Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
File:                     B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft (raw, json)
Hash identifier:          MNlfPAbDmcC46pPh9rHklRNhdD50q/9xdODeI1s9WPs=
Subject key identifier:   18:AE:84:BB:9C:15:21:AF:DC:F0:3E:F2:C7:A5:02:A4:E3:D5:C6:A5
Authority key identifier: 07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC
Certificate issuer:       /CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
Certificate serial:       019768BC36FB2D747D605DF03CBB9295E3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
Manifest number:          0F62
Signing time:             Fri 13 Jun 2025 10:00:54 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:54 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:54 +0000
Files and hashes:         1: B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl (hash: cmtaqZmhq2Gss7OhKrN4wEwxp9JK0RQ9Ejm6PTD42PE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:36:fb:2d:74:7d:60:5d:f0:3c:bb:92:95:e3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0786ef4ff0ae7fcfc36a002a5456785ce1e40ecc
        Validity
            Not Before: Jun 13 10:00:54 2025 GMT
            Not After : Jun 14 10:00:54 2025 GMT
        Subject: CN=18ae84bb9c1521afdcf03ef2c7a502a4e3d5c6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:d5:f6:88:a3:97:3b:b4:0b:4e:da:d8:24:
                    1b:6e:c8:a0:f3:b1:43:da:08:eb:61:a4:bb:34:63:
                    22:34:3f:32:79:9e:28:49:ec:fb:9d:04:07:97:c7:
                    8a:9b:9a:87:2a:1c:39:bf:ae:64:bb:6f:6f:ce:83:
                    e6:58:84:af:83:e6:61:43:61:d6:ec:12:b2:2e:26:
                    94:af:43:68:d0:1d:b5:09:bf:ab:44:a8:ba:bf:8e:
                    78:fc:8b:34:d3:cd:3d:17:dd:bf:d6:42:be:13:c7:
                    a7:18:f9:7b:0b:6e:5e:e8:9e:23:6d:ad:a2:68:82:
                    57:44:70:3f:3a:20:69:9f:8c:f9:7a:65:b5:3e:c3:
                    73:e2:ec:4a:f5:bb:ca:d4:e5:1e:a3:1c:88:e1:72:
                    3a:31:70:14:ac:ff:a5:81:1c:81:df:72:27:90:19:
                    a2:30:56:c2:04:88:fc:78:99:9a:35:fa:7f:d5:1b:
                    db:1b:14:6f:b0:6c:e3:cd:02:fd:69:77:c5:e2:00:
                    b4:80:34:94:f8:7d:c7:16:90:57:d8:dc:2d:06:b3:
                    c1:4c:b3:31:a6:e0:5a:4a:af:0a:1f:06:1e:08:64:
                    79:29:84:78:76:0c:95:72:9d:cc:2a:9d:53:0e:87:
                    50:35:15:fa:24:16:84:e5:e4:56:70:41:d1:aa:b6:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:84:BB:9C:15:21:AF:DC:F0:3E:F2:C7:A5:02:A4:E3:D5:C6:A5
            X509v3 Authority Key Identifier:
                keyid:07:86:EF:4F:F0:AE:7F:CF:C3:6A:00:2A:54:56:78:5C:E1:E4:0E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/7b3453-5bc0-47ec-b0d0-91f7dbd2e201/1/B4bvT_Cuf8_DagAqVFZ4XOHkDsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:a6:32:0f:76:b8:85:6a:95:73:dc:ee:74:a5:0f:47:7a:
         17:8d:0b:81:4a:16:47:49:55:9a:cc:df:da:23:d1:c7:6d:a7:
         72:e7:39:06:16:e4:86:5a:d5:c3:4c:48:d6:62:b4:bb:69:5c:
         82:69:2c:e8:e9:fa:76:fa:41:d6:df:a5:ab:0a:5f:95:58:aa:
         be:67:7b:1b:e0:6b:86:26:59:69:bb:7f:25:77:19:1d:4c:22:
         8e:da:64:4b:73:f0:08:75:ed:0a:2e:5d:a8:60:03:1c:0c:7e:
         90:f3:fa:8a:59:aa:dd:60:19:06:25:4e:b4:68:f2:bf:75:6e:
         4d:0c:cd:29:8d:d2:71:2a:d8:85:50:0b:48:fc:28:ab:03:07:
         92:3d:c2:f0:cc:9c:11:aa:39:41:a3:16:36:fa:62:81:c9:ed:
         66:a2:81:ad:1a:8e:6b:a7:ae:f6:b3:9d:d1:6d:b0:4c:4a:09:
         68:9c:ac:60:3c:81:90:f6:0a:14:c0:fb:63:89:2e:f8:70:7a:
         16:3e:fc:09:03:6c:26:4d:75:5a:3f:3d:2e:3c:ad:b6:5d:21:
         47:cc:ea:bc:a6:3a:c3:34:6a:08:73:84:10:e4:f1:0f:cb:59:
         99:16:fc:1f:39:c4:ad:7c:73:66:c4:79:dc:ab:aa:6f:01:62:
         f5:b8:d5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:49:43 2025 by rpki-client