83k1fDZzMPtg=)
                          2: t_bDO_udlL0PdKc45_FtDp2gw7k.crl (hash: 0jpwx8p4lF01mfmu/UiSHdw8zIAJB28o9cqrrTooitg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Apr 2025 13:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:34:64:aa:20:5b:c8:e9:fb:78:3d:d9:ab:72:f8:83:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f6c33bfb9d94bd0f74a738e7f16d0e9da0c3b9
        Validity
            Not Before: Apr 14 13:02:14 2025 GMT
            Not After : Apr 15 13:02:14 2025 GMT
        Subject: CN=f1e568770c409f9e89fe891662ebc43581be6a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:95:ee:0e:cc:43:61:12:f4:0b:8a:21:40:0a:
                    4e:10:a3:d5:74:e9:2e:c8:71:b6:64:b7:46:58:78:
                    79:5b:46:28:3f:ba:99:11:cf:b4:57:23:ca:bd:4c:
                    a8:76:d8:22:96:a1:9f:ca:53:31:64:dd:53:29:a6:
                    c7:b0:bb:f2:7b:ec:37:9b:d6:26:6a:ba:71:8a:ae:
                    33:11:b1:38:d1:25:df:41:a8:88:48:ad:ae:fa:1a:
                    f8:fe:15:86:b8:fe:f9:a2:5c:32:30:14:da:ba:62:
                    12:50:85:9d:ae:9b:77:cb:86:db:9b:83:b9:0c:0c:
                    d3:b2:15:b5:1b:d1:10:59:4f:44:65:af:15:4d:76:
                    78:a5:73:e2:16:1b:bd:38:71:07:55:cc:34:76:9f:
                    7c:6e:cc:ee:1d:98:cb:2e:a1:ca:a4:de:5d:56:d6:
                    e6:19:e6:f9:d4:ce:39:7c:76:f5:d7:83:d6:af:6a:
                    0d:84:02:bd:d7:70:1f:37:9e:ae:c4:f8:81:41:0e:
                    bd:f2:fa:18:57:26:dd:64:2b:ee:8b:d2:66:ac:ae:
                    04:43:72:75:00:23:ad:3e:9c:20:5c:cf:c2:9f:67:
                    39:61:3c:27:62:c5:4d:c0:69:66:b3:1e:09:99:2a:
                    1d:85:a9:f6:ec:cc:85:b2:f9:40:23:e2:28:45:26:
                    36:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:68:77:0C:40:9F:9E:89:FE:89:16:62:EB:C4:35:81:BE:6A:7D
            X509v3 Authority Key Identifier:
                keyid:B7:F6:C3:3B:FB:9D:94:BD:0F:74:A7:38:E7:F1:6D:0E:9D:A0:C3:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_bDO_udlL0PdKc45_FtDp2gw7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e4d903-5baa-4341-9392-a3e481fb51b9/1/t_bDO_udlL0PdKc45_FtDp2gw7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:38:0d:0d:e9:02:d6:b5:2c:cb:03:c0:e8:43:84:7e:6a:4a:
         37:ca:c3:d8:32:4a:2f:07:e4:36:5a:81:f9:5a:e9:ad:fb:48:
         3a:bc:aa:18:29:f1:8d:db:bb:a2:af:ec:fe:5e:ca:35:d3:56:
         45:07:2c:27:28:4b:5d:0b:7c:45:14:bb:81:73:23:8f:7f:72:
         b6:6c:c8:84:c3:15:0c:0c:4f:95:63:5f:d8:85:d5:89:0c:f9:
         e5:0b:00:55:ad:c7:1a:ca:79:8b:60:c5:ea:58:30:3f:ae:64:
         b0:e5:7e:4e:53:2e:c7:e0:6b:0a:21:a4:03:72:43:68:b5:6a:
         1e:76:74:8d:9e:c2:1b:97:2a:e8:d6:fc:4e:ff:cd:8f:a8:1c:
         31:d3:93:1b:0a:92:34:98:ee:77:0c:4f:c5:92:23:62:66:0c:
         db:37:ea:45:32:a3:ff:36:5b:2b:7c:05:97:04:d3:5c:08:4a:
         4b:65:8f:36:2e:c5:b7:ad:e3:1d:8d:45:88:4d:d1:b1:43:e3:
         af:e8:44:69:65:3d:8d:44:b7:e6:15:33:2f:d3:e9:6a:03:05:
         90:48:4d:5c:70:af:08:48:22:6d:02:b6:60:13:6a:64:9a:7c:
         6f:58:92:5a:c6:18:d2:3e:1e:d0:d4:7c:c9:c7:c7:06:14:6e:
         a4:29:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:33:56 2025 by rpki-client