Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          b0HPCHn6pNNdMjfOC4WNCu37tfHLKZ7zbjmbc5z3kJM=
Subject key identifier:   01:F5:09:AA:74:BE:E3:E6:87:68:F5:52:68:B8:F6:EA:36:49:F4:E9
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019644444841BBC14774BEB371EA21681853
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          14F5
Signing time:             Thu 17 Apr 2025 15:00:47 +0000
Manifest this update:     Thu 17 Apr 2025 15:00:47 +0000
Manifest next update:     Fri 18 Apr 2025 15:00:47 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: AHZKtt4m4Q0elTbZ+TuvnCQdC6PbdOIvBlXkVdM7Hg8=)
                          2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:44:44:48:41:bb:c1:47:74:be:b3:71:ea:21:68:18:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Apr 17 15:00:47 2025 GMT
            Not After : Apr 18 15:00:47 2025 GMT
        Subject: CN=01f509aa74bee3e68768f55268b8f6ea3649f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5d:2f:5f:f2:d3:0b:86:e9:e5:96:1c:df:da:
                    f7:4d:72:91:84:82:e4:2e:60:3a:8e:fc:61:4b:d8:
                    f8:74:68:28:50:9f:00:8c:c7:d4:95:b1:4e:6f:c4:
                    d7:69:da:5d:81:a2:e4:71:e7:d8:9d:ae:43:28:e9:
                    d9:e5:02:9a:f3:0f:39:de:79:54:03:7e:35:c8:db:
                    9c:de:7a:ad:ae:f2:fc:86:97:6d:8b:d5:26:36:b1:
                    17:64:d3:fa:0c:97:e8:2a:16:22:8b:ab:0e:a6:22:
                    5e:33:23:8e:91:17:09:59:22:75:00:71:6b:64:0f:
                    ea:f8:15:8f:03:7c:42:1b:30:11:0d:e5:a2:07:15:
                    a9:77:3c:f5:a9:e1:9f:aa:d7:c3:db:59:c4:fa:03:
                    dc:1a:bf:ed:2e:05:18:2e:f7:f5:8f:bb:ce:29:5e:
                    1b:53:28:50:46:fb:8d:82:3a:bb:c9:6e:28:56:e7:
                    4e:38:21:96:99:2d:43:e5:6b:ad:11:4b:18:92:03:
                    52:24:25:bd:68:7c:2a:93:29:52:22:7e:c1:ed:6e:
                    71:9c:ac:fd:1b:00:f8:15:fb:28:77:03:1d:ce:d2:
                    cf:f7:45:31:40:bf:ea:5a:a1:cd:2f:3f:58:37:b0:
                    05:75:19:c3:11:6f:91:6f:cc:06:ee:45:41:a6:55:
                    bd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F5:09:AA:74:BE:E3:E6:87:68:F5:52:68:B8:F6:EA:36:49:F4:E9
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:03:05:c5:70:e4:37:82:50:30:59:59:19:c1:b2:cf:75:c1:
         fb:75:20:1c:c8:21:6f:66:4c:66:b2:4c:1a:dd:2c:b5:d4:75:
         ef:06:01:5d:ec:95:6a:85:a9:36:a5:6f:a3:94:9b:e8:12:01:
         fc:b1:82:1d:83:0c:b1:86:9a:fe:48:9f:28:34:03:90:85:db:
         db:01:cd:91:c0:ac:a4:ff:e6:74:b2:4f:4c:cd:fe:bc:51:21:
         d2:68:ac:77:af:9a:92:c1:60:5e:a9:df:9f:0b:ce:a7:ac:af:
         20:60:57:b2:d4:0a:c8:89:78:a9:16:f3:21:00:e1:2f:59:2b:
         54:74:f7:df:99:bf:fa:3e:8f:ba:1e:7d:cc:46:42:db:64:6d:
         ec:5a:40:3e:2c:48:aa:bf:55:e6:c0:7f:04:55:36:d6:e5:ef:
         76:8b:5d:af:0b:36:5e:01:04:aa:4d:7e:8a:e1:29:4c:39:16:
         ec:c2:7f:d6:b6:27:c0:a3:fc:8d:f9:41:d3:f7:ac:14:38:bc:
         81:6c:ca:5c:65:e3:2e:10:80:f3:fd:aa:95:85:fa:fb:a6:b4:
         3c:1c:ff:3a:b2:f7:4b:85:de:9e:15:1b:34:a6:8a:3b:71:43:
         64:e0:d3:98:ea:64:31:13:51:96:fb:d6:dc:4e:c9:59:2f:93:
         37:a9:64:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:52:40 2025 by rpki-client