Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          GWL6bY27K9WFPPPfgsOIwNUDu/m1PhxikHqVDpsRo7I=
Subject key identifier:   7D:07:73:3E:10:0D:A8:10:85:6F:85:84:D9:0B:F5:3B:91:A6:2E:0F
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       0196BBFFC9BA9E95B1C743EEF6F95CE2DC5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          022C
Signing time:             Sat 10 May 2025 21:00:24 +0000
Manifest this update:     Sat 10 May 2025 21:00:24 +0000
Manifest next update:     Sun 11 May 2025 21:00:24 +0000
Files and hashes:         1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: 4Yo7Kxs+ptn4Su7ooJM+7UfEFWmekfxikiV3JAGuNyo=)
                          2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:ff:c9:ba:9e:95:b1:c7:43:ee:f6:f9:5c:e2:dc:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: May 10 21:00:24 2025 GMT
            Not After : May 11 21:00:24 2025 GMT
        Subject: CN=7d07733e100da810856f8584d90bf53b91a62e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:3b:3e:5f:47:17:a3:63:ef:69:56:01:84:
                    71:72:74:6f:49:bd:9b:31:db:f9:dc:6c:ff:52:5c:
                    a1:1d:95:1b:d7:54:8a:22:6d:04:55:33:88:e0:f7:
                    92:3f:8b:92:96:a6:a4:dd:f6:7b:73:9e:f3:d4:e2:
                    c2:0b:8a:b8:0e:49:1e:9e:69:37:2b:3b:ac:cd:eb:
                    93:41:72:5f:45:b1:32:0c:df:a5:3d:ec:57:1d:e4:
                    f2:ec:7a:14:fe:54:2f:b2:72:3c:49:23:3a:ed:c1:
                    fe:8f:d9:99:62:4f:a7:ce:1a:6a:05:0f:b2:32:5e:
                    d9:4a:f5:fc:88:96:53:bd:f7:72:7d:21:e3:f7:7e:
                    27:c0:c4:d9:94:9a:93:df:ef:25:32:5f:87:73:b5:
                    9b:cd:2e:eb:38:a3:71:c1:18:d2:45:33:9b:fa:73:
                    bd:98:46:c0:33:dc:f4:cb:b3:26:a2:23:d9:be:63:
                    49:b1:21:15:e6:67:80:dd:49:e8:22:e8:c7:08:5a:
                    e2:13:6c:cd:d8:4a:87:c6:46:09:9c:5f:89:bf:fd:
                    aa:d9:aa:d8:94:2c:6d:c9:37:7e:09:c2:54:f3:14:
                    6f:45:80:42:be:e3:32:59:8e:0b:26:5a:7d:37:47:
                    e8:0a:aa:99:0e:4a:d5:8e:be:58:db:27:5d:35:81:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:07:73:3E:10:0D:A8:10:85:6F:85:84:D9:0B:F5:3B:91:A6:2E:0F
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:b6:bf:a4:06:2a:59:02:fb:5f:01:ab:4f:1c:83:43:cc:32:
         98:56:c0:ce:3c:6c:0e:f6:04:ae:e5:66:22:c4:f2:b6:af:8d:
         66:39:eb:14:06:bf:fc:fd:cc:29:f5:b3:ae:02:02:d8:20:22:
         b9:58:c5:f1:44:e1:00:e7:40:a5:15:b3:31:c6:5b:7e:42:8b:
         c8:9f:4d:26:02:27:e6:b7:6a:d0:a7:0a:2b:85:2d:30:95:e2:
         eb:45:7a:d7:7e:fa:6b:1c:b4:e6:34:9c:13:2f:c7:b7:00:ee:
         7c:66:55:1c:70:99:1b:86:80:63:db:58:82:d9:9f:11:d1:8a:
         52:cd:ab:3d:37:75:a5:06:81:df:d9:dd:6c:b5:9c:82:97:d0:
         08:5b:7e:cf:55:19:d6:24:db:6d:95:a1:ff:aa:b6:be:5e:c3:
         80:eb:7c:ad:4d:89:ec:56:74:06:5c:88:95:6d:26:1c:da:bd:
         e0:00:6b:98:4a:cd:e5:51:e2:3e:62:e3:70:78:23:ee:19:30:
         79:d1:9a:df:a3:28:81:9d:6e:e4:4d:72:cd:58:1f:3e:0d:54:
         96:dc:65:a5:e6:1a:39:48:0f:fa:2e:fc:94:3e:47:bd:1c:36:
         04:ce:67:53:a9:de:30:28:2b:ed:f6:bc:a1:0b:7a:43:f3:df:
         9e:31:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:46:34 2025 by rpki-client