Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          ZlpPnoTKL2KryyZJA4VLo8kzNJqwYDdnWakzw9FwKr0=
Subject key identifier:   E1:E2:B1:CF:D3:22:26:6F:61:C2:45:26:43:6D:A7:0A:59:82:3A:73
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       0196B63543E662DA89B2673BB58398C46F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0B82
Signing time:             Fri 09 May 2025 18:01:06 +0000
Manifest this update:     Fri 09 May 2025 18:01:06 +0000
Manifest next update:     Sat 10 May 2025 18:01:06 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: aQieN1DHb/QZPZYncQjT8xb23JmFQbVd1zKRmkfhYiQ=)
                          2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b6:35:43:e6:62:da:89:b2:67:3b:b5:83:98:c4:6f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: May  9 18:01:06 2025 GMT
            Not After : May 10 18:01:06 2025 GMT
        Subject: CN=e1e2b1cfd322266f61c24526436da70a59823a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b7:da:1f:da:79:4e:bd:b3:0a:81:32:94:df:
                    42:ea:15:60:cc:e2:c4:77:53:4f:03:7b:24:86:74:
                    d6:80:e9:66:41:68:e2:ba:6c:48:5d:45:0f:18:a6:
                    52:fe:cd:6c:71:85:f6:94:81:d0:48:ce:53:bc:ea:
                    5c:ad:13:a4:f8:c1:95:a3:e9:ce:a7:36:47:66:40:
                    c2:5c:df:3a:bf:17:f7:02:ac:13:0a:4b:71:52:1d:
                    f4:c9:4e:f1:3f:b2:bc:a0:20:34:84:d8:71:f9:ab:
                    ea:5f:99:3d:61:d0:21:82:6b:1c:71:f2:07:67:94:
                    b2:c9:ea:9f:b7:79:0d:54:18:59:e9:66:86:88:a0:
                    e3:25:7c:6a:a8:ca:29:e9:e2:e5:c1:4d:f5:10:58:
                    0d:c6:5a:4d:85:0d:a9:17:a3:a1:bb:a7:2b:24:75:
                    72:5a:85:2b:0f:6c:c8:93:fc:b4:6f:88:84:6a:51:
                    d0:fb:fc:ad:99:14:c1:a5:52:93:08:20:f1:1f:50:
                    e8:cf:c5:75:d8:de:0e:0b:92:a9:14:1c:70:78:95:
                    14:5f:27:1e:c1:99:78:fd:1d:1f:42:d3:b9:94:dd:
                    02:3d:54:cf:e4:a0:c2:d0:eb:35:46:f4:69:44:e4:
                    04:c3:4f:b9:24:0d:29:98:a4:dd:ea:7d:9a:3f:5e:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:B1:CF:D3:22:26:6F:61:C2:45:26:43:6D:A7:0A:59:82:3A:73
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:a1:49:cd:8a:b7:fa:58:7d:59:4f:0c:da:88:3e:6b:13:
         f4:eb:22:b7:2a:96:b7:bf:ca:a7:2c:08:a5:b1:11:af:30:8d:
         db:0a:82:02:6c:13:0c:c3:08:f3:72:36:a6:01:79:93:ac:bc:
         88:81:2e:7e:cc:54:8d:0d:31:0b:d8:4b:0a:43:f3:71:17:9e:
         4c:74:30:b7:0f:ca:9f:06:88:b6:21:07:92:61:a1:d3:f3:39:
         19:e3:70:a2:88:5e:35:5d:8e:f0:77:8f:93:a9:09:3e:58:5b:
         6d:59:5d:de:ee:39:fd:59:e6:ea:fe:d0:f5:8c:aa:5c:99:76:
         72:c3:77:34:59:2d:47:bc:9b:76:1e:74:3e:9e:4a:ca:12:3e:
         82:db:b0:40:40:86:08:09:7b:d6:fe:c5:ed:0e:e9:88:67:b9:
         2f:d8:e3:1c:a7:91:fd:47:de:cc:1a:35:52:ca:bd:4c:94:90:
         bb:6e:2a:f0:62:53:b7:5c:69:af:5f:97:2d:ba:d3:1d:9a:08:
         50:e6:49:0d:53:b0:f5:fe:24:4b:eb:0a:d0:ec:5e:cd:07:a5:
         ec:75:f4:4d:fc:a8:00:7d:35:3c:87:54:7c:1a:4b:4b:b8:f7:
         6e:d6:bd:f3:d9:e0:12:86:80:f5:b6:10:d8:e5:cf:97:ed:d3:
         5e:9e:3d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:34:30 2025 by rpki-client