Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File:                     B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier:          W6mJy0gvzIJdF1v9V4nOexJYID7AaTHMpQl2sqNw8qg=
Subject key identifier:   7C:6C:D5:95:23:A9:75:E8:2B:EB:8A:6E:DC:F1:A4:D2:85:2F:D3:25
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer:       /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial:       0196108E6DE7A52D8C74B159A458B416994C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number:          14DC
Signing time:             Mon 07 Apr 2025 14:01:31 +0000
Manifest this update:     Mon 07 Apr 2025 14:01:31 +0000
Manifest next update:     Tue 08 Apr 2025 14:01:31 +0000
Files and hashes:         1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: qeJUpw5wLXz6p5ltLAafElWxFgm3EM4+W7onwM/0/+s=)
                          2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:10:8e:6d:e7:a5:2d:8c:74:b1:59:a4:58:b4:16:99:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
        Validity
            Not Before: Apr  7 14:01:31 2025 GMT
            Not After : Apr  8 14:01:31 2025 GMT
        Subject: CN=7c6cd59523a975e82beb8a6edcf1a4d2852fd325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:c1:fe:a5:35:6d:88:d3:34:13:bf:a9:64:
                    f9:50:3d:cb:20:3d:11:cf:9e:b4:81:e6:e8:80:6f:
                    e0:37:68:17:02:4d:f7:59:8d:78:09:49:75:5f:bb:
                    13:44:23:08:87:46:50:fc:05:27:04:8f:c2:22:17:
                    a5:ea:9b:fd:0a:8d:4b:9a:70:5a:32:23:c4:13:e4:
                    08:9a:fb:a6:bb:dd:61:9e:c4:a7:70:6f:97:07:e2:
                    8e:b6:d7:89:23:d4:e1:68:ff:e8:df:58:fb:0a:29:
                    0b:45:9e:f5:14:ab:30:ed:bd:af:29:2e:ef:7d:74:
                    ac:d8:91:64:ce:0b:74:79:fd:be:f8:5a:3f:5f:aa:
                    42:51:7c:f5:3e:0a:66:fd:bd:3e:39:53:b2:1b:b7:
                    8d:1c:cc:50:18:41:38:23:e9:a7:48:50:1c:d5:5e:
                    66:74:7b:66:8d:60:a1:3c:b8:2e:3a:b4:b2:0f:22:
                    1e:2e:cd:2b:35:28:9a:da:8b:b1:90:df:95:73:19:
                    ad:0f:64:6c:3c:a4:d9:ed:e5:11:e6:0d:72:be:86:
                    05:a5:35:79:1d:2c:68:78:bc:79:b8:05:b3:33:33:
                    bd:fe:04:a5:cd:14:51:d7:89:3d:3d:90:36:cb:1e:
                    73:da:76:c5:96:80:c8:b4:05:f2:8a:18:78:91:3b:
                    ad:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6C:D5:95:23:A9:75:E8:2B:EB:8A:6E:DC:F1:A4:D2:85:2F:D3:25
            X509v3 Authority Key Identifier:
                keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3f:8f:64:bb:59:cc:1a:67:a5:5b:8a:b8:28:20:81:f8:90:
         b2:dc:d0:02:a5:48:db:dd:4b:26:4f:8d:a3:7f:21:dd:3b:7e:
         60:4d:99:46:00:0c:ec:6c:6c:bf:48:82:d1:2b:fd:e6:5a:a6:
         7d:51:89:50:10:4e:33:86:24:34:72:90:75:ac:99:80:1d:ee:
         99:bd:80:95:24:3b:79:9f:18:d3:4f:f0:6c:8a:ec:c8:e0:6f:
         5d:74:23:c9:11:9a:43:85:ef:97:f1:3f:12:35:74:ce:3d:b8:
         8d:23:d9:b9:85:83:0c:bc:03:88:1e:a7:88:6f:70:b9:93:73:
         85:1d:25:c0:65:b9:76:47:58:61:09:32:0b:eb:f4:64:e6:59:
         12:8d:1a:c7:21:63:4d:a5:e6:57:82:83:45:84:12:66:b4:f4:
         97:d6:94:2c:05:d2:49:d4:79:ab:86:b0:9c:16:c7:70:aa:4f:
         a4:fc:71:36:e9:c0:3f:a9:a1:87:2f:33:aa:06:aa:5f:9f:4e:
         e2:f9:b2:a6:10:a5:e6:92:26:f0:4d:2c:11:89:05:83:65:2f:
         80:ed:16:05:cf:fa:f0:f9:54:60:bc:81:0d:51:f8:9a:48:6c:
         09:06:ec:18:03:be:41:48:34:f9:02:0f:bc:37:0e:4c:9e:de:
         31:9b:24:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:37 2025 by rpki-client