Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          Cxz/k+7W4TxblbiIx9kMoeR2qWxdX0FHYoEpHdQOaH4=
Subject key identifier:   7D:3B:26:4E:51:29:2B:25:29:E9:E1:9C:73:5B:38:E8:CF:33:67:6C
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       0196A24063FE814B54D9D41DFB7C92FB5BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          1523
Signing time:             Mon 05 May 2025 21:00:50 +0000
Manifest this update:     Mon 05 May 2025 21:00:50 +0000
Manifest next update:     Tue 06 May 2025 21:00:50 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: u6sz1xWN6j5fLjgIUQSYi9iT23wxlKb1kqSC7mDfVjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:40:63:fe:81:4b:54:d9:d4:1d:fb:7c:92:fb:5b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: May  5 21:00:50 2025 GMT
            Not After : May  6 21:00:50 2025 GMT
        Subject: CN=7d3b264e51292b2529e9e19c735b38e8cf33676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:bc:4d:45:d7:59:0b:03:d3:bc:a7:5b:dc:
                    01:16:1f:fd:0e:10:f9:48:0f:08:90:33:7a:c9:74:
                    9e:22:90:31:55:eb:c8:dc:71:d9:4a:23:e2:f4:b7:
                    4f:07:fb:ee:13:ab:61:f1:4d:59:c6:15:56:5c:0f:
                    17:6c:65:78:68:51:2b:b3:35:b3:7a:c4:38:d6:54:
                    fc:22:d2:7b:0d:e3:43:51:3a:af:2d:17:12:8e:d5:
                    94:f5:84:3b:d3:2a:da:3e:91:cd:b1:e0:f8:d8:d5:
                    62:ac:fb:9c:37:79:af:5a:27:63:d5:73:81:fd:35:
                    4c:4e:bc:70:f8:32:2a:2f:20:be:b9:74:db:d9:26:
                    71:4a:79:b1:7f:99:86:46:b3:67:22:0f:12:32:0e:
                    bc:55:21:a3:0c:e3:39:51:63:37:3f:b5:b6:6e:a3:
                    c6:82:de:78:e6:0e:96:2a:a3:53:b5:02:e1:c9:c5:
                    99:70:d1:b3:0d:32:d0:51:9e:67:dc:2a:a3:35:41:
                    91:80:17:79:f1:a0:b7:e5:02:30:5e:ca:c0:76:02:
                    ee:3f:7a:74:79:15:a9:87:52:aa:42:1a:ba:b2:39:
                    af:2a:73:d0:68:69:a0:43:43:4a:4c:72:54:eb:a7:
                    92:fe:61:dc:4a:bd:fa:73:92:03:96:e6:3b:eb:b0:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3B:26:4E:51:29:2B:25:29:E9:E1:9C:73:5B:38:E8:CF:33:67:6C
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:84:f7:57:b6:98:45:3d:86:09:06:93:92:c6:ad:00:11:
         d9:b4:8f:98:65:5b:65:fd:97:bb:f8:1e:41:f6:9a:7b:b9:5c:
         a5:c6:cf:35:4b:6f:53:b3:22:00:ca:b8:ae:cf:78:0b:02:4b:
         e1:24:9b:45:6f:01:36:52:3b:07:4d:62:7b:84:3f:cc:5a:85:
         5e:24:a4:7f:ef:4e:47:9e:08:2a:89:3e:3d:a0:6b:bb:cc:24:
         51:37:92:80:da:bd:d4:fb:a3:48:38:d3:18:5b:68:5c:9a:8d:
         36:b9:74:be:4e:0e:86:42:2d:a0:5e:af:eb:de:38:56:e0:14:
         12:91:ee:91:91:f9:6e:cf:3e:e0:03:34:7a:c8:56:32:f5:db:
         32:55:89:28:06:dc:4c:2e:3b:2d:f1:6f:2e:bf:40:ae:37:7d:
         9a:c4:95:0c:5b:c4:29:56:26:6b:c9:e3:94:cd:01:97:39:61:
         92:e6:62:1f:22:e1:25:91:96:fd:59:a3:1b:82:4e:11:8e:fa:
         bb:5a:f5:e7:4a:cf:83:eb:f2:2f:20:3f:d6:26:18:00:9b:bb:
         f2:bb:09:7f:16:af:eb:87:c4:e3:34:90:fe:bb:46:3d:16:72:
         56:3e:d4:10:fe:44:5d:12:f7:ee:75:40:fe:3d:74:18:4d:c8:
         fa:9b:7c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:27:12 2025 by rpki-client