Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          H6m7JWQxfW9/raG+aNRetHr7lpr0SKDnl2wqcK/ras4=
Subject key identifier:   08:B0:C4:70:53:E6:50:01:B2:1A:D2:3E:7F:D3:7A:9B:B5:1E:F5:CF
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       0196A8B061C33A1FBEE8B47BEFC01F18BA1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          26
Signing time:             Wed 07 May 2025 03:00:53 +0000
Manifest this update:     Wed 07 May 2025 03:00:53 +0000
Manifest next update:     Thu 08 May 2025 03:00:53 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: cnHuTE6VZAHQFrWF7MSnKaqIKmvvkljyhuNfM38+h6E=)
                          2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a8:b0:61:c3:3a:1f:be:e8:b4:7b:ef:c0:1f:18:ba:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: May  7 03:00:53 2025 GMT
            Not After : May  8 03:00:53 2025 GMT
        Subject: CN=08b0c47053e65001b21ad23e7fd37a9bb51ef5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:8e:b9:91:0e:23:c0:fe:13:07:0a:d1:11:
                    7f:1a:19:a0:c8:d7:0f:a0:d8:e7:65:67:dc:5d:b9:
                    cf:a6:d5:22:ef:f1:8d:b9:aa:c9:1f:23:d1:33:b8:
                    5c:a5:f5:cf:fd:69:a3:7b:fb:9f:6b:3d:20:80:37:
                    2f:6f:e4:de:ec:dc:c2:7a:fc:49:3d:b1:5e:55:5c:
                    59:00:f3:2f:15:b8:21:55:4a:49:b5:af:50:da:f8:
                    8a:46:33:ff:03:c4:2b:07:ed:fd:38:d9:aa:6f:2b:
                    ca:ec:b0:03:b4:15:73:ce:9d:27:c6:a1:68:a0:69:
                    27:ed:75:13:53:97:44:81:b8:ff:cf:b4:7f:8a:cf:
                    3c:1c:b0:96:99:47:81:2c:18:2c:d2:db:a7:b0:ed:
                    78:39:e8:47:01:bb:a8:86:d0:c5:b6:e0:1f:e6:9b:
                    eb:a7:75:72:da:97:0e:77:51:7e:61:cb:2a:8e:81:
                    37:a2:31:6a:02:00:78:aa:c7:01:26:c0:77:f9:1a:
                    59:5b:b7:00:ea:e9:40:13:57:67:6c:37:14:01:27:
                    40:28:7b:f1:42:a9:ca:45:32:aa:91:37:ab:31:2e:
                    31:dd:16:fa:eb:62:0f:2a:62:93:e4:23:a0:5c:53:
                    72:b6:e7:17:d5:56:b4:ae:bd:8c:3b:7e:84:75:c1:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:C4:70:53:E6:50:01:B2:1A:D2:3E:7F:D3:7A:9B:B5:1E:F5:CF
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ba:57:6a:5f:48:10:ec:8e:bf:d0:f4:8d:57:0e:68:b5:f0:
         d0:d7:1f:6a:e7:da:d6:7b:7a:4a:22:29:0d:b3:11:96:83:ce:
         a1:36:ce:27:1c:82:d0:16:1e:01:3b:12:2d:9b:43:d3:67:eb:
         e4:5b:f5:b4:a9:bd:e3:2e:07:a8:ac:e3:c7:1a:6f:d1:10:dd:
         37:63:d7:c8:8f:55:c1:49:69:4f:7e:4b:95:61:74:b9:76:a7:
         16:84:36:79:00:3e:94:42:40:9f:1f:26:b0:cd:9c:a8:c1:56:
         26:d6:fd:4b:bf:87:20:85:cc:26:00:a5:64:88:65:bd:49:eb:
         aa:12:f1:ce:94:53:73:2e:9d:65:f8:c2:f1:f4:28:a5:09:95:
         ee:a4:e6:5a:c5:9a:fb:40:01:5c:4b:23:f4:65:e7:f4:99:40:
         aa:d8:41:d3:99:e1:45:5b:22:4d:a5:e6:74:9f:97:e1:10:1f:
         77:54:82:b2:10:0d:b3:28:3b:cb:4f:4c:de:73:91:0e:8e:73:
         19:53:1e:68:d1:26:4b:f2:2f:5e:17:85:92:82:6f:fd:b1:3d:
         c9:38:c2:2d:d0:dd:4e:34:09:49:48:5a:a3:ce:12:10:f4:77:
         26:81:da:db:cb:88:ee:30:47:bc:63:4f:d4:e3:ca:29:4e:bb:
         ba:95:62:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:45:49 2025 by rpki-client