Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File:                     BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier:          AL7GSmlcICrjmBWq4UGl60lFTEeZiQeoFuBDpL7aKIM=
Subject key identifier:   CE:D6:B2:2E:F8:F9:F6:F2:46:98:92:99:A6:3F:E8:11:44:8D:B0:7D
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer:       /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial:       0196A72F7B2E2644A5362AD04A6B271FF649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number:          1394
Signing time:             Tue 06 May 2025 20:00:28 +0000
Manifest this update:     Tue 06 May 2025 20:00:28 +0000
Manifest next update:     Wed 07 May 2025 20:00:28 +0000
Files and hashes:         1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: /R9zNvQf181cjMOPUnfzrHJfpBoGGORw3HxxgjvpzBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:2f:7b:2e:26:44:a5:36:2a:d0:4a:6b:27:1f:f6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
        Validity
            Not Before: May  6 20:00:28 2025 GMT
            Not After : May  7 20:00:28 2025 GMT
        Subject: CN=ced6b22ef8f9f6f246989299a63fe811448db07d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:1d:33:11:31:1e:b2:78:bd:a6:30:09:61:
                    66:d3:c7:f3:a9:74:4b:03:2d:41:60:0b:24:97:f9:
                    6f:73:bf:f2:48:02:fd:93:fc:1b:2c:21:8f:3b:8a:
                    05:30:7c:cd:41:3e:6b:7a:18:58:19:e0:07:3e:c4:
                    bb:fa:c9:c1:44:87:3f:7c:72:ea:85:e5:55:e4:2d:
                    5f:1c:1b:36:d1:7b:5b:0a:38:02:03:aa:2e:72:a0:
                    42:15:29:25:92:08:ed:29:7c:82:0b:c2:06:6e:02:
                    64:1a:59:62:10:26:c5:bc:b4:ff:e8:ff:d6:e9:26:
                    93:28:e9:7c:30:3e:51:b7:94:f6:65:65:a0:22:3c:
                    b3:1f:75:47:97:ac:d5:b9:d1:dd:5a:1d:ff:86:78:
                    51:6d:fa:7a:24:ce:b9:82:98:f6:ff:c4:67:72:e5:
                    64:d2:dc:da:22:d7:eb:26:20:6f:f8:97:9f:ac:ad:
                    7d:e1:fa:65:a2:ef:aa:f3:b4:c5:da:54:06:37:f5:
                    5d:1f:f4:95:d7:77:29:a6:b0:af:3a:ea:35:ba:4f:
                    fd:f5:a5:64:ee:cc:5b:ef:7d:7c:ff:82:9a:26:99:
                    d8:d1:f3:fc:de:08:2b:bc:62:9e:94:91:8f:f3:94:
                    76:c8:10:54:90:d1:c3:71:0b:8f:cf:d3:cf:8b:e1:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D6:B2:2E:F8:F9:F6:F2:46:98:92:99:A6:3F:E8:11:44:8D:B0:7D
            X509v3 Authority Key Identifier:
                keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:25:06:4f:31:f9:32:bb:9f:b3:0a:1b:8e:62:2c:6b:3b:13:
         20:72:8f:4a:d8:58:f8:61:b8:bb:12:7b:56:65:92:0d:fa:9f:
         6f:e2:e6:99:b5:82:35:b9:1c:bb:a5:2d:d2:d6:4f:1f:0b:be:
         67:54:d5:df:5b:32:ef:86:df:21:36:d8:c7:49:44:2c:64:73:
         37:57:f8:60:e3:ce:54:a1:1c:03:5b:53:03:86:05:f7:ed:b1:
         f6:a7:2f:77:98:a4:79:1d:59:f1:a4:43:ce:27:80:4e:80:e4:
         39:39:f9:35:6b:61:ab:4c:15:b6:d4:10:f2:95:c5:17:4d:6a:
         41:a5:0b:54:04:7a:cc:28:d5:6c:f1:c6:3b:5d:56:4f:b8:1c:
         33:44:4f:f0:61:47:e9:c8:45:a5:c3:53:38:88:53:18:95:7d:
         fe:07:3f:d5:02:4a:b2:ad:fb:bb:03:66:e6:46:94:1f:a3:f1:
         57:eb:75:77:42:f2:f4:30:1f:d5:a4:00:bc:e3:8e:b9:a8:14:
         e9:23:77:93:43:05:dc:fc:94:7f:74:73:3b:d7:13:08:e0:72:
         cb:e1:78:f9:5b:ba:71:c6:5b:6e:94:8d:fc:c2:ea:41:e9:50:
         81:15:95:8e:f1:0d:a7:26:7d:ea:1e:c9:9f:9e:cf:1f:83:91:
         f6:a6:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:12:42 2025 by rpki-client