Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
File:                     rf2QyzV0L55YHoy98OPhI6hJyDA.mft (raw, json)
Hash identifier:          KVutWMgTWpnNTXjyDeCGdUrKxZQ+xzr5geC66fYwfoo=
Subject key identifier:   BD:D1:D9:87:6E:EA:E2:DC:C2:5F:6A:59:C0:2B:A2:59:7A:8F:E8:6B
Authority key identifier: AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30
Certificate issuer:       /CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
Certificate serial:       0196A72FCC43DDCE98E641C733AD89D5EF2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
Manifest number:          14BB
Signing time:             Tue 06 May 2025 20:00:49 +0000
Manifest this update:     Tue 06 May 2025 20:00:49 +0000
Manifest next update:     Wed 07 May 2025 20:00:49 +0000
Files and hashes:         1: csdHd_e7Tx65D2MBS9ZtbLUxU90.roa (hash: fNuNtwuPS3v94+W5VQY9K+dMsKggefc0dwxaWQUAwyY=)
                          2: rf2QyzV0L55YHoy98OPhI6hJyDA.crl (hash: glYI0OZ3B6QbIYtcMpwe8ZrKfO5I3ZASv+NGr9wtF+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:cc:43:dd:ce:98:e6:41:c7:33:ad:89:d5:ef:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adfd90cb35742f9e581e8cbdf0e3e123a849c830
        Validity
            Not Before: May  6 20:00:49 2025 GMT
            Not After : May  7 20:00:49 2025 GMT
        Subject: CN=bdd1d9876eeae2dcc25f6a59c02ba2597a8fe86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b1:e5:9a:be:88:8c:bb:35:12:fc:a4:ba:ae:
                    50:c5:e0:ab:5a:52:48:bc:45:0e:6f:e2:f6:45:c2:
                    73:43:b5:c8:b7:7f:ce:67:ea:01:97:b9:23:df:18:
                    05:4f:8d:cb:9d:53:e3:9c:fb:e4:b4:4a:2c:2e:24:
                    59:c0:20:2d:4a:e8:69:e0:58:61:9d:0c:6b:39:92:
                    0d:0b:13:e3:2c:6b:3b:84:84:e5:dc:fc:60:bf:8a:
                    ce:50:a6:db:3d:11:cd:c3:c0:82:37:aa:5e:ec:95:
                    71:90:dd:ff:9f:2b:45:ed:3c:4b:cd:74:ce:22:80:
                    26:77:2a:af:c8:9f:5a:ba:ab:4d:93:ae:26:11:a9:
                    59:00:60:f3:c3:c0:62:61:a5:31:74:11:e9:1d:84:
                    0a:c6:e4:91:4d:d6:c4:bf:89:0c:ab:2b:5f:37:69:
                    17:be:8f:68:c1:6a:df:d8:ce:0a:5a:c5:0e:06:b9:
                    16:c5:22:45:e8:62:77:b5:79:e9:ab:51:95:cb:b6:
                    31:b4:f1:70:c6:e6:e1:06:a1:78:8c:0c:94:3b:51:
                    df:62:f6:e7:6e:46:15:ef:af:cc:cc:56:77:62:22:
                    b3:49:0e:4c:d6:ca:c6:d4:b9:87:52:e8:6d:b2:3f:
                    c6:a9:6b:86:9d:e5:53:53:19:2f:06:40:ac:c3:87:
                    84:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:D9:87:6E:EA:E2:DC:C2:5F:6A:59:C0:2B:A2:59:7A:8F:E8:6B
            X509v3 Authority Key Identifier:
                keyid:AD:FD:90:CB:35:74:2F:9E:58:1E:8C:BD:F0:E3:E1:23:A8:49:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rf2QyzV0L55YHoy98OPhI6hJyDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7e224d-f154-4f75-a2a8-eb7ec4d7dca8/1/rf2QyzV0L55YHoy98OPhI6hJyDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c6:8d:37:ec:f2:c2:b4:f2:8d:26:fc:ef:1e:83:6c:30:08:
         b1:e0:2c:60:e3:c9:63:d9:d7:8f:f2:ea:30:32:3f:1f:cf:3c:
         eb:07:16:df:1f:d1:38:24:a1:85:b5:1f:9d:2c:39:ab:d1:e9:
         9c:47:3f:c6:7b:d2:93:d9:2d:2d:b9:9f:8b:d6:e3:fe:c5:80:
         92:7a:12:ff:9b:05:a0:44:8a:60:35:e5:70:d6:ff:8b:59:8f:
         e4:89:54:6f:e7:50:fc:0e:0c:ba:98:a8:d0:77:8f:a1:1c:05:
         81:e5:a0:87:5c:1a:b1:1e:31:bd:5a:13:29:4b:10:77:a0:cc:
         a5:1e:0d:04:c2:23:c3:38:bb:7c:10:d0:e1:81:21:ab:89:13:
         ee:ef:ef:09:21:7f:1c:41:c7:12:c8:75:8d:95:f8:9b:b9:a7:
         e7:fb:83:4d:c9:8e:57:b1:e7:e5:42:c6:a1:42:0a:55:72:1d:
         3e:11:3d:81:73:5f:3e:5c:b0:0a:40:a5:85:49:dd:30:a9:64:
         ec:b4:46:09:c9:07:79:aa:a9:89:c8:70:2a:f5:e7:ef:56:81:
         25:69:0d:b7:bc:04:1b:74:ec:f3:5e:71:b6:0f:ba:00:7e:ce:
         88:50:36:db:01:8e:29:d1:1a:6c:10:e2:9f:c2:6c:06:6c:c4:
         fd:f9:51:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:54:01 2025 by rpki-client