Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
File:                     Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft (raw, json)
Hash identifier:          UxufBV96WhzMCWchyKDdIApHRom68M8wO+5SYiCacWE=
Subject key identifier:   0F:B9:B9:FC:F3:D2:23:7D:40:42:2E:6B:83:B3:E3:E5:58:92:50:CA
Authority key identifier: 3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A
Certificate issuer:       /CN=3f296fe945a23180753f67f7748e6f299d2e672a
Certificate serial:       0196895BFE841AD696B4D86F6B8F8E2CCDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
Manifest number:          0BFE
Signing time:             Thu 01 May 2025 01:00:29 +0000
Manifest this update:     Thu 01 May 2025 01:00:29 +0000
Manifest next update:     Fri 02 May 2025 01:00:29 +0000
Files and hashes:         1: Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl (hash: mn9DghcnjHRpDGLPu0VCCQy6aaKGAfg6Aky8728Oh/s=)
                          2: T-DcnAmlcMePQv6bt_1HUJGUDFs.roa (hash: jsvsotQxthUCKKbNVxc16O+y+azMWL7s6yd1PzEZeOs=)
                          3: WMvTsPZVS0U2OZBcjuFYwltYNE4.roa (hash: 1A+nnJYORQYAEgiISECGnxCiUXJtXD/JDL4kR4cHlDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5b:fe:84:1a:d6:96:b4:d8:6f:6b:8f:8e:2c:cd:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f296fe945a23180753f67f7748e6f299d2e672a
        Validity
            Not Before: May  1 01:00:29 2025 GMT
            Not After : May  2 01:00:29 2025 GMT
        Subject: CN=0fb9b9fcf3d2237d40422e6b83b3e3e5589250ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:cd:09:c9:fc:51:bb:06:6f:d3:4b:51:cc:
                    aa:67:59:cf:91:49:da:5a:19:5b:af:c4:c0:6b:aa:
                    67:fc:ac:e7:50:6a:b3:09:4f:e0:8a:b7:f3:5a:02:
                    13:e8:d8:00:17:a6:7e:a7:35:2d:0c:2f:6d:ab:5d:
                    b1:e9:f5:85:30:02:41:0e:7f:ce:4b:f0:0d:fc:e0:
                    10:f5:dc:7e:d6:5f:e5:80:66:59:1d:bd:bc:19:58:
                    8a:7a:13:f7:88:0f:d0:07:48:91:9c:ab:07:88:59:
                    9e:b7:44:f3:8c:14:74:cf:71:7e:39:4e:5a:8b:68:
                    8c:8f:9b:b4:4c:11:b1:23:3d:c5:be:3f:59:71:26:
                    63:af:c8:17:ee:af:cd:b1:2c:3d:2a:20:a5:74:9a:
                    6c:9d:13:e2:09:29:f9:b9:00:5a:48:99:62:1a:e0:
                    38:4c:eb:d6:e2:10:1f:ec:67:0a:38:af:9a:5c:a5:
                    9e:c8:a3:96:ea:4a:01:02:b4:e5:0a:17:a9:98:f6:
                    3c:b5:ec:f4:12:c7:3e:20:38:06:b4:7c:fc:89:bb:
                    47:ff:f4:f8:58:5e:8f:bd:d9:3e:f8:c5:eb:9e:fa:
                    c6:17:45:9e:6f:36:d9:f2:3b:24:a3:a7:2d:e8:74:
                    c1:d7:a4:8c:c1:b2:aa:c3:85:09:83:9b:6a:56:6b:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B9:B9:FC:F3:D2:23:7D:40:42:2E:6B:83:B3:E3:E5:58:92:50:CA
            X509v3 Authority Key Identifier:
                keyid:3F:29:6F:E9:45:A2:31:80:75:3F:67:F7:74:8E:6F:29:9D:2E:67:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cbd362-7694-4183-915d-8f4f291b23b6/1/Pylv6UWiMYB1P2f3dI5vKZ0uZyo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:ac:e9:80:59:5c:d0:b4:0c:d6:49:c4:7f:79:44:8f:3e:
         7d:50:42:d9:a8:e0:14:1d:d1:b1:25:85:83:5e:69:8c:e3:a3:
         60:77:61:d8:31:c3:46:30:6e:2f:0e:df:25:9b:af:33:93:8f:
         c3:e8:dc:8d:61:5f:7f:46:cb:6c:4d:de:d9:7b:86:30:6c:7d:
         be:6a:49:95:96:d7:59:07:b8:38:8e:47:f1:24:d9:b0:ea:57:
         37:5d:61:88:c8:74:16:fb:f9:04:83:e3:ee:ea:d5:15:90:db:
         d7:61:b7:55:de:45:1b:19:e6:4b:31:62:2c:85:58:b5:f3:db:
         dc:c5:21:93:4e:bf:61:4b:f9:e0:16:79:0f:79:1f:a7:b5:95:
         3c:d7:84:b7:4e:e2:9a:09:56:b2:11:7b:78:fe:9f:0c:75:26:
         de:0d:09:15:6a:04:92:ad:fc:69:d6:cc:83:eb:f9:26:77:d0:
         f2:f7:35:60:29:c6:01:8f:40:ed:56:6b:aa:72:19:0f:93:81:
         f5:a2:96:8c:29:8a:ae:40:93:1d:f6:d8:97:32:16:61:fa:f5:
         af:55:5d:3e:d2:ef:d3:12:12:fa:ac:f7:ae:49:2a:a9:fe:f0:
         cc:d3:ca:89:f3:0a:f7:b4:0d:98:2d:8f:45:22:1f:3c:7e:0d:
         c6:af:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:55:01 2025 by rpki-client