Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
File:                     B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json)
Hash identifier:          ElS+cQCzpbJvqQKYpwTNHhJJYE4252t+0NSFb+5CugM=
Subject key identifier:   BE:72:6C:EA:F7:17:42:DB:68:3F:15:BA:A0:F1:F4:0C:C5:B3:BF:96
Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E
Certificate issuer:       /CN=07ead29889dbf62f398f64bc614916673056d45e
Certificate serial:       01967454D88473205D2D04071A6C6242F290
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
Manifest number:          1510
Signing time:             Sat 26 Apr 2025 23:00:39 +0000
Manifest this update:     Sat 26 Apr 2025 23:00:39 +0000
Manifest next update:     Sun 27 Apr 2025 23:00:39 +0000
Files and hashes:         1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: gv6zOA76x6MeOMTMuTxC0IUtDkLKzFYB4b3n8ZQL9VU=)
                          2: YVQzd6PcqiODUsbYmUonrXOMiW8.roa (hash: UXmPQNw2cgJnJveX2kfmMJ+ICGqK1YqsczZUPC4FYUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:54:d8:84:73:20:5d:2d:04:07:1a:6c:62:42:f2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e
        Validity
            Not Before: Apr 26 23:00:39 2025 GMT
            Not After : Apr 27 23:00:39 2025 GMT
        Subject: CN=be726ceaf71742db683f15baa0f1f40cc5b3bf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:55:e8:53:ac:f2:76:fe:4d:e6:ab:82:86:
                    52:ca:66:2a:cf:64:2d:86:b5:d7:3e:99:9a:78:85:
                    5e:7d:a2:84:7f:da:d4:ff:9c:b0:aa:70:78:c3:b5:
                    cd:c6:0e:c4:8b:c7:8e:1c:00:e8:5a:4e:75:77:43:
                    ea:e0:0b:ad:b5:6e:a6:d6:1f:79:46:7b:83:b8:86:
                    3b:09:ad:12:59:86:a5:e7:5c:97:1e:e3:40:f8:00:
                    19:0c:53:ec:7e:4c:3a:f3:cc:55:08:3b:45:28:25:
                    c0:26:62:26:af:ce:db:0f:29:2d:78:b4:a4:45:36:
                    28:77:c8:2d:d6:71:ec:8c:b6:23:02:6e:ba:ae:68:
                    69:7f:42:d3:fb:cc:ff:3f:de:c8:45:91:76:b4:12:
                    07:02:08:7a:77:9c:29:3b:49:3b:d2:b8:ba:7e:81:
                    27:56:3c:01:e7:80:95:34:05:3c:64:52:c2:40:e2:
                    c6:4e:c4:de:f0:c5:11:b5:3b:f9:7c:0a:ba:cc:73:
                    7e:52:0a:ad:d3:63:ff:1a:8a:6f:63:27:43:3b:36:
                    2e:6c:bb:9c:7c:90:09:89:8d:cc:5a:9b:98:eb:46:
                    c1:6a:9c:6e:71:2c:df:42:bc:57:29:79:6e:43:d0:
                    7b:de:24:e4:f9:99:26:56:de:36:45:8c:1f:82:d6:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:72:6C:EA:F7:17:42:DB:68:3F:15:BA:A0:F1:F4:0C:C5:B3:BF:96
            X509v3 Authority Key Identifier:
                keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:a2:a6:a5:9e:63:bf:ba:b8:ed:8d:c0:46:8b:ba:ba:63:
         1f:1d:f3:d6:4a:7e:21:c4:58:bc:7c:b8:49:e2:18:5a:74:30:
         24:94:f9:c5:6c:a1:3d:d6:ee:49:74:d7:52:9c:d2:39:8b:e1:
         cd:11:1d:02:a4:d4:20:2d:2e:69:32:60:dd:d2:56:82:13:71:
         c2:71:4a:23:df:83:8f:bf:16:c5:99:ec:60:59:73:fe:d2:31:
         da:77:33:6d:19:32:3a:3a:4d:d2:bb:dd:e7:74:19:16:24:27:
         45:00:e7:e6:df:a4:e9:bd:48:1a:f0:bb:44:8b:0b:ad:1e:1d:
         10:78:88:3e:6f:92:b2:6f:c0:a6:f8:d6:9c:54:b1:8c:27:78:
         03:2e:3d:7c:22:f2:1f:46:47:36:ac:03:51:66:e7:1c:1b:14:
         ac:a3:15:40:18:f7:e0:fc:5c:e0:34:84:f9:eb:23:36:48:a2:
         3d:42:ee:b7:5e:86:77:10:a3:6f:d5:58:03:e6:ea:7a:55:9b:
         48:95:bc:ad:ff:ee:3b:72:54:06:1b:96:3b:94:33:1d:af:f8:
         5a:69:a7:f3:4c:45:68:62:4a:48:92:9c:44:ac:20:f7:0e:b9:
         67:b0:2b:18:6f:73:01:e7:0d:3f:39:ab:89:c5:0d:53:2b:13:
         78:e6:86:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:35:21 2025 by rpki-client