Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
File:                     kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft (raw, json)
Hash identifier:          9P3E6kFTNU9GytH6W5VgdgBJen3KVFsfC5DCR63+HS0=
Subject key identifier:   BC:0E:7A:3B:E6:DE:F0:D6:1D:5D:E8:90:18:26:B6:35:8F:27:D8:30
Authority key identifier: 90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F
Certificate issuer:       /CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
Certificate serial:       0196A088A7512534D738ACA5B136041D8BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
Manifest number:          12C5
Signing time:             Mon 05 May 2025 13:00:32 +0000
Manifest this update:     Mon 05 May 2025 13:00:32 +0000
Manifest next update:     Tue 06 May 2025 13:00:32 +0000
Files and hashes:         1: kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl (hash: UeVOppMiap9lw/pk6CDdgSzdomK42aNSlGMuDcjSnhI=)
                          2: ygERJqcQ4QTw-4htxExNNa3ryrY.roa (hash: oHYECnW1S/Ihx44EhZXx30t95YlwKaYqRwWqZ5uqDnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:a7:51:25:34:d7:38:ac:a5:b1:36:04:1d:8b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908d6e3dcf258ae26b0cfa6ffdef467c54bb7d9f
        Validity
            Not Before: May  5 13:00:32 2025 GMT
            Not After : May  6 13:00:32 2025 GMT
        Subject: CN=bc0e7a3be6def0d61d5de8901826b6358f27d830
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a4:6a:e9:e1:aa:a3:49:1b:b1:c9:dd:b9:3c:
                    cd:42:67:ea:e0:ab:6c:0a:f0:d2:8b:34:a4:58:1f:
                    62:dd:90:1d:52:0d:4a:ea:02:30:f5:0f:70:df:09:
                    01:3f:c9:c6:43:51:9e:82:c5:af:b6:2e:f8:1a:f7:
                    3d:0d:60:f0:72:de:e7:fe:c9:b5:4f:f1:a8:f0:52:
                    10:b9:12:5c:70:d7:49:b2:dc:71:fb:39:ff:ba:0c:
                    6f:13:2a:fa:43:df:70:69:8c:66:d5:14:95:d2:dd:
                    61:5f:f6:48:32:38:35:81:cc:0f:ce:34:6d:c9:60:
                    26:5e:27:a9:71:46:ee:8c:96:fb:81:09:3c:50:c1:
                    ec:0a:35:fa:dd:b8:aa:1c:27:ca:2e:e8:59:75:2f:
                    34:57:a5:a2:e9:33:01:d5:b5:40:10:37:f1:89:ac:
                    99:30:4e:a7:9c:3f:79:bb:15:0c:27:8f:39:5d:51:
                    4e:93:e2:d6:6f:df:87:c4:64:bc:3f:f4:cc:b2:69:
                    df:a9:97:9b:61:11:a9:f3:85:92:8c:ff:6b:2b:1b:
                    65:56:55:9d:2f:5c:7d:3d:15:b3:72:29:76:63:7c:
                    fe:76:0f:d7:4d:b1:f1:69:4b:d9:85:21:ad:d6:07:
                    8d:37:62:c6:e0:2e:13:99:e1:74:95:be:57:65:3a:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0E:7A:3B:E6:DE:F0:D6:1D:5D:E8:90:18:26:B6:35:8F:27:D8:30
            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:CF:25:8A:E2:6B:0C:FA:6F:FD:EF:46:7C:54:BB:7D:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kI1uPc8liuJrDPpv_e9GfFS7fZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/96c1de-c1fd-49c5-9ee5-ed6114c79dae/1/kI1uPc8liuJrDPpv_e9GfFS7fZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:46:cf:4c:2f:10:c5:d4:16:c8:39:9f:e5:e9:13:52:63:b5:
         ed:3d:05:9f:26:23:fe:5c:b3:9a:2e:0d:b6:12:56:5b:31:62:
         69:52:71:1c:6a:01:54:7d:0d:b0:88:27:e8:ec:82:6a:fc:6b:
         14:a6:7b:bd:9b:a3:fc:5c:74:f7:07:d2:0d:db:5f:2b:51:95:
         3a:8b:8a:88:13:cc:64:1e:2c:1d:b7:cc:81:19:a5:3c:9b:bf:
         cc:88:9e:2e:01:b3:c8:2f:05:e5:4f:f5:3c:98:e5:70:cd:0d:
         7f:47:4c:2c:f2:55:1e:de:b0:d4:2a:3a:fd:91:df:55:6f:32:
         ef:fc:0d:96:9c:39:cc:f7:39:df:91:88:a2:f7:69:d8:26:44:
         cf:5e:3a:13:94:c5:82:7b:7f:fb:bb:3b:eb:ce:7e:ec:b4:e4:
         31:18:f2:1d:0b:a6:91:ec:2c:cd:d3:8d:0e:14:e5:ce:1f:8c:
         dc:11:26:ea:e3:81:52:27:e3:36:76:28:10:87:34:24:ed:08:
         b1:d8:2e:70:e1:dd:bc:c7:d3:b1:2f:66:1d:5f:8a:50:83:33:
         bd:69:74:1a:a6:9f:4f:1b:5c:48:73:8e:05:29:e0:9c:f8:cd:
         93:0a:68:4d:57:af:12:82:2d:23:0e:70:5d:ba:d3:98:11:bc:
         be:6d:4c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:30:11 2025 by rpki-client