Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
File:                     7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft (raw, json)
Hash identifier:          jumx/DnLZ3VKReob0/lr5pzx/Kj668cEjO/kwFOlzzQ=
Subject key identifier:   8E:B5:F7:29:FC:7C:FE:78:B2:68:19:12:AB:2A:8B:7C:2E:4E:C0:ED
Authority key identifier: EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76
Certificate issuer:       /CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
Certificate serial:       0196C427686B82C4BDD8A3BB5327124CA9C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
Manifest number:          06B4
Signing time:             Mon 12 May 2025 11:00:38 +0000
Manifest this update:     Mon 12 May 2025 11:00:38 +0000
Manifest next update:     Tue 13 May 2025 11:00:38 +0000
Files and hashes:         1: 7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl (hash: u+ABZ+/LfoBwxrZV7jXRHUfHXnhC9/SOg6bPCNC4ewY=)
                          2: Ve7YFtVIJ6oEkkG5DoS-ngCjYv0.roa (hash: shC3WnGXTQpp0bvZL5ZiYYKQZO5PyZEtvwp/+mUAkvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:27:68:6b:82:c4:bd:d8:a3:bb:53:27:12:4c:a9:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec1d7290bfd1be123fbe0b075fd50dcf646c4f76
        Validity
            Not Before: May 12 11:00:38 2025 GMT
            Not After : May 13 11:00:38 2025 GMT
        Subject: CN=8eb5f729fc7cfe78b2681912ab2a8b7c2e4ec0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4f:87:0c:55:4b:d0:ca:41:39:ec:2a:2f:f5:
                    7e:b7:a4:b0:c9:c7:69:e0:18:44:1e:ba:77:56:35:
                    3a:bc:af:49:85:6b:7c:31:46:b6:75:35:bb:5c:13:
                    1d:cf:3b:82:d1:1f:60:2b:8b:2a:c9:65:16:6b:32:
                    4f:3b:31:48:fd:7e:25:ee:41:e9:27:65:5b:bf:a8:
                    55:63:84:5a:ea:f4:ba:a4:57:e7:0a:08:07:31:f9:
                    01:0a:ee:d6:ec:a0:05:8b:2a:41:fc:11:3c:76:33:
                    a7:c6:54:eb:60:42:ac:f4:fb:78:48:bb:99:b5:14:
                    2a:45:43:0a:c1:8d:c3:c9:42:02:21:66:10:23:3c:
                    30:b1:f4:5e:62:d8:2c:11:a8:7a:c4:bf:f6:53:5c:
                    d4:2c:32:ad:92:c6:ea:77:27:b4:2e:71:8a:f8:53:
                    9c:7e:d5:d6:82:b4:5a:b6:c2:67:ce:40:88:aa:90:
                    9c:c6:01:90:88:bb:6d:8b:21:d3:2a:c5:8a:a2:f3:
                    b4:18:f9:67:78:d8:0a:2a:98:9e:17:e3:71:ac:37:
                    47:58:34:51:54:e3:1a:a0:d9:70:a7:c6:33:6b:f4:
                    fc:45:0d:98:b3:da:2c:27:75:59:6a:a1:a6:ea:dc:
                    ff:86:dd:97:52:4b:03:0f:ee:a2:6f:98:26:73:f5:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:F7:29:FC:7C:FE:78:B2:68:19:12:AB:2A:8B:7C:2E:4E:C0:ED
            X509v3 Authority Key Identifier:
                keyid:EC:1D:72:90:BF:D1:BE:12:3F:BE:0B:07:5F:D5:0D:CF:64:6C:4F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b525eb-cea4-47fd-8f7d-68e949082f9b/1/7B1ykL_RvhI_vgsHX9UNz2RsT3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:36:6d:ea:30:68:03:f1:3b:c6:c8:ac:d8:3c:c4:e4:c8:14:
         f8:4f:3f:71:7f:5f:89:29:a6:16:e7:0c:a6:ca:93:d7:19:b2:
         46:45:55:3f:f1:b5:61:d1:d0:22:e5:dc:96:0d:0d:d9:f6:e0:
         c5:dc:6d:38:ad:db:6a:dc:4c:67:34:55:48:e1:b2:8b:8a:ec:
         9c:6c:61:ae:91:84:4a:09:5d:ee:aa:25:17:e5:9b:f7:64:a4:
         c9:89:13:35:f3:3a:47:58:8b:37:43:c2:43:f3:a5:16:e5:c3:
         40:21:d3:6d:35:79:99:83:d1:b8:01:b9:49:0e:9c:8a:b4:62:
         6a:1a:b4:28:24:6f:e7:c2:d3:7a:f7:ef:ac:de:db:9a:19:99:
         08:4d:0b:60:e4:8a:b3:7f:47:67:43:b2:0e:dd:de:22:be:2f:
         3d:5d:9b:ef:96:9b:84:b1:a3:ee:4e:2b:34:fb:d9:e2:da:11:
         87:82:ad:10:15:cf:af:28:50:07:71:06:b9:7b:cb:10:36:d5:
         f7:ca:14:7e:05:12:53:b5:92:9c:b0:ea:63:92:0e:fa:64:e1:
         17:80:19:e1:16:cf:d9:86:4f:a1:61:23:2c:09:d3:96:69:f0:
         f4:e7:dd:c4:b2:96:22:3e:cd:e0:a9:74:47:c0:f3:75:46:a1:
         72:ac:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:56:18 2025 by rpki-client