Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File:                     DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier:          cMFYQFSU/AMEXwJaePihrgHXG7L9Kr+7h3X8C0btKhQ=
Subject key identifier:   A1:AB:C5:C2:6A:1B:4C:50:DC:23:DE:FA:6E:54:B8:4B:48:4B:B6:7B
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer:       /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial:       01964D100433D3C1A6B1A9ADD9767E09C96F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number:          0454
Signing time:             Sat 19 Apr 2025 08:00:17 +0000
Manifest this update:     Sat 19 Apr 2025 08:00:17 +0000
Manifest next update:     Sun 20 Apr 2025 08:00:17 +0000
Files and hashes:         1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: B7eoKAtUMUxAouomKRwZLlPvG5vFel0NpcSTcdWvyzo=)
                          2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 07:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:10:04:33:d3:c1:a6:b1:a9:ad:d9:76:7e:09:c9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
        Validity
            Not Before: Apr 19 08:00:17 2025 GMT
            Not After : Apr 20 08:00:17 2025 GMT
        Subject: CN=a1abc5c26a1b4c50dc23defa6e54b84b484bb67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e6:3c:56:db:60:6f:36:ae:f0:12:a0:41:79:
                    8f:80:78:4c:c9:a2:c8:52:59:6e:7a:06:84:5c:e1:
                    31:53:7b:e3:4b:82:f8:4e:ef:2a:4f:13:05:8c:eb:
                    54:d7:ba:f0:5e:c8:d6:69:cf:e1:a5:dc:00:11:f1:
                    88:26:b3:c2:c0:b8:12:96:09:26:da:3b:8a:da:fc:
                    2f:91:eb:85:e5:3b:c2:69:57:6a:cf:fb:10:f0:f5:
                    14:7e:35:b4:7d:df:c2:c6:8c:24:cb:70:d9:77:b3:
                    07:0f:8f:95:7e:0c:42:43:b1:24:64:48:b9:84:c0:
                    63:a6:b6:6f:02:48:0f:2c:03:45:5a:53:49:49:6d:
                    c4:8c:dd:34:b8:85:fa:82:3b:c4:89:9b:d7:78:86:
                    b2:85:e3:af:85:90:08:0d:73:d6:67:cb:cb:7f:44:
                    0d:3b:66:1f:e2:0e:75:b8:b0:9c:ca:4c:65:37:f1:
                    7f:8f:b2:c5:82:df:5e:4c:c8:b4:52:59:41:48:4f:
                    d7:b3:b8:2e:d1:cc:9b:be:9c:3a:aa:69:81:74:e2:
                    d1:1c:98:f8:08:e3:14:bd:78:6a:4f:91:06:9d:eb:
                    6f:c4:35:29:59:a6:f5:5f:7c:5f:13:0b:da:9b:3e:
                    b0:b5:0e:ff:7f:e5:a8:cb:e3:b9:d2:4f:1e:da:23:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AB:C5:C2:6A:1B:4C:50:DC:23:DE:FA:6E:54:B8:4B:48:4B:B6:7B
            X509v3 Authority Key Identifier:
                keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:35:6e:6a:b8:96:c5:f3:88:8a:a0:08:1c:4a:d2:3a:e4:
         8e:54:b3:44:10:0c:90:fb:ad:3a:3e:4c:b6:4c:ac:8f:d5:18:
         2e:56:b7:fe:44:a9:bf:09:c9:b3:b4:28:f9:fe:3e:8a:47:bc:
         aa:a6:0d:36:fb:d9:a3:32:55:e5:9e:c7:31:07:43:c2:d5:30:
         b3:89:eb:e6:d4:5e:ab:09:8c:b0:ad:5a:b8:d6:23:5c:f5:58:
         25:16:56:29:03:43:78:56:b7:d8:49:93:1a:a6:53:00:39:53:
         b9:4c:97:2a:4f:c3:ac:5b:b3:16:c1:e8:f1:c3:b2:97:52:fd:
         16:4b:b9:51:6c:40:19:98:74:a5:80:3f:78:55:3c:ce:4a:17:
         dd:a3:16:64:17:6a:3a:b7:2e:d5:17:4e:f2:24:4a:11:24:91:
         9b:3a:c9:41:5e:c1:dc:79:07:7f:79:43:c2:52:e0:b8:b8:db:
         e5:a6:b7:75:9f:13:84:03:e2:13:62:a7:90:00:eb:fb:11:c0:
         9d:9f:59:d7:6e:f4:36:a0:ac:94:63:3e:93:9c:b4:61:b4:51:
         57:e9:b7:6a:42:cd:ff:27:11:e3:df:b9:9c:82:34:45:f1:ec:
         b1:b5:aa:0a:17:14:b0:d2:8c:60:4d:a7:a2:36:1f:ea:3b:b6:
         73:29:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:58 2025 by rpki-client