Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          yCelK/x4MS5Ri+OYZPVfnoU7VYxUZptFTJUQbvqMOcc=
Subject key identifier:   1C:DE:09:39:AB:D2:B8:2B:E4:3A:B3:73:59:37:5C:D4:B2:4A:94:5F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       0196CCF34300F222B8CE8B1B50BD5CFBC350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          0880
Signing time:             Wed 14 May 2025 04:00:16 +0000
Manifest this update:     Wed 14 May 2025 04:00:16 +0000
Manifest next update:     Thu 15 May 2025 04:00:16 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: yNChzKDHfZwKz9ctWXINPKAx714LVysPIaQBrsinZhM=)
                          2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
                          3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:f3:43:00:f2:22:b8:ce:8b:1b:50:bd:5c:fb:c3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: May 14 04:00:16 2025 GMT
            Not After : May 15 04:00:16 2025 GMT
        Subject: CN=1cde0939abd2b82be43ab37359375cd4b24a945f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:b7:95:64:1c:5a:02:cf:5b:d8:c6:8a:e1:
                    75:d6:92:c2:84:95:cf:7c:e8:d7:0f:f5:93:a0:54:
                    8c:82:89:e6:a7:89:22:ff:a1:bc:a7:11:a3:f5:c1:
                    e4:fa:f9:45:2f:96:bd:23:16:0b:42:c1:ac:4b:fc:
                    2a:2e:a6:35:28:ee:3c:f0:ea:4a:5e:67:1f:8f:38:
                    c6:b6:91:15:3d:fe:ae:19:0f:b6:ee:1b:c6:57:94:
                    9d:4b:7e:7f:ff:d5:80:01:95:b0:40:a0:f9:79:1b:
                    e1:ed:86:6c:86:e2:33:2c:ad:92:57:95:c6:4a:b6:
                    aa:91:17:7c:86:73:5d:36:04:15:b9:73:f6:ae:ae:
                    fe:6a:99:72:3f:db:bc:40:23:07:cd:49:e6:ae:46:
                    ef:b0:57:a8:f8:8e:50:2e:e0:6d:4f:33:a7:e0:ef:
                    68:ad:f0:4d:f9:76:66:bd:77:7d:c3:01:1e:3e:73:
                    9a:17:7f:06:95:f7:b3:c5:5e:34:d6:7f:e6:74:ba:
                    e5:02:cb:dd:d6:da:07:af:d6:8a:9a:9a:6b:24:03:
                    f7:df:d8:7f:0b:10:8e:a9:c2:2b:51:81:12:b5:c4:
                    20:28:7d:cd:ef:c7:e2:38:28:1f:aa:2f:2f:80:5c:
                    12:84:70:ed:fe:83:0e:dd:ae:0c:78:a6:55:fe:46:
                    4f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DE:09:39:AB:D2:B8:2B:E4:3A:B3:73:59:37:5C:D4:B2:4A:94:5F
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:16:3e:08:45:61:ff:4a:7a:7b:65:fb:92:fb:1d:0e:54:67:
         c6:34:47:92:68:47:71:a9:be:97:95:47:0c:f2:ab:e9:cd:9f:
         c4:35:d8:bc:49:7f:39:ed:15:c3:5b:89:38:f0:9b:0a:e0:94:
         26:3a:4c:0b:05:34:e5:7e:6e:39:9f:c1:b9:26:68:7c:d8:9a:
         32:2f:17:b8:b3:f6:f6:52:78:cd:72:d3:ad:57:15:95:1c:bd:
         38:fc:e4:cc:9f:45:eb:75:a5:4b:23:09:a8:6f:78:5b:42:65:
         da:5e:9c:d9:6e:c9:61:9c:49:99:c6:61:46:23:4c:9c:d2:d4:
         4a:57:bf:47:c3:2e:a6:5e:10:39:bf:fa:16:4b:68:ba:c8:fe:
         ab:c6:80:88:f7:cb:04:ec:b1:c5:97:b6:12:41:88:2c:71:41:
         de:5b:ad:7a:bc:16:8a:f6:54:15:2c:fc:dc:bf:59:47:04:47:
         36:79:1a:cd:27:52:a8:30:a4:5b:00:63:f3:db:91:8d:98:9c:
         f9:06:77:39:e3:ee:a1:98:a1:43:ad:af:4e:13:43:4f:1c:98:
         a8:76:fe:c5:6d:8c:d1:26:7c:68:1d:d7:cd:93:45:3c:4d:21:
         a5:4a:fb:28:6d:46:1b:ce:7a:c7:f5:15:e8:b5:9c:e7:7a:8b:
         42:70:23:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:01:04 2025 by rpki-client