Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
File:                     B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft (raw, json)
Hash identifier:          zxN82lfQmJujFTasX9Bf9LLzbEWlUbLPy6l7aynAiDc=
Subject key identifier:   C9:78:64:0E:F2:01:D9:F9:75:60:FC:24:27:F3:40:4F:C8:02:3A:1D
Authority key identifier: 07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56
Certificate issuer:       /CN=07730862dfb740166df453fb6e9c8508af5d9c56
Certificate serial:       019685ED8AD553801E351A8A204A19BA45C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
Manifest number:          12C9
Signing time:             Wed 30 Apr 2025 09:00:59 +0000
Manifest this update:     Wed 30 Apr 2025 09:00:59 +0000
Manifest next update:     Thu 01 May 2025 09:00:59 +0000
Files and hashes:         1: B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl (hash: Yzan0RzFsvZ1AK/+k+Z85+mnTtlWn+OuL2nkF278TXQ=)
                          2: z09mXVSXSd7UAacEzfV20oFsmYY.roa (hash: 1yRcdJ+SBO6uBICs/lRiYWbJ7McXCDERo9p2CuxM7s0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 09:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:ed:8a:d5:53:80:1e:35:1a:8a:20:4a:19:ba:45:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07730862dfb740166df453fb6e9c8508af5d9c56
        Validity
            Not Before: Apr 30 09:00:59 2025 GMT
            Not After : May  1 09:00:59 2025 GMT
        Subject: CN=c978640ef201d9f97560fc2427f3404fc8023a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:82:db:1d:dc:73:dc:d2:33:83:a0:59:97:
                    06:34:2b:9b:1a:7e:10:3f:f5:7c:51:fe:68:a8:68:
                    88:0b:07:4a:3f:1d:f8:ad:18:15:34:e5:f2:4c:0c:
                    3f:94:10:5e:65:fc:2a:05:cb:0f:f5:1f:0d:a4:b1:
                    17:6e:52:dd:91:d8:cd:56:b8:d9:13:15:9c:14:f3:
                    35:86:bc:f0:6b:4f:52:e6:07:36:a7:b3:31:14:a6:
                    2b:e2:5c:bd:4d:b5:c4:4b:e5:06:70:69:53:d3:1e:
                    10:a1:4e:4e:e4:93:80:fa:58:3a:4c:24:3c:af:bb:
                    9a:ea:dd:07:c4:f5:46:b1:de:12:2d:30:9d:37:74:
                    82:36:1d:20:06:85:f9:e1:ec:03:c3:8a:cb:d4:f5:
                    85:7f:97:3a:1b:e3:4c:c5:28:fb:1c:6c:3b:28:58:
                    64:a3:ba:f1:ff:6e:54:c9:6c:9d:e5:bd:48:04:86:
                    20:e4:97:22:8f:7a:05:0d:24:e0:a6:42:f5:a1:5d:
                    0f:82:9a:52:b1:23:10:8f:10:19:45:a6:a0:52:7e:
                    96:1c:1d:63:92:aa:4b:5b:2a:89:3b:00:90:25:ea:
                    ed:51:a8:2b:aa:03:95:75:69:cb:20:31:00:26:fa:
                    94:72:36:87:a3:75:62:b3:da:b2:eb:3a:f9:8e:2b:
                    7b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:78:64:0E:F2:01:D9:F9:75:60:FC:24:27:F3:40:4F:C8:02:3A:1D
            X509v3 Authority Key Identifier:
                keyid:07:73:08:62:DF:B7:40:16:6D:F4:53:FB:6E:9C:85:08:AF:5D:9C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3MIYt-3QBZt9FP7bpyFCK9dnFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/5c06c3-b44f-4be9-8b2e-5eebe35352e8/1/B3MIYt-3QBZt9FP7bpyFCK9dnFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:17:cb:1f:ae:a5:60:13:5b:6f:18:17:94:02:7f:54:91:
         ab:ab:b0:2d:28:2b:1f:fb:ef:93:e4:d5:4d:39:44:4b:10:af:
         3a:ec:ee:b3:3e:d9:20:2e:61:0c:1c:00:32:5a:ee:e1:af:86:
         d7:2b:59:5b:f1:01:b6:23:0a:a0:ae:c3:6a:3e:0f:33:46:84:
         ff:41:7a:82:e2:54:9a:96:7f:24:31:47:c1:52:bf:d2:7a:8b:
         ea:00:7d:f8:82:40:ad:09:c4:95:2d:e4:21:7f:be:58:c9:02:
         0e:6e:26:ae:60:ef:e1:57:95:11:13:dc:47:38:f1:2b:fa:38:
         53:d5:61:03:a3:cb:4b:a0:cb:37:28:19:44:24:7f:ed:61:ad:
         3f:b9:09:9b:68:be:fb:fa:1b:33:f6:a9:6f:b8:5f:55:a1:be:
         e4:5e:31:04:3b:8d:53:97:40:d9:3a:8f:b7:9d:d1:6b:c9:63:
         a3:a8:02:7f:6e:ed:a9:22:e6:55:c2:89:e4:3a:df:75:86:51:
         e6:23:59:23:56:88:9e:25:57:07:2c:fd:dd:5e:98:a7:dd:0f:
         bf:f0:40:22:39:51:64:4f:a1:30:c8:b8:c9:5a:0c:87:54:2f:
         7c:5a:f3:d2:13:01:36:28:51:86:35:64:5d:6e:50:94:05:7f:
         37:b9:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:35:56 2025 by rpki-client