Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File:                     bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier:          dshpmJGH8U77N0LFYtl12t//ZuAs/7RR6l67Le40KtQ=
Subject key identifier:   8C:BC:34:BD:7A:B3:10:E1:A0:7F:B3:1F:B3:0C:09:35:43:4F:E3:C4
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer:       /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial:       019677C3DFB55C6C3373E7957F6585114240
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number:          0854
Signing time:             Sun 27 Apr 2025 15:00:47 +0000
Manifest this update:     Sun 27 Apr 2025 15:00:47 +0000
Manifest next update:     Mon 28 Apr 2025 15:00:47 +0000
Files and hashes:         1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: fZsDo+Rjl9A7egNU+BVdOkntlMU4kbYZ9c2BFgG2fxc=)
                          2: xfilALq9xVm7LJX_uaRRDqm1ZX0.roa (hash: o3xsXXS0G1bR6xk5CmXK470ksv+YeZHYJ06DDMgu6J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:c3:df:b5:5c:6c:33:73:e7:95:7f:65:85:11:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
        Validity
            Not Before: Apr 27 15:00:47 2025 GMT
            Not After : Apr 28 15:00:47 2025 GMT
        Subject: CN=8cbc34bd7ab310e1a07fb31fb30c0935434fe3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:d3:80:3b:48:d2:62:84:cf:e5:95:a2:54:
                    8a:cf:28:62:d2:93:e5:19:84:28:e8:d7:0a:8f:0b:
                    ca:50:ed:56:91:8d:7f:24:3a:f7:03:2f:6a:70:78:
                    74:5c:de:c6:ea:b7:b2:00:46:40:83:16:97:65:fa:
                    c4:a5:44:eb:35:e1:f7:ca:63:48:77:e6:f4:2a:02:
                    43:3a:ee:6a:91:bb:08:30:8f:4d:67:5b:a3:c6:01:
                    ac:1a:05:75:7c:6d:86:13:df:2b:45:36:1b:69:40:
                    c3:5a:b5:42:62:6e:f7:4e:eb:88:96:5a:68:c8:87:
                    80:8d:d7:69:7f:2a:8e:82:29:44:8b:05:55:ce:33:
                    a5:4f:5d:ec:6e:87:8a:cd:f3:e8:34:77:9e:34:9b:
                    d3:06:bb:b3:da:aa:21:58:f5:39:a9:c0:12:80:7c:
                    df:da:bb:5e:99:c6:59:bd:de:88:6c:7a:19:bb:2c:
                    d5:f6:c3:98:75:7d:e6:97:09:6e:e1:d0:ed:ef:d2:
                    a6:a0:f1:29:89:1a:1d:fa:b4:dd:1d:85:59:84:9b:
                    34:d3:2e:cb:8b:5f:6a:41:36:77:6b:99:cf:06:10:
                    5d:d3:01:89:55:50:da:e7:1b:6c:81:e3:a8:1e:29:
                    fe:ff:a0:13:9b:34:fe:40:e9:b8:a4:48:a4:c7:41:
                    32:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BC:34:BD:7A:B3:10:E1:A0:7F:B3:1F:B3:0C:09:35:43:4F:E3:C4
            X509v3 Authority Key Identifier:
                keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b0:51:85:e5:82:c6:98:63:4e:03:82:52:97:c0:92:6a:4b:
         35:90:8d:91:61:f7:54:9a:e1:45:94:75:b6:c5:8e:a7:a2:41:
         49:90:3d:46:78:c0:d0:18:ab:8b:9d:e2:a3:6c:94:1a:1c:57:
         fe:a5:2d:b8:2b:58:eb:b7:fc:60:fd:78:a6:f2:07:6c:0f:5a:
         17:4a:78:62:2b:ea:1d:9c:51:c2:a1:6f:d6:b8:99:48:5c:8c:
         a9:03:aa:16:2f:cb:7f:68:a8:20:45:bb:00:54:d2:3c:a1:e2:
         ce:dc:a4:bb:19:52:84:e6:68:53:1e:86:7e:a1:9e:78:b0:8f:
         6e:0a:eb:b2:6a:28:69:e4:41:bc:b3:d3:43:dc:d4:5f:19:e4:
         e8:87:c9:e4:dd:d1:c5:74:4f:eb:33:b1:c9:1d:3c:9e:0e:b1:
         bb:4b:12:b4:b2:8a:eb:fa:05:c2:7f:34:b8:2e:f5:86:b4:71:
         a1:e6:e3:06:10:70:72:b8:1c:16:55:62:da:0b:5d:8e:4a:cc:
         c8:fe:74:69:39:58:3f:e4:7a:c6:83:76:ac:f0:87:33:83:b9:
         23:a1:30:28:4b:79:95:de:b1:72:2d:e2:5f:2b:2e:6b:86:32:
         7b:4c:19:86:ac:57:94:2b:1b:08:51:58:bf:36:0d:c6:91:82:
         62:55:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:36 2025 by rpki-client