Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          Ch9q2p4u2q98i9VIFIATaB5MWSYadOGuGZGb/87OLRk=
Subject key identifier:   E6:E6:C4:F3:D6:8D:5F:E1:55:B8:B4:F4:CB:B3:86:96:BA:95:4E:AE
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       0196B558B7FAD119A81BBAD04C040F6232A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          14CE
Signing time:             Fri 09 May 2025 14:00:12 +0000
Manifest this update:     Fri 09 May 2025 14:00:12 +0000
Manifest next update:     Sat 10 May 2025 14:00:12 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: mrW6uOMu/NqSk/jAeHDAfS3QmI1PX+195mxJeO9glkA=)
                          2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:58:b7:fa:d1:19:a8:1b:ba:d0:4c:04:0f:62:32:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: May  9 14:00:12 2025 GMT
            Not After : May 10 14:00:12 2025 GMT
        Subject: CN=e6e6c4f3d68d5fe155b8b4f4cbb38696ba954eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3c:0f:f7:c4:35:2f:ca:da:06:81:b7:03:eb:
                    31:20:45:fb:b8:43:81:63:04:5c:ce:cc:b3:c0:18:
                    61:b8:7b:9f:d7:9e:88:d8:42:c2:19:65:3b:98:9f:
                    f9:09:1b:1e:ef:fc:54:6a:f2:a7:32:b1:86:5c:74:
                    50:57:81:c5:1b:5a:59:65:61:cb:4e:77:80:82:a2:
                    14:86:54:ba:6f:57:56:62:16:53:e5:47:99:ac:00:
                    43:d1:9f:74:de:83:80:2c:64:a8:28:27:fb:09:18:
                    30:47:0c:e8:5b:1f:23:71:89:4d:54:b1:57:1c:f4:
                    b5:28:b2:d9:b3:91:61:dd:67:1e:e4:dc:e6:90:40:
                    07:ca:56:f9:1c:3b:97:bf:22:d5:0b:03:9b:36:d4:
                    31:2d:d0:a7:5b:42:2f:78:5e:f2:74:bc:a6:14:38:
                    b6:0f:71:1e:af:fb:5b:52:f5:1a:ac:26:9b:a8:ee:
                    d1:8f:4d:e4:89:70:aa:3d:55:46:57:06:05:77:2b:
                    b2:89:9d:20:a7:54:4b:38:4f:d1:51:18:5b:e3:73:
                    96:56:3c:08:11:a5:32:f8:31:d9:51:df:81:13:d1:
                    d4:df:9d:72:26:42:13:4c:58:04:06:15:dd:82:0d:
                    e8:02:5b:6b:37:30:c0:06:cc:d9:70:96:e8:d7:af:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E6:C4:F3:D6:8D:5F:E1:55:B8:B4:F4:CB:B3:86:96:BA:95:4E:AE
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:14:24:30:8d:19:50:69:98:70:41:a2:0f:35:20:71:3f:38:
         68:bf:03:59:08:b3:69:3f:bf:14:68:28:74:97:86:fc:56:e9:
         4b:a4:ce:12:08:41:f2:2c:c8:4b:12:de:95:ee:7f:2c:66:80:
         81:ee:71:3c:dc:f5:28:1b:4e:a1:ce:84:0b:48:94:55:f6:b9:
         d4:3e:3a:8e:b8:4e:e2:93:5e:ba:f1:57:c4:d5:cd:50:1f:2c:
         6e:1d:4b:e1:46:c1:e7:d7:d9:75:fc:9c:d4:8b:5c:11:fa:2d:
         6c:ae:b7:af:93:b7:83:a4:06:6e:b0:1a:13:76:35:f8:b8:9c:
         e8:4f:4b:d3:33:84:56:af:1b:12:99:5b:a1:8f:2e:b5:59:ae:
         c6:20:2d:17:58:89:b0:c2:d9:56:d2:2e:c6:04:0f:9b:15:6b:
         1b:5c:07:ad:c4:5a:c0:24:52:11:d7:15:47:2e:81:8e:78:d3:
         a1:cc:ca:ed:25:d5:0c:7d:9f:31:36:70:a4:d4:a5:c4:cd:04:
         38:54:67:f0:d0:5a:32:ac:41:b7:4a:a3:db:1f:cc:2c:0b:35:
         d3:ca:2f:d8:40:c6:6a:eb:67:d6:39:69:82:2e:6b:59:13:a6:
         47:ca:ce:49:62:57:b5:2c:09:bd:ee:bc:10:6f:1e:12:03:4d:
         b9:94:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:22:55 2025 by rpki-client