Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          Rw7ljbprCYwb+0ILA5ocQTYGbI3vgPF6YJTfP4VOMlk=
Subject key identifier:   2D:8F:7F:6D:C2:35:81:94:D0:1B:09:A4:58:26:A0:BB:F5:C1:D9:29
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       01969D50FD0785FB2BA7A64017FD420926C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          1528
Signing time:             Sun 04 May 2025 22:00:52 +0000
Manifest this update:     Sun 04 May 2025 22:00:52 +0000
Manifest next update:     Mon 05 May 2025 22:00:52 +0000
Files and hashes:         1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
                          2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
                          3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
                          4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: InqTNX4Jdj7olPA5LpPLCfFuspx9Bp30ltAqBb1LpMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:50:fd:07:85:fb:2b:a7:a6:40:17:fd:42:09:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: May  4 22:00:52 2025 GMT
            Not After : May  5 22:00:52 2025 GMT
        Subject: CN=2d8f7f6dc2358194d01b09a45826a0bbf5c1d929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:3b:ce:07:10:67:90:14:4b:95:4c:6e:b8:
                    6b:f7:0d:9f:5f:0d:b3:3a:7c:0b:8c:51:e1:51:44:
                    c2:f0:19:78:d8:67:a0:2b:b9:1c:76:41:27:80:10:
                    ed:fa:2d:d2:b1:06:e7:5e:2c:c5:e2:8a:23:ae:3c:
                    5f:d8:2c:84:89:1a:b6:d4:f7:c6:f0:b9:01:8c:15:
                    dd:76:8c:50:ae:2b:d7:97:5c:70:1b:f5:3b:a1:57:
                    1c:b6:18:9a:cb:da:ad:0f:e3:fa:a3:c9:b5:60:fe:
                    14:f6:b8:7e:65:5b:4c:df:d3:56:f6:69:70:a7:5e:
                    5d:65:9a:5d:9f:bf:b4:38:f4:44:90:ab:d9:dc:de:
                    ce:9f:32:99:c7:f3:cf:8a:d8:f0:9d:67:11:2d:25:
                    cc:e7:2d:60:2c:3e:d6:33:16:ce:ca:75:82:91:d6:
                    f2:ac:83:9b:ed:a4:39:a5:76:2a:fc:3f:bc:aa:ee:
                    66:71:36:55:48:04:1a:c9:4f:af:12:a6:b5:cb:60:
                    f1:70:3d:a0:c9:97:c2:53:9f:36:59:39:66:9b:1c:
                    20:94:4c:24:a2:6a:f5:9b:26:e6:e5:e1:b9:ee:46:
                    bb:99:2b:55:b7:31:94:00:12:8e:3b:cc:17:4b:68:
                    93:13:01:83:e0:1a:bb:ec:af:14:54:1a:1c:b8:00:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:7F:6D:C2:35:81:94:D0:1B:09:A4:58:26:A0:BB:F5:C1:D9:29
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:93:af:8b:64:00:34:de:72:e0:f7:08:f7:1e:46:44:ee:29:
         c3:1c:f5:85:f1:3e:4b:8b:dd:ed:fc:df:de:7c:2b:bc:42:95:
         c3:ba:bc:7f:48:60:97:b3:7b:57:53:f9:01:a0:a0:2d:32:b9:
         3e:3c:f8:3d:a2:26:b4:4e:fb:66:51:1a:81:76:e9:33:bc:d8:
         d6:a7:d0:01:35:f2:53:77:d6:c0:7e:53:07:18:96:d7:a2:0c:
         e8:87:c1:4f:e8:f9:75:da:f8:c7:d7:02:3e:f4:bc:ca:f4:a8:
         ec:d5:f1:54:ad:40:6e:63:f3:be:26:79:be:c3:5e:b2:20:04:
         70:94:56:8f:5f:bc:07:e3:45:99:8e:ee:02:57:8a:19:c7:42:
         58:36:f5:36:b5:3c:f9:fd:86:8e:33:d8:06:33:f4:40:0f:b9:
         43:9c:53:51:dc:99:42:e0:79:22:31:86:e7:4f:98:92:2d:79:
         3f:64:2c:0a:97:c3:14:42:34:7f:a8:cc:7f:6d:5f:1a:11:75:
         65:ed:81:0f:3f:33:a0:7f:97:b7:54:7c:a4:3b:96:02:2a:bc:
         20:86:3f:d7:4f:77:81:ae:f1:8c:a1:8a:7d:51:b4:75:56:78:
         15:6b:d4:78:82:2f:1b:fd:92:fd:93:26:03:6c:39:ff:4a:37:
         3d:a0:96:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:38:48 2025 by rpki-client