Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
File:                     B1n2rBc_de2eWF7H2HKlhlzvKDU.mft (raw, json)
Hash identifier:          0jDXx4+3ZZcU0AzgHFFxaERdzZOluR+sSfKGuETN3o0=
Subject key identifier:   04:55:F1:2C:C9:3A:C6:19:63:AF:9D:A4:CF:63:73:58:21:12:91:7E
Authority key identifier: 07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35
Certificate issuer:       /CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
Certificate serial:       01977C0BB64EC059248DC61FF3B55C495808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
Manifest number:          159C
Signing time:             Tue 17 Jun 2025 04:00:31 +0000
Manifest this update:     Tue 17 Jun 2025 04:00:31 +0000
Manifest next update:     Wed 18 Jun 2025 04:00:31 +0000
Files and hashes:         1: B1n2rBc_de2eWF7H2HKlhlzvKDU.crl (hash: nPeoXkWqjK40XYvY9z9kLBoSrsmV7C+ZWrilVICz7MI=)
                          2: RXO07Z0iIdMtU9258ApTW4Px3Zo.roa (hash: J36vRsxAiG9Dz9sEjScgTwQF6Mkf3SG6RhhQrbW+LNs=)
                          3: lH54WcJ4G__eVzqEleg29M5qTHs.roa (hash: /pzgt/Z/mQu+YDPs+XFHauFmf5QI5OT38y+GYqX//ns=)
                          4: oPQCotSBonBTphEnNzZUC8WTKuA.roa (hash: /cJ8DFMUKwkX5N8PRfv6spa6h2JElojL6dR/JttjunM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 21:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:0b:b6:4e:c0:59:24:8d:c6:1f:f3:b5:5c:49:58:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759f6ac173f75ed9e585ec7d872a5865cef2835
        Validity
            Not Before: Jun 17 04:00:31 2025 GMT
            Not After : Jun 18 04:00:31 2025 GMT
        Subject: CN=0455f12cc93ac61963af9da4cf6373582112917e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0c:3c:c9:45:cb:9a:f4:df:26:be:3b:1e:00:
                    eb:63:a9:80:77:c0:50:19:fb:b4:79:15:3e:ca:db:
                    92:3a:3a:2a:f7:45:8e:8c:2b:b6:d6:b9:78:9b:00:
                    9a:ce:c3:52:d2:35:2f:e2:8f:07:37:3b:c4:5c:0f:
                    5c:7a:e1:4d:7c:ce:9d:ba:e8:83:15:6f:ca:00:4a:
                    2d:a9:dc:44:d4:aa:98:9d:37:3e:64:7d:58:06:2d:
                    5f:7f:bc:1a:87:18:df:e1:aa:ec:6d:e1:8f:71:b5:
                    72:96:d3:86:7c:65:1c:6d:2c:0a:8b:29:d9:c1:d1:
                    9b:94:99:fd:5a:f0:a2:b2:69:41:67:4d:29:49:89:
                    8e:c7:54:be:b7:2e:78:35:ba:42:42:76:ed:b0:3a:
                    54:6f:74:b6:01:d0:d3:72:75:ef:57:d4:b7:2d:af:
                    92:f3:d9:df:2a:44:1d:ff:5e:29:c7:bf:23:a8:fa:
                    cc:30:9c:50:8a:8d:7f:56:79:9a:5d:4c:33:3a:47:
                    a5:48:86:3c:f9:46:20:6d:af:82:be:ba:48:97:6b:
                    3f:f4:f9:25:46:da:db:94:a7:e2:67:30:cf:71:b5:
                    fb:55:7a:2c:01:46:a9:5f:c0:2f:40:9f:ad:b1:0e:
                    42:ab:d0:42:f7:9d:ba:1c:c2:d2:97:7c:e8:91:df:
                    2d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:55:F1:2C:C9:3A:C6:19:63:AF:9D:A4:CF:63:73:58:21:12:91:7E
            X509v3 Authority Key Identifier:
                keyid:07:59:F6:AC:17:3F:75:ED:9E:58:5E:C7:D8:72:A5:86:5C:EF:28:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1n2rBc_de2eWF7H2HKlhlzvKDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2cd1c-04b5-44d0-81d5-7be3bda05927/1/B1n2rBc_de2eWF7H2HKlhlzvKDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:18:c9:fc:d4:69:d4:f0:ed:63:d0:9c:17:af:d9:d9:cb:b0:
         61:44:8e:73:e3:bb:e0:5e:08:69:0b:2b:f1:99:65:51:b5:80:
         d0:0c:06:9e:4a:b1:2e:36:98:04:1a:89:03:44:e0:62:ca:c6:
         42:56:17:d5:bf:f1:55:45:b3:51:4a:90:b0:0b:be:a2:a9:b5:
         9b:d4:55:83:25:d1:95:2d:8d:36:50:6e:e8:57:52:7f:5e:54:
         9e:17:f2:ee:e1:70:51:63:b1:85:78:49:08:b1:3a:ca:18:6e:
         62:23:d9:55:94:b9:ac:89:71:71:d3:1c:15:71:b5:4c:08:91:
         de:e5:ca:12:20:e4:17:92:b0:c6:6a:7d:36:4e:a7:0a:87:7a:
         99:a4:ab:fb:19:5e:5e:fd:35:1f:7d:cd:02:56:c1:10:04:24:
         b9:4d:c2:78:d2:cf:71:36:c5:2f:07:3e:e5:3b:a2:bf:a9:ed:
         66:98:97:22:6e:72:a5:b5:68:2a:9a:14:48:9e:15:ef:35:b9:
         05:82:94:18:32:26:4f:e8:f5:07:d6:f0:3f:0c:56:36:98:1a:
         79:20:a0:01:5a:df:3b:2f:c9:b6:5d:e3:30:73:96:bc:27:d6:
         aa:42:b1:0a:77:a5:3c:9e:9e:b9:ce:ed:d5:87:78:e8:30:04:
         ad:ef:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:25:42 2025 by rpki-client