Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File:                     S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier:          pjVHMXHwA3kz8MlqLmC+DMGVAaT5YbHJsP1oeSV9t4o=
Subject key identifier:   B4:25:A7:E2:D5:F6:EB:30:87:BE:C2:95:21:71:51:61:5E:F3:ED:0F
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer:       /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial:       01974BC458F93A6514F26A1BE874DE33A7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number:          0E54
Signing time:             Sat 07 Jun 2025 19:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:48 +0000
Files and hashes:         1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: Cwfh35rzoKwgDz8PMVoj6n0YyMkdo7xiUWDxVTgPdYY=)
                          2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:58:f9:3a:65:14:f2:6a:1b:e8:74:de:33:a7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
        Validity
            Not Before: Jun  7 19:00:48 2025 GMT
            Not After : Jun  8 19:00:48 2025 GMT
        Subject: CN=b425a7e2d5f6eb3087bec295217151615ef3ed0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:39:c1:3a:e1:a2:aa:51:3f:1d:23:45:b8:
                    e7:73:6b:f2:1c:6e:cb:c8:5b:9f:a7:bb:be:ba:d1:
                    d2:a2:8a:0b:9d:28:a0:83:28:24:20:4f:5f:a3:21:
                    f6:97:43:de:c2:bc:73:db:67:76:41:27:5b:e5:1a:
                    80:1f:99:f6:83:b6:82:06:d1:db:1c:d5:8d:2a:0c:
                    9b:62:0e:27:4a:2d:a3:28:3e:58:ed:fe:35:db:50:
                    e5:6a:73:52:a6:c2:be:26:cf:3c:90:a3:49:53:f6:
                    3a:c6:13:48:8c:79:7e:e5:89:6c:5e:a5:f2:81:aa:
                    f9:1e:2e:94:c6:5a:95:2b:40:cf:2a:c6:41:11:6d:
                    80:65:d9:d4:56:d8:c7:d9:0c:7f:e5:65:2f:f4:8d:
                    92:6a:4a:6a:31:b0:40:de:71:e0:43:56:46:1b:de:
                    ab:5e:4b:f8:13:ab:65:9b:e4:ae:47:a0:72:c5:fa:
                    e6:fc:27:09:61:a4:f1:af:f3:49:f2:41:e0:99:5b:
                    56:fe:6c:29:d4:b7:c6:5d:0d:b6:91:ea:5a:6c:8d:
                    70:20:3b:ca:8d:1a:3d:fc:aa:6c:f7:5d:e6:1e:57:
                    2c:08:2a:28:b1:e4:01:1b:e7:ba:01:24:bd:d9:fb:
                    00:ba:62:6d:92:35:1b:bf:ae:4e:0a:2f:ff:f0:c0:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:25:A7:E2:D5:F6:EB:30:87:BE:C2:95:21:71:51:61:5E:F3:ED:0F
            X509v3 Authority Key Identifier:
                keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b2:34:bd:46:9c:d0:0d:7b:19:6f:70:43:2d:c2:b5:ac:7c:
         dd:cd:25:a0:bc:9f:dd:c7:18:d2:84:7d:00:78:74:0b:7d:8a:
         24:b4:75:d3:36:0d:a4:27:73:d3:94:66:e5:86:4a:e9:42:47:
         20:bf:a0:fa:16:b8:d3:af:7f:b9:30:c1:eb:dc:71:1c:ae:47:
         b3:07:da:77:65:13:49:88:39:81:fb:67:8a:4b:54:c1:9b:5b:
         5f:fc:0d:f6:ef:f9:87:d1:b3:f6:b5:b3:99:bc:cc:64:e5:b3:
         cb:57:ec:5b:4b:ac:ae:e0:f4:4a:1c:49:59:ca:6b:a5:76:3f:
         d7:2f:6e:e7:35:7f:96:9b:fa:33:44:b7:1d:3e:bb:57:3e:9d:
         84:1e:55:9c:70:f3:b6:53:17:52:f3:9b:a6:49:aa:4b:de:55:
         c5:6e:e1:87:11:37:cb:72:e8:56:6c:65:85:9f:77:2e:cd:fc:
         11:56:d5:7f:f6:26:54:ac:fa:79:a1:cc:fb:08:57:49:b9:fc:
         a4:b5:94:07:ba:57:47:06:30:bf:a5:10:32:d5:c3:13:64:5c:
         e5:fb:b9:2e:84:d5:f3:53:0f:aa:9a:82:0c:73:36:fe:ca:2e:
         2e:be:c5:0c:d8:6a:40:5e:f6:ba:a5:33:16:5c:cc:04:27:30:
         fe:9e:da:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:58:07 2025 by rpki-client