Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
File:                     Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft (raw, json)
Hash identifier:          zvh2pW9EbYVixKoJpaheyrakKt86X0OS9b9QMuGaMLc=
Subject key identifier:   B0:72:17:C2:9F:5F:DE:4E:F8:76:20:87:50:41:6D:C9:C8:DC:AF:94
Authority key identifier: 01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04
Certificate issuer:       /CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
Certificate serial:       01968F94BDEAD15C3A4ACF1A69ADB3E0AA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
Manifest number:          135C
Signing time:             Fri 02 May 2025 06:00:11 +0000
Manifest this update:     Fri 02 May 2025 06:00:11 +0000
Manifest next update:     Sat 03 May 2025 06:00:11 +0000
Files and hashes:         1: Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl (hash: YEU7lIArdEoIuVX0QjrOqXbRbc5U5udw+365n5VTP1M=)
                          2: vd7D-3mdClrE2pBAFW5I8DbmNHQ.roa (hash: XeWgnqjmy+ysQNojNpVwYywd9xnz6oTic5jOkSU+sTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 06:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8f:94:bd:ea:d1:5c:3a:4a:cf:1a:69:ad:b3:e0:aa:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bfe882d13e803fc194373ea40d8a5a9e69f304
        Validity
            Not Before: May  2 06:00:11 2025 GMT
            Not After : May  3 06:00:11 2025 GMT
        Subject: CN=b07217c29f5fde4ef876208750416dc9c8dcaf94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:cc:84:a6:91:db:ef:b3:39:fc:5e:ea:66:
                    f4:c3:c9:ae:85:78:d5:7e:8c:fd:48:af:29:67:ee:
                    95:9c:a9:41:77:f0:08:ed:8d:6f:ce:24:6a:a1:d4:
                    b4:02:2c:6a:da:1b:07:fb:f3:98:a8:a9:8e:97:c8:
                    32:75:36:eb:66:00:e6:7b:3c:81:de:44:ce:79:a0:
                    3a:15:a5:60:7e:e9:62:57:36:13:4a:d6:ad:fb:8b:
                    95:cd:08:cb:68:df:69:4b:2f:ce:9c:f8:ff:20:c4:
                    52:8d:a3:ab:67:71:1e:9c:be:6d:92:54:dc:bd:7c:
                    2e:b2:ea:f1:94:3c:35:0a:e2:23:29:62:35:bd:c4:
                    a0:05:8f:a3:75:c0:97:7e:47:c9:17:f0:24:17:ad:
                    8f:13:4c:30:53:18:2f:79:73:0a:94:e5:97:e4:dc:
                    c7:9c:ce:98:11:d6:35:6f:50:0f:b4:a7:0b:a1:33:
                    13:f4:12:a6:f3:62:59:42:01:f0:1e:30:e8:c2:50:
                    a9:e3:ac:ed:b2:f6:85:e8:62:d3:9f:62:12:e0:d5:
                    17:fc:4a:ca:90:83:d4:a2:4d:0a:af:65:b9:40:e8:
                    89:e6:44:ff:7f:f2:ad:15:44:b3:84:14:89:e6:cf:
                    0f:0e:4c:c3:07:63:f7:6b:43:f2:f9:85:f6:df:4a:
                    e7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:72:17:C2:9F:5F:DE:4E:F8:76:20:87:50:41:6D:C9:C8:DC:AF:94
            X509v3 Authority Key Identifier:
                keyid:01:BF:E8:82:D1:3E:80:3F:C1:94:37:3E:A4:0D:8A:5A:9E:69:F3:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/66c08a-ee59-4771-a8f2-2a55399a80b0/1/Ab_ogtE-gD_BlDc-pA2KWp5p8wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:76:d3:f2:fe:76:9c:43:03:b3:b9:bd:5f:d3:7e:14:4c:f8:
         88:9c:a9:45:6b:3b:b2:13:55:a9:a8:57:e5:d0:f8:37:29:31:
         3c:24:95:e4:69:1e:f6:fd:2c:6b:aa:05:e9:0d:99:91:6e:77:
         e9:fa:11:ee:ac:23:9d:4b:36:b7:c9:80:2d:fc:f3:c7:5b:59:
         55:bb:ff:8a:08:83:f5:37:1d:b6:c0:1f:13:1d:da:9f:41:c1:
         d9:6c:68:53:17:73:87:cb:65:0d:e1:38:09:e0:de:f6:fe:d3:
         b3:17:2c:28:a3:a4:48:40:73:f4:fa:ac:6f:e4:8c:b7:4c:e5:
         c7:80:c5:ff:65:11:ab:ad:05:bd:ca:96:3a:57:43:10:73:a0:
         c2:ae:1a:e1:32:32:5c:04:16:24:a7:e8:92:6f:9a:03:de:c9:
         9f:a3:e4:4a:db:f4:ca:bb:97:6b:25:1a:7f:61:5c:3b:96:80:
         ee:c6:5a:ba:c4:69:c8:a9:34:f4:bf:6e:c3:d6:d6:82:99:5f:
         35:2e:c0:b2:21:cb:b7:98:50:6d:93:e8:8a:a0:1e:df:3f:63:
         cc:8f:d2:fd:cd:e0:ac:4d:a1:c5:79:7e:43:f3:d2:03:c4:74:
         89:1e:c1:ea:41:64:15:da:92:ec:f5:84:61:27:65:c7:67:a3:
         bb:04:28:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:01:02 2025 by rpki-client