Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File:                     bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier:          vBRYDJ0ylysiCGXDulgk5ZsriDPzNUQjLWab3L/o8GM=
Subject key identifier:   80:61:45:07:C0:23:30:4E:27:BC:60:5B:B1:95:84:DD:76:63:F5:48
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer:       /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial:       019684A39BD78895347A050B2E0A6B136686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number:          0BA8
Signing time:             Wed 30 Apr 2025 03:00:36 +0000
Manifest this update:     Wed 30 Apr 2025 03:00:36 +0000
Manifest next update:     Thu 01 May 2025 03:00:36 +0000
Files and hashes:         1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
                          2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: OHTOGSvCPT9zgD1c5d5J/i2IhgRZtbMLYjlfYdKbYRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:a3:9b:d7:88:95:34:7a:05:0b:2e:0a:6b:13:66:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
        Validity
            Not Before: Apr 30 03:00:36 2025 GMT
            Not After : May  1 03:00:36 2025 GMT
        Subject: CN=80614507c023304e27bc605bb19584dd7663f548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:db:c7:80:6e:eb:cf:e4:51:ce:eb:af:51:29:
                    2d:f6:7b:71:29:61:a3:00:74:c4:0a:b7:91:e0:d9:
                    8b:c3:ee:34:85:5b:6b:0f:fb:75:67:cc:b1:cf:a6:
                    94:87:22:da:02:e3:90:2b:2f:06:81:18:2f:2d:b7:
                    9e:39:2b:46:7f:f0:5a:ad:98:18:e6:61:45:42:14:
                    4d:2d:e4:a2:b1:e8:c9:c3:6a:89:38:f0:31:25:f8:
                    61:a1:a6:91:ff:7f:e6:20:11:42:b4:ca:b8:7d:49:
                    f9:9b:e1:f7:a6:e7:13:05:49:c9:e2:c1:57:56:07:
                    d5:ec:6e:d3:e9:96:62:b4:02:bc:58:09:01:39:ed:
                    87:99:f8:6d:fb:67:ec:6e:4a:3e:5f:d7:ec:8a:23:
                    17:11:76:36:34:0a:52:35:43:28:40:9d:30:30:f4:
                    99:80:ad:59:1b:6d:3a:40:10:69:e9:98:98:8d:c7:
                    41:4b:f1:63:68:af:ec:00:09:66:e0:63:2f:23:44:
                    96:21:50:8c:90:33:df:5d:52:6f:6c:7e:bb:47:38:
                    95:57:92:c2:9d:9a:de:63:ac:18:b4:9a:2c:70:b0:
                    97:a4:5f:32:43:63:e5:fe:6e:a2:6c:74:f8:70:c3:
                    28:05:cb:46:a1:45:23:d8:84:cb:72:1a:45:dc:c0:
                    7c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:61:45:07:C0:23:30:4E:27:BC:60:5B:B1:95:84:DD:76:63:F5:48
            X509v3 Authority Key Identifier:
                keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:a2:f5:d2:b7:02:6f:cd:b9:ea:dc:ca:ab:7c:b2:9d:5d:
         13:a0:f5:7d:bd:c4:31:c2:bd:c6:70:cd:54:fc:94:79:e7:6b:
         c4:1b:32:25:05:f0:16:86:49:dc:c3:b0:6c:db:f4:86:9e:ed:
         f5:16:5f:89:37:f2:08:d0:dd:9c:22:b3:7d:35:f0:05:11:dd:
         e2:7f:52:89:e5:9d:ff:fb:1b:74:9d:b0:c5:a1:c5:75:04:f2:
         84:cc:f2:23:65:86:49:f7:c7:89:1c:34:fa:55:d4:72:56:f9:
         11:9c:33:95:18:94:eb:f0:57:48:29:52:aa:f5:bb:ec:ec:0d:
         12:5e:d0:6b:5d:96:ea:bd:e9:0c:d3:d4:c1:ff:9d:e2:40:01:
         28:71:00:b3:49:99:ed:4d:e0:4d:1f:ce:d5:be:6b:bc:2f:e8:
         08:4c:9c:bd:26:bd:8b:4a:f0:07:31:ee:7c:2a:e1:b7:cf:f6:
         b2:10:5e:07:81:b3:9b:8f:88:c9:1b:a4:76:bd:9b:e9:c8:73:
         67:c7:c8:91:ed:d4:52:9d:7d:63:6c:ab:67:a7:b4:9f:fc:c4:
         c6:f2:55:c0:95:99:56:44:1c:8d:cb:11:91:3e:52:e8:6c:0e:
         5d:0e:55:51:72:b2:1b:83:d4:c6:19:a1:66:b2:4e:93:cf:15:
         da:0b:5b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:44:54 2025 by rpki-client