Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File:                     vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier:          hTPHc9CA/lVsdSkmh+rg71lcOidZ96B6chJTEXNdnhk=
Subject key identifier:   6F:D6:57:47:72:E6:83:97:86:46:98:05:53:FA:89:61:CD:99:1F:5D
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer:       /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial:       0196B5C78545D7539CFA88880E2EFD177D98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number:          152C
Signing time:             Fri 09 May 2025 16:01:13 +0000
Manifest this update:     Fri 09 May 2025 16:01:13 +0000
Manifest next update:     Sat 10 May 2025 16:01:13 +0000
Files and hashes:         1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: QtNlA8KxFxWCnALTrnPrb7PhdIcJzvAClWdTYikHRZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:85:45:d7:53:9c:fa:88:88:0e:2e:fd:17:7d:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
        Validity
            Not Before: May  9 16:01:13 2025 GMT
            Not After : May 10 16:01:13 2025 GMT
        Subject: CN=6fd6574772e683978646980553fa8961cd991f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:a3:37:8c:2d:bf:b7:ef:ae:d3:5b:b0:dc:
                    a3:03:63:77:26:04:0e:c4:5b:91:f9:38:36:e3:57:
                    4b:b4:9a:99:f2:ad:d3:ce:14:dd:6b:9a:b4:4d:28:
                    dc:56:10:b1:8b:5f:ae:37:70:64:92:d7:d6:3b:2a:
                    47:1c:8e:24:c8:4a:ee:0a:41:06:d2:f7:f4:c6:77:
                    99:a2:8c:0b:45:22:5c:2c:7d:69:44:99:2d:01:bb:
                    75:03:c6:ca:2a:b9:ca:22:5a:86:59:e0:44:69:c8:
                    14:9f:d7:49:de:0b:76:97:fc:c7:64:2d:2a:f1:fe:
                    af:60:1a:af:e9:d5:bf:ff:8e:42:df:06:58:2c:a1:
                    ed:a4:f8:d7:ad:8e:f6:10:2e:de:a2:73:41:8f:14:
                    0d:10:ac:be:9d:a8:41:74:af:28:cf:7c:82:37:15:
                    30:14:eb:c2:6b:e7:37:2b:87:f8:cd:60:fa:f5:0f:
                    c9:8b:2f:73:eb:cf:d0:0e:77:fa:9b:71:22:38:68:
                    5f:7c:75:f2:a7:a0:76:91:b2:19:9b:c0:96:44:1c:
                    a8:c5:e6:ff:d6:bb:fa:2e:5f:f7:38:a9:51:ce:70:
                    9f:ff:42:1d:90:82:20:33:51:4b:3d:c8:58:40:f6:
                    31:8d:07:2d:6b:68:f5:d2:0c:63:7a:5a:5c:05:e8:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D6:57:47:72:E6:83:97:86:46:98:05:53:FA:89:61:CD:99:1F:5D
            X509v3 Authority Key Identifier:
                keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:68:b0:b4:ff:a7:90:8a:47:29:af:59:30:16:76:68:8c:b5:
         2d:55:2f:b6:12:fe:50:86:ac:60:88:73:cf:16:6e:9b:e6:53:
         08:00:0a:22:cc:d2:8d:d5:10:39:a8:7d:55:44:9c:88:18:44:
         29:fd:9c:6b:be:6c:f8:a8:5c:d1:89:93:2a:d0:35:a4:12:3f:
         b3:a1:1c:14:bc:2a:c3:9b:dd:d3:39:6f:89:d6:73:51:96:0a:
         30:b9:83:e4:bb:d4:34:da:4b:03:ef:bb:05:28:9c:98:38:5b:
         23:af:1e:9f:42:8b:b4:a9:2c:5f:31:bc:7f:5e:f8:3b:7c:0b:
         16:b5:92:85:90:f0:2a:6f:f9:65:9d:73:86:11:cb:28:da:98:
         31:6f:61:67:b9:c2:a1:6e:5e:60:f8:bf:32:36:b8:b4:b6:1d:
         93:9d:84:c0:72:f1:60:07:d8:6c:75:e3:0a:56:19:97:49:40:
         4e:49:e8:06:7e:b1:e0:b7:e1:cf:11:3f:8e:58:c9:34:7a:e4:
         cf:cf:e8:da:16:55:28:96:30:7b:1d:3b:f7:88:fe:ee:fa:82:
         b5:f5:86:1e:db:78:1b:e1:03:20:bf:ff:c3:f7:20:23:f0:0a:
         cf:d6:aa:0b:c5:68:b7:01:f6:05:c4:bc:f6:e3:a3:5a:eb:a1:
         db:98:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:44:47 2025 by rpki-client