Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File:                     1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier:          dIhzlmawjatUWv+FsGlHT1VZ8SV0Z24MEEsv2KLuua8=
Subject key identifier:   18:C8:18:22:28:23:84:C9:E5:B6:49:8D:56:2A:EF:DA:56:1D:49:87
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer:       /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial:       01969E6336F89C2F8B8BEE17F6B971D889AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number:          01BD
Signing time:             Mon 05 May 2025 03:00:24 +0000
Manifest this update:     Mon 05 May 2025 03:00:24 +0000
Manifest next update:     Tue 06 May 2025 03:00:24 +0000
Files and hashes:         1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: vnmzG2XdNK26YYx0tIHxx+odpgoA02DVfn5tWojd8QY=)
                          2: jj4Fs6tF4xq0DkAC9XMLg7s4mmw.roa (hash: sivrAn80+5m3Ncmw+RXEZVkYOB9TZa2z37JwsZzW78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:63:36:f8:9c:2f:8b:8b:ee:17:f6:b9:71:d8:89:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
        Validity
            Not Before: May  5 03:00:24 2025 GMT
            Not After : May  6 03:00:24 2025 GMT
        Subject: CN=18c81822282384c9e5b6498d562aefda561d4987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0b:c7:e8:14:3c:43:0f:11:12:bf:07:2f:fe:
                    85:2d:07:5d:08:63:6f:e6:49:9b:c8:eb:d8:d4:25:
                    19:ea:6d:fc:b7:01:ae:72:e7:ea:54:e1:83:0e:3c:
                    f7:3f:57:61:5a:95:08:b1:72:98:3a:b1:c6:6c:e6:
                    06:65:82:4f:c9:47:ec:51:36:f7:96:ce:b9:48:aa:
                    04:e0:c3:f7:f8:82:42:e5:cc:1d:7c:c0:c0:46:d8:
                    f4:dd:ea:33:fd:df:61:b0:39:e0:33:5e:2a:86:eb:
                    d9:1e:87:1c:38:42:8c:7c:c8:aa:66:22:18:4b:3f:
                    28:4c:69:e5:b7:e9:b9:8f:1d:be:31:5b:84:41:77:
                    dc:5b:14:c1:8c:74:46:3b:61:46:b3:2e:39:6e:87:
                    6a:22:25:f3:52:d6:fe:5e:31:3c:ef:1b:01:52:f2:
                    f4:64:83:53:c9:44:b7:da:00:5c:1f:a2:85:1c:6d:
                    00:97:47:3b:21:21:0e:17:a0:4c:9c:93:03:c6:bb:
                    e5:cd:bb:99:26:8f:71:23:e3:a9:b3:ef:bd:5f:25:
                    01:e8:a4:5f:89:6c:0d:85:89:e8:83:e3:9e:5e:5c:
                    48:46:7c:80:1d:4b:eb:0e:1a:d7:2a:7a:fd:37:2e:
                    a6:fa:40:4b:a1:93:9a:99:d7:02:ce:71:30:67:52:
                    f6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C8:18:22:28:23:84:C9:E5:B6:49:8D:56:2A:EF:DA:56:1D:49:87
            X509v3 Authority Key Identifier:
                keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:09:9d:d4:29:7e:96:71:fe:51:ac:77:b4:50:e6:eb:7b:
         43:79:6a:a1:bb:75:37:3b:c8:2d:18:02:0b:4f:98:90:83:74:
         63:81:dd:b4:05:af:b3:70:80:3c:02:8d:ff:68:f3:d4:90:8f:
         fc:fb:72:51:54:57:10:d6:98:fd:9c:b1:34:e5:56:0e:2b:b9:
         6e:35:13:6e:bf:1f:a1:c2:d7:bf:a6:44:9e:12:40:b4:3a:af:
         6b:b5:0d:51:a5:8b:3f:53:37:41:bd:b3:65:25:62:d2:b6:5e:
         e0:91:2d:70:8a:9e:0b:ac:c0:8c:5f:e2:ba:e4:02:84:39:ad:
         63:e4:84:21:61:c0:90:58:b2:77:96:a8:f1:17:15:77:86:f8:
         99:29:84:e8:d1:dc:57:a6:a7:f8:21:cc:fd:f0:e9:4c:66:21:
         8f:fd:9b:9d:55:d5:78:20:2d:94:9d:be:86:be:7f:a6:05:d9:
         4c:fc:da:82:22:7e:64:36:c1:22:0a:5d:00:0b:25:90:75:68:
         c6:91:c5:ff:82:0b:00:11:7e:66:6d:38:59:68:33:3e:e3:37:
         69:e0:cb:81:16:ed:38:7c:77:b3:ba:9a:1c:3d:ea:0d:8e:23:
         5b:99:7c:de:40:ee:25:be:87:30:26:11:3b:b0:fd:10:3a:25:
         a6:89:2e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:42:42 2025 by rpki-client