Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File:                     35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier:          2kElHxuCgrclOWMEZosvoJ8c07TgQpY2cQgJBzcuq4M=
Subject key identifier:   E9:B8:92:9F:F9:E9:1A:3E:86:DD:6E:B2:04:86:BA:10:57:35:5D:5A
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer:       /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial:       0196C79698D43EDCBB3C09AE79A372013DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number:          115F
Signing time:             Tue 13 May 2025 03:00:57 +0000
Manifest this update:     Tue 13 May 2025 03:00:57 +0000
Manifest next update:     Wed 14 May 2025 03:00:57 +0000
Files and hashes:         1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: rdwGk9LF04f2N2OPAptWe6Zz6P4+muZtgUnjXTsD0LI=)
                          2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
                          3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:96:98:d4:3e:dc:bb:3c:09:ae:79:a3:72:01:3d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
        Validity
            Not Before: May 13 03:00:57 2025 GMT
            Not After : May 14 03:00:57 2025 GMT
        Subject: CN=e9b8929ff9e91a3e86dd6eb20486ba1057355d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:b0:60:97:f1:f9:bf:fb:6f:9a:f6:be:ea:
                    3f:99:10:31:8c:71:24:ae:1c:37:cb:be:f6:b3:6f:
                    05:c5:1c:c4:0a:6e:0f:62:b7:ae:41:01:a6:77:37:
                    5a:39:68:b8:d4:70:75:9e:ac:db:fc:de:af:03:60:
                    2c:10:f8:7d:e7:51:74:6b:4a:83:4b:97:5d:66:64:
                    9a:4f:b2:b8:c4:cd:3e:4b:d2:44:9f:98:ea:56:b3:
                    05:17:52:e5:b7:01:80:4d:33:f3:2d:f4:6f:d7:1a:
                    0e:a8:e0:6d:19:ef:e0:34:24:27:d8:3d:13:a8:a9:
                    fc:7f:c4:45:4e:3d:60:c1:b3:30:95:42:ed:28:61:
                    6f:e6:2d:7e:85:fb:05:d9:f3:97:da:81:c7:b4:a2:
                    c0:6a:07:1c:2c:e3:54:f1:d7:94:cb:8d:fd:ef:ec:
                    61:20:55:84:32:28:14:60:b0:c0:1c:2a:1c:88:95:
                    3b:c2:4b:43:ec:10:c3:03:97:61:e0:11:30:5b:01:
                    b4:a0:96:14:96:f4:c1:76:6a:4c:92:16:2c:95:d7:
                    d9:9d:92:57:29:69:0d:f2:8f:88:4c:dc:74:fe:44:
                    a5:40:60:fd:73:bc:81:05:5e:a0:a8:f6:59:e6:c3:
                    90:fd:f7:12:dc:e9:5d:4c:d3:0f:d5:91:17:8a:39:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:B8:92:9F:F9:E9:1A:3E:86:DD:6E:B2:04:86:BA:10:57:35:5D:5A
            X509v3 Authority Key Identifier:
                keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:fb:1d:74:ee:b4:32:43:04:c8:96:e8:a1:86:8a:1c:d1:
         81:99:12:68:8a:d9:c7:3d:69:73:6d:5e:65:f2:e1:e4:83:e2:
         20:19:94:7b:f1:cc:d4:15:81:79:6f:f9:e8:f7:6c:f6:ed:dd:
         f5:d7:23:24:b0:c6:7c:bf:89:54:6a:4a:bb:fd:19:cf:72:c5:
         91:a4:b7:ee:48:8b:7e:bc:2c:2c:02:dc:50:d6:66:73:57:d1:
         0a:af:92:e8:ef:a2:10:76:8e:a2:e7:aa:11:fd:73:92:0a:d4:
         67:36:06:b4:2f:f8:43:c1:28:ae:4d:da:5c:d8:b3:0b:9a:50:
         ed:3b:f5:df:91:0d:38:75:22:5e:63:09:00:85:2e:59:bb:d4:
         64:a0:75:be:cd:ba:6f:ed:2c:87:47:aa:dd:c1:3b:62:76:04:
         ea:af:45:66:8a:ad:cd:cd:24:7f:82:18:31:46:e9:19:19:ca:
         91:a1:e1:7e:d7:e9:8b:74:fb:03:5f:c9:1c:85:16:82:fd:55:
         de:54:df:9f:0a:2d:b4:23:7a:23:e9:e0:69:19:73:dc:b1:41:
         d2:50:9d:ba:f8:4f:4b:47:78:ae:07:be:af:a0:20:20:7c:b4:
         13:3c:35:be:ab:73:93:9b:ba:d8:4e:88:17:20:d3:92:90:48:
         7e:76:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:24:18 2025 by rpki-client