Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          KVVkZSVC2lFUKRKYDwW9bBsUcpHrN1MsxmMCuuBwTTg=
Subject key identifier:   EE:56:C3:CB:F8:2E:F1:42:3C:27:32:34:6C:15:5A:C0:2D:D2:5C:1F
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       01977CB10A096D92C6CAE1002B387E74587F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          08DB
Signing time:             Tue 17 Jun 2025 07:01:06 +0000
Manifest this update:     Tue 17 Jun 2025 07:01:06 +0000
Manifest next update:     Wed 18 Jun 2025 07:01:06 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: mLB/dPza0jtYQWgnQ5skIB+bFDdEw2c+VWR+IrV+Wrc=)
                          2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
                          3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 07:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b1:0a:09:6d:92:c6:ca:e1:00:2b:38:7e:74:58:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Jun 17 07:01:06 2025 GMT
            Not After : Jun 18 07:01:06 2025 GMT
        Subject: CN=ee56c3cbf82ef1423c2732346c155ac02dd25c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:2b:20:15:0b:65:e9:64:ee:32:72:0a:f2:
                    ff:54:9b:74:6f:05:16:5d:5a:51:ea:fa:96:f4:4d:
                    a6:e6:cb:7d:99:86:b9:db:67:47:40:c3:c2:dc:8e:
                    88:c8:62:74:a7:44:30:b4:53:6e:cf:13:be:47:48:
                    12:c0:75:5f:e8:66:a5:b7:52:c0:2b:88:57:8b:c5:
                    c9:0a:9c:d4:5a:34:ff:64:cf:de:89:68:6a:e2:59:
                    91:f0:09:84:86:89:45:3b:99:d5:0d:4d:da:db:5d:
                    57:e8:9b:c8:75:c0:9a:ac:83:e2:40:b8:e5:33:de:
                    9a:3b:cb:db:07:ed:7d:dc:c5:5d:70:d9:25:56:0d:
                    13:0f:b7:03:e3:40:e5:fd:9d:56:d0:43:f7:77:46:
                    bb:b5:46:b2:9e:2e:18:83:9e:50:95:01:14:b6:12:
                    37:75:53:36:cb:b1:5a:54:e3:95:7d:25:fa:f0:ee:
                    13:09:a2:be:6e:bc:47:4d:f3:b2:7d:d6:ce:b9:91:
                    03:3f:c8:32:b1:bd:67:05:7c:6b:f3:8f:24:63:5b:
                    77:65:7c:2e:76:b1:44:c1:be:75:b4:1e:68:57:8f:
                    cc:d5:9d:b8:30:3e:01:a1:12:80:b8:2f:f7:ea:c3:
                    2b:c2:fd:6e:31:2e:9f:0e:4a:fc:5e:dd:8e:44:b5:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:C3:CB:F8:2E:F1:42:3C:27:32:34:6C:15:5A:C0:2D:D2:5C:1F
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:47:93:7a:e5:60:03:ca:23:07:8a:97:a0:59:58:93:38:08:
         42:31:6d:15:db:1c:81:67:2f:ee:f0:26:6b:be:4a:b0:b1:28:
         4c:73:9e:7c:75:f4:aa:19:cc:05:5e:b4:12:f5:c2:3c:f5:c9:
         c9:67:43:0f:06:10:52:06:f6:5f:fc:cf:8e:39:66:6b:d4:23:
         6c:26:a2:ef:28:37:4a:96:7b:25:12:f1:4f:5a:6c:f1:4d:e8:
         ce:c5:a8:54:b3:d0:5e:b3:55:81:c3:86:09:d0:05:f4:27:78:
         cd:ca:ba:97:45:52:2f:dc:d8:2d:d1:d0:80:5c:52:23:a1:1e:
         2b:07:ac:b3:dc:4c:76:b6:b2:6c:18:cb:ee:6c:c2:52:52:5a:
         86:b4:67:2f:b1:9e:70:d1:75:6e:0b:29:23:68:82:bc:bc:32:
         20:39:b3:b6:7e:0e:17:6c:7c:45:b8:91:a8:af:41:0b:8f:b2:
         df:b7:71:bc:4c:86:65:60:9c:5a:2c:61:59:bc:b6:d3:e9:43:
         93:7b:15:61:b1:5d:76:02:75:56:27:02:4b:7e:5e:39:92:e2:
         8a:1a:e9:6f:87:16:5c:5d:72:cd:19:49:0f:5c:84:ed:3e:34:
         73:bb:dc:59:a3:fe:1d:9a:9d:76:79:dd:3a:1a:49:ea:2f:94:
         ab:ab:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:09:57 2025 by rpki-client