Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File:                     B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier:          I8kQpN6nsCc2Gqa5JcDx/qpXEJd5YQvT96iy54eNx6o=
Subject key identifier:   92:86:37:9F:90:AF:24:A4:3C:1B:0C:78:F9:67:F0:46:3C:BE:23:D5
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer:       /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial:       0196B7B54558628C31795E899A100229809E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number:          152E
Signing time:             Sat 10 May 2025 01:00:32 +0000
Manifest this update:     Sat 10 May 2025 01:00:32 +0000
Manifest next update:     Sun 11 May 2025 01:00:32 +0000
Files and hashes:         1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: oUo3m5O/Usm82xEj926iOfC1SiamNu70NSTVdk8bx2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:45:58:62:8c:31:79:5e:89:9a:10:02:29:80:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
        Validity
            Not Before: May 10 01:00:32 2025 GMT
            Not After : May 11 01:00:32 2025 GMT
        Subject: CN=9286379f90af24a43c1b0c78f967f0463cbe23d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:69:36:b4:aa:c7:63:0c:21:41:67:82:51:
                    ab:7f:13:c3:96:79:46:ea:54:e1:68:0b:32:0d:c4:
                    1b:de:63:46:3d:c1:21:55:8b:95:75:17:36:5c:f7:
                    e8:8e:7c:f5:72:c0:d6:3f:23:78:88:02:87:b2:d9:
                    e5:28:b2:2d:34:b1:c1:85:65:a2:07:d2:90:ad:3f:
                    70:22:4b:a7:8d:7a:19:76:ff:f5:0a:ed:34:9c:50:
                    b9:01:b5:82:0b:e1:ea:de:cd:5b:8c:82:5f:e6:8e:
                    e2:4e:ae:14:1d:e4:b2:25:4e:dc:da:a1:9e:71:85:
                    71:65:d0:8d:e6:c4:c5:be:21:4f:06:69:7c:fc:ac:
                    b4:ee:b6:01:27:38:b5:6e:96:d5:85:fa:0f:34:9a:
                    36:39:58:b8:01:2e:d0:86:fc:d7:ed:24:a4:09:de:
                    de:dc:ac:a1:9a:a6:f2:89:9d:f5:a8:a9:17:8d:e9:
                    d7:be:e2:c0:26:46:dc:cb:cb:4f:46:d9:a0:46:e6:
                    01:0a:97:26:c1:77:df:8b:ab:c7:3e:07:9d:38:e8:
                    fa:83:f6:5f:e8:07:39:54:2c:3c:c6:08:b8:c9:ea:
                    17:4a:12:11:69:c4:d6:f8:2b:09:14:62:be:25:60:
                    be:57:43:0b:fc:c7:ba:24:b3:c4:e5:60:62:53:2e:
                    b8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:86:37:9F:90:AF:24:A4:3C:1B:0C:78:F9:67:F0:46:3C:BE:23:D5
            X509v3 Authority Key Identifier:
                keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:dc:ab:24:5f:95:e1:ed:4d:fa:5f:aa:f8:7e:9c:0d:7c:68:
         0a:28:eb:e4:56:35:04:33:da:9f:61:c5:b0:a1:22:7e:6a:0b:
         88:90:ca:90:15:16:d7:07:93:0d:12:a4:85:ff:96:b6:c3:d1:
         08:a9:40:b1:68:53:06:cf:4f:06:49:97:65:b9:2f:05:ac:2c:
         19:47:ad:0c:ae:1c:0b:16:d6:ad:5d:f5:3c:3a:01:0b:5b:4d:
         77:c8:6d:e9:4d:1e:f1:d1:23:8f:36:a4:88:8b:64:d9:72:69:
         a6:2d:d3:22:ca:3b:bd:79:7a:be:b3:98:ae:45:84:83:6e:67:
         9b:84:45:ec:7b:14:6c:9d:fe:72:ca:1a:38:ca:2b:13:f8:9f:
         b7:06:4b:8a:51:10:42:1e:9a:9a:f5:17:8a:8e:93:c6:d4:86:
         a8:12:cf:60:f9:0d:bd:be:f8:09:6d:81:e3:4c:cd:50:73:89:
         10:f8:16:97:c3:08:a9:f3:26:38:f5:d9:0c:d0:1e:c5:b0:cd:
         8a:3b:f7:a0:33:10:b5:c4:a5:d3:6a:8f:14:31:00:4b:a9:bf:
         bc:31:11:07:bc:0e:c4:83:28:f0:84:1f:e3:f5:77:15:66:cb:
         29:0d:91:d9:dc:51:d1:71:ae:85:b9:16:ab:7e:5b:78:cd:b6:
         37:5b:bb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:13:15 2025 by rpki-client