Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File:                     7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier:          O9cNg5sLPvjgq0V8fynk0Uo6oPBReOj2MQ7/JhxCzx4=
Subject key identifier:   3B:87:17:2C:1E:07:8D:6D:AA:71:BB:55:EF:4B:ED:24:36:F8:7B:BE
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer:       /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial:       01969E2CADA9D7F5854DC404E42E3876AD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number:          1525
Signing time:             Mon 05 May 2025 02:00:50 +0000
Manifest this update:     Mon 05 May 2025 02:00:50 +0000
Manifest next update:     Tue 06 May 2025 02:00:50 +0000
Files and hashes:         1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: jgZjxOTLSoyGkp7fjO3cvrQCO6ppFBklkPoBkFRWAAg=)
                          2: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (hash: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:2c:ad:a9:d7:f5:85:4d:c4:04:e4:2e:38:76:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
        Validity
            Not Before: May  5 02:00:50 2025 GMT
            Not After : May  6 02:00:50 2025 GMT
        Subject: CN=3b87172c1e078d6daa71bb55ef4bed2436f87bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:7d:08:67:98:a8:05:fe:9d:e6:d7:df:08:
                    15:2c:e3:fe:6c:f1:31:3d:45:77:de:00:55:f4:48:
                    7c:47:c7:9a:f5:21:68:d8:ed:c8:99:09:3e:2d:85:
                    02:bc:06:c6:c8:e1:f4:85:d3:80:a5:cc:23:19:d8:
                    76:94:01:c0:98:95:cf:71:5e:de:58:0d:0a:3a:e8:
                    c3:72:40:f2:85:6e:6e:7a:61:0a:d8:8e:19:83:d9:
                    ac:a4:bd:44:64:79:81:1c:81:08:47:56:65:c6:a6:
                    4f:7d:c7:05:29:80:85:01:ba:fc:13:b8:a7:ea:28:
                    34:7e:39:0b:1e:64:3c:ad:37:d4:f9:6f:1c:2d:50:
                    fd:75:c9:d4:24:f2:73:f5:ab:b4:44:44:c2:0a:a5:
                    dc:67:84:c5:f4:d7:21:eb:33:44:69:c3:63:ec:c1:
                    f2:19:e6:d2:32:d3:28:d1:6c:05:84:8f:a3:19:f3:
                    1a:af:51:42:d2:51:20:72:78:a0:19:a7:49:b4:ae:
                    bb:4c:7c:f6:46:c8:82:db:43:b5:51:5f:cd:ab:19:
                    2f:b1:07:4c:56:64:88:ca:21:66:1a:54:df:82:07:
                    46:be:46:97:88:d1:b7:36:d6:ef:63:13:20:f5:1a:
                    14:9f:3e:d7:83:9e:48:19:c2:1a:b6:6e:3c:71:72:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:87:17:2C:1E:07:8D:6D:AA:71:BB:55:EF:4B:ED:24:36:F8:7B:BE
            X509v3 Authority Key Identifier:
                keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5d:94:6b:d8:7a:77:a0:51:f3:09:0c:c7:0e:01:8a:46:be:
         68:58:48:ad:81:be:e8:ba:2f:ad:3a:32:b0:43:8e:12:6a:55:
         6b:2f:fd:7b:53:a9:11:d5:6c:aa:73:7a:da:18:04:16:91:78:
         10:c9:48:fa:35:8b:6d:4f:24:eb:58:1e:e4:67:49:b4:a6:17:
         ca:f0:fe:fe:51:46:87:7f:78:de:5f:85:e5:b9:07:ee:84:f6:
         e1:0f:71:16:a5:f9:18:08:5e:4d:54:2a:0f:83:5f:c9:61:09:
         3e:29:7b:b2:24:67:73:93:5a:25:4c:83:68:15:f3:9b:25:af:
         f0:26:38:1d:ce:c4:be:26:43:4f:56:1c:ec:d9:65:07:6d:e1:
         0f:b7:4f:2b:28:62:fd:55:4a:65:8f:97:e4:15:49:ba:53:ea:
         7d:7f:6f:46:b1:de:0f:f0:55:52:bf:d1:1c:86:e1:4e:e6:05:
         ce:e3:ba:8a:a4:69:6d:69:8e:1b:4d:dc:13:dc:d8:e0:6e:5c:
         88:c0:f6:e4:a5:72:5b:41:21:cb:07:ba:9f:62:a7:da:f9:5c:
         e5:85:c7:db:21:21:6b:19:ae:f9:52:1c:ca:db:55:70:03:94:
         67:93:a7:ba:31:f7:f4:20:3a:36:07:50:64:82:17:2d:3c:bd:
         a4:a9:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:17 2025 by rpki-client