Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          3oNb5gxgfiZRCRENbwRoJNxBw34RzLn7Znhlf+X+654=
Subject key identifier:   71:9B:6E:08:CE:91:F6:CF:1F:6A:84:4C:78:AD:23:79:FE:F2:25:48
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       01969DBE3AC0A4D23C63E74BBAE8F59AA218
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          1523
Signing time:             Mon 05 May 2025 00:00:11 +0000
Manifest this update:     Mon 05 May 2025 00:00:11 +0000
Manifest next update:     Tue 06 May 2025 00:00:11 +0000
Files and hashes:         1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: yhvKgAJyM3DzzsI6Yoj/X+zOts+wz0Q6TA9ka/OFSqg=)
                          3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
                          4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:be:3a:c0:a4:d2:3c:63:e7:4b:ba:e8:f5:9a:a2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: May  5 00:00:11 2025 GMT
            Not After : May  6 00:00:11 2025 GMT
        Subject: CN=719b6e08ce91f6cf1f6a844c78ad2379fef22548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:45:19:ad:2b:c0:78:97:6f:95:0f:4a:88:ef:
                    b7:d5:4a:10:00:0a:e7:67:34:6d:aa:14:91:4f:72:
                    70:65:b4:bd:13:01:70:0d:9f:1f:e8:dd:8e:b5:ec:
                    1f:44:42:98:d1:89:d2:a2:9f:ec:1a:e2:c0:35:50:
                    67:10:96:b5:9e:6b:aa:bc:a5:01:91:69:8e:1a:5d:
                    50:9f:32:47:31:11:48:ab:6b:5a:a4:49:b2:ce:b4:
                    58:d1:9d:86:a3:a7:f5:77:65:8c:8f:33:97:a3:1e:
                    8c:00:f0:5a:be:f1:1b:6e:7d:1b:c2:e6:45:fc:ef:
                    8b:71:cc:62:6f:4f:29:76:2f:15:d8:59:5d:e8:68:
                    b5:5d:88:89:6c:aa:5c:57:22:e2:07:43:da:d9:94:
                    1d:f4:b4:ef:87:db:07:5b:95:f8:22:8d:87:af:a7:
                    cd:df:81:a6:46:e4:4d:1f:91:d0:a2:46:21:47:64:
                    16:4b:58:c9:c7:9c:72:14:f2:f8:b8:4a:62:69:58:
                    d6:28:ff:35:06:b6:88:9c:14:7d:86:9b:bb:23:66:
                    67:b9:58:d7:fd:35:f5:56:8f:7d:8c:75:9c:a9:26:
                    bb:e6:8f:b0:68:e4:a7:a4:02:2a:f0:ef:4c:33:5a:
                    f8:fd:13:a6:2d:44:6b:21:12:18:a8:07:35:dd:b3:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:6E:08:CE:91:F6:CF:1F:6A:84:4C:78:AD:23:79:FE:F2:25:48
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:05:08:3f:7b:ec:80:be:60:d7:6c:0c:51:54:6d:18:5a:fa:
         42:0f:4f:c3:e9:70:62:c7:30:15:b0:ba:7a:3e:cc:83:d3:b2:
         5e:4d:11:e0:78:4e:63:31:57:ca:be:dc:14:87:bf:bb:06:6f:
         73:22:90:d4:ad:0a:60:de:90:64:47:37:67:71:4d:45:17:d7:
         03:4b:bc:8f:dd:5e:1a:e2:5c:74:42:ab:13:cd:85:30:47:cd:
         24:b1:d5:74:cd:12:4a:79:4d:4d:84:ff:1d:44:8b:b2:a6:65:
         d7:19:b4:83:91:98:93:36:0d:fa:5d:4f:18:4b:d5:49:a9:5d:
         b5:59:46:9e:a4:bb:09:41:75:7a:1e:e9:8c:34:5e:5c:7d:e8:
         43:f6:ad:d2:32:33:1e:90:a3:e1:8b:5e:0c:89:bc:ef:31:40:
         06:16:2d:05:a1:7a:aa:1d:4f:53:3d:47:e6:53:59:50:e1:51:
         be:6d:ef:1c:de:c0:ea:25:21:05:06:04:81:99:41:dc:7a:41:
         25:b1:91:85:25:e4:8c:00:89:0a:b3:b0:e0:11:01:f6:07:d9:
         3d:5b:a8:87:d3:cc:83:e5:c1:04:5b:6f:3d:23:df:72:97:49:
         c6:d8:b8:73:bf:c3:12:48:eb:93:1f:ea:4c:e0:89:d6:0b:6c:
         f1:06:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:25 2025 by rpki-client