Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
File:                     B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft (raw, json)
Hash identifier:          VM0a7xrTjfywtGfMnNK88XE54NTYgv6nImzKC6oom0Y=
Subject key identifier:   9F:34:73:7D:0B:05:36:AD:16:A2:F4:A8:A8:E0:30:9D:36:B8:5F:59
Authority key identifier: 07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9
Certificate issuer:       /CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
Certificate serial:       0196888028E65D794C95E495989C12FBE2B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
Manifest number:          0461
Signing time:             Wed 30 Apr 2025 21:00:22 +0000
Manifest this update:     Wed 30 Apr 2025 21:00:22 +0000
Manifest next update:     Thu 01 May 2025 21:00:22 +0000
Files and hashes:         1: B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl (hash: hUxgOrpDdXcehaJYg2rSN2GUI53gR6jw3865dtRrZCY=)
                          2: ul-xO-5mZZApWQIPteBxrXhy3Gg.roa (hash: Xgcb4gBJ+LBlJQi0BqbRaMDSR7lxsJ55H3PWqex5WBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:88:80:28:e6:5d:79:4c:95:e4:95:98:9c:12:fb:e2:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07526589c5194f1e5fbb9fdc51667daf0562d6d9
        Validity
            Not Before: Apr 30 21:00:22 2025 GMT
            Not After : May  1 21:00:22 2025 GMT
        Subject: CN=9f34737d0b0536ad16a2f4a8a8e0309d36b85f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:3e:88:3d:81:21:db:b6:c8:75:fb:5c:15:
                    7f:7f:bf:0f:20:18:f1:ed:2f:8c:69:85:9b:43:d0:
                    04:10:89:0b:4f:40:90:db:e1:d8:71:18:23:36:2b:
                    55:46:a7:d4:82:17:78:dd:ae:b0:f6:bc:43:ce:c1:
                    07:1c:46:5e:db:76:55:e5:f3:55:cd:83:fe:d2:0c:
                    91:9f:fc:bb:c4:36:56:48:00:f3:de:0d:0d:06:67:
                    98:bf:67:c3:11:11:f1:da:8d:9f:9a:f8:cb:16:b6:
                    ec:0e:cc:2f:19:a1:0f:31:21:cd:ab:26:63:e2:4d:
                    03:1e:ae:0a:e6:f5:bb:ab:aa:5a:d2:2b:b8:96:a9:
                    20:b2:74:2d:49:a3:09:02:19:f4:ba:04:e4:43:c1:
                    3c:3e:d6:0e:2b:48:0f:6e:71:89:9c:54:e4:f2:46:
                    a9:15:10:d7:54:b6:62:9d:5a:f4:b7:51:3b:a2:1b:
                    a4:b3:b7:97:55:69:75:09:10:09:10:b1:b7:2b:fb:
                    ce:17:eb:b8:8e:8f:f8:18:85:3a:8c:2b:a4:1b:a9:
                    b6:46:6e:46:0f:d7:f8:dd:cb:1a:6f:95:22:4e:92:
                    96:99:b5:df:15:d1:f9:75:ec:cc:0c:80:66:89:46:
                    3b:b3:58:54:e6:8b:5d:af:b8:8a:cc:08:bc:a2:69:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:34:73:7D:0B:05:36:AD:16:A2:F4:A8:A8:E0:30:9D:36:B8:5F:59
            X509v3 Authority Key Identifier:
                keyid:07:52:65:89:C5:19:4F:1E:5F:BB:9F:DC:51:66:7D:AF:05:62:D6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1JlicUZTx5fu5_cUWZ9rwVi1tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a5a774-8553-4414-ac3c-dd170c1fd33c/1/B1JlicUZTx5fu5_cUWZ9rwVi1tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8d:e3:a3:47:79:82:5a:08:ee:31:ed:50:36:42:16:3d:f8:
         7e:31:30:59:40:aa:81:39:fc:65:85:17:b4:e1:91:0c:d3:3a:
         b7:ad:c1:22:c3:4a:47:c9:b5:ee:ae:0e:77:a9:e0:63:9f:83:
         e1:8b:0c:e5:21:c3:37:12:70:5c:3c:59:28:e2:37:46:2f:32:
         c6:26:d2:f3:68:94:81:cf:ea:59:73:c9:e4:36:99:dc:a6:fe:
         bf:98:59:6f:6c:5d:3a:0e:ac:2a:a9:30:1f:60:d8:66:27:3b:
         01:d4:09:24:25:b9:49:91:df:90:db:54:af:ac:b1:7d:3a:0a:
         4a:58:a2:cd:3d:b6:34:74:b8:f2:82:c6:99:7c:55:c0:4a:fa:
         ac:a5:4b:3a:86:c0:ed:ba:21:58:3a:6f:68:af:72:75:d3:98:
         ee:72:a2:76:75:d6:44:0d:54:37:3d:20:c6:e6:0a:54:fa:ce:
         b6:ae:29:7a:2c:56:07:d3:70:97:da:04:37:28:24:4a:11:a7:
         f2:a7:1e:67:c7:e3:28:d3:06:fd:16:dd:36:46:cc:93:36:26:
         63:8d:0e:ad:5d:f7:48:a6:4d:34:55:81:df:30:fb:2a:0e:ff:
         64:95:72:f8:5c:ff:48:13:bc:02:77:75:f4:76:10:44:1f:b4:
         c1:02:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:45:28 2025 by rpki-client