Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          1jTkM1dFA3GkT5BS+AcxyX5QPUR5GOXzFXLebnzGwQM=
Subject key identifier:   BA:49:2A:F5:80:B2:A1:E6:FA:AA:B1:0E:EC:7E:F3:29:39:D8:76:7E
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       0196A6F85BB0CD29B1D6EF1B6E799CDDC18A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          14BB
Signing time:             Tue 06 May 2025 19:00:16 +0000
Manifest this update:     Tue 06 May 2025 19:00:16 +0000
Manifest next update:     Wed 07 May 2025 19:00:16 +0000
Files and hashes:         1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: RTiYjEMn6sqLPtOB93UnMnWmnoR4uzcesAvm8l3KxMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:f8:5b:b0:cd:29:b1:d6:ef:1b:6e:79:9c:dd:c1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: May  6 19:00:16 2025 GMT
            Not After : May  7 19:00:16 2025 GMT
        Subject: CN=ba492af580b2a1e6faaab10eec7ef32939d8767e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:31:4d:4e:b6:a0:e9:ae:83:10:f2:c1:97:
                    a1:55:76:37:08:b7:90:f5:cf:07:9e:5d:69:04:55:
                    56:c8:3d:ae:81:98:b5:74:1d:ae:77:91:ca:e5:5a:
                    5c:93:9b:7c:3d:3a:bf:46:29:29:92:ae:77:4b:1d:
                    4f:9c:89:87:32:c8:ea:b5:ff:33:61:29:19:1a:d5:
                    ea:8c:fb:ae:b3:99:90:2e:39:16:f3:32:42:cc:be:
                    41:3e:66:78:7e:2e:aa:74:76:ba:25:0f:eb:e4:95:
                    87:7f:b1:fc:e5:54:79:95:c6:f3:47:8a:77:18:b3:
                    2c:ed:27:d2:ae:47:ff:33:d0:a6:a5:53:5c:99:5a:
                    a5:b5:55:e4:d6:b3:b3:2f:b5:9c:07:68:1a:5b:fa:
                    59:91:f1:7c:0a:58:a7:84:ce:db:61:68:99:4c:53:
                    0d:3e:3b:50:6f:82:49:19:d6:dd:19:48:f5:2e:3f:
                    23:8e:90:ae:ba:f0:2e:93:e7:88:b1:a6:a2:c4:f5:
                    3d:1e:05:ea:b3:9c:be:ac:a2:b5:0a:e1:84:76:e8:
                    c4:63:8e:25:15:e8:6b:4e:0a:0c:2b:f7:76:e2:3c:
                    15:3b:c7:e7:a0:0e:50:9e:46:51:89:3a:f0:31:18:
                    d2:a9:8c:0d:7a:1e:74:a7:7b:cb:34:5d:f1:e6:e4:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:2A:F5:80:B2:A1:E6:FA:AA:B1:0E:EC:7E:F3:29:39:D8:76:7E
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:21:a1:7f:cb:11:9b:e7:79:07:b7:2f:13:4e:6c:1f:70:a9:
         0e:6d:c5:3a:02:1f:bc:ad:7f:2b:d4:32:23:bb:0e:cb:6d:8b:
         e9:4e:06:a1:b6:cd:fe:82:4e:44:2e:14:b8:5f:ae:b5:4b:3c:
         9c:2d:da:85:18:0f:19:d2:08:a4:1a:1f:ea:fb:e9:ec:42:31:
         cb:8c:22:a1:b5:fe:3e:7a:10:a6:8d:ff:78:12:c3:27:0a:31:
         75:96:3f:4d:77:ad:30:5c:5a:ad:13:72:a6:15:fb:50:9a:19:
         de:77:42:75:47:63:a3:1a:eb:28:e6:27:ef:8f:4f:f7:0f:e7:
         3a:d8:86:43:0b:64:dc:68:1a:fa:d3:1f:85:b7:e3:6c:96:75:
         95:f6:b8:8b:7d:e3:76:42:e9:f6:bf:08:dc:0e:dd:29:33:e6:
         61:47:2a:f0:f8:5f:64:82:12:b6:cc:25:8e:d3:eb:9c:a4:be:
         9f:be:e7:eb:24:75:06:8b:95:49:3e:83:76:55:42:fe:d1:c1:
         5c:1a:49:fb:52:fb:67:15:13:d1:49:f9:bd:55:fd:9c:71:0d:
         3f:bd:1b:d5:66:ed:66:a2:10:9e:37:5f:15:b9:58:c9:b7:5e:
         40:da:e7:6a:44:f9:71:ec:d0:1e:1c:6c:03:47:86:56:a5:74:
         db:da:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:04:42 2025 by rpki-client