Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
File:                     B-XE5L47jL3g6ulGChEDLWpkq3E.mft (raw, json)
Hash identifier:          yWJpq2WVNJ/Ynn5F0SRTXLlzTRUTYEAG1xzkLmUB55I=
Subject key identifier:   2B:41:0A:EE:50:43:E7:02:01:79:FE:EE:D5:53:E1:E8:3C:7D:2C:1E
Authority key identifier: 07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71
Certificate issuer:       /CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
Certificate serial:       019768BC17E832483F7672A6ECF3347B735B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
Manifest number:          158D
Signing time:             Fri 13 Jun 2025 10:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:46 +0000
Files and hashes:         1: B-XE5L47jL3g6ulGChEDLWpkq3E.crl (hash: ms0NHdQHN3v3OB5VKUzcGI7mdUxD6NRot0lj/BWXEu0=)
                          2: BmreWoAUK7MjBeuAh238zrHfFuQ.roa (hash: Ge0ZmwiJrUfLkRR5MluuijbO2QLfIsVaMJDkiZRgpf8=)
                          3: NwuwAQ8yW-eS7iDHs-oh4c7VA1o.roa (hash: /XTfBMGaAD5mH+2G1jCnIVVFT5MVhjdLW9mt9kHu4/8=)
                          4: xbpv9yBtEMqdW1bjN024rTeFzmc.roa (hash: 4mBSkl6GMo8DLxMPY0ES1tHe3fwfeXxBJUHpXE8PBJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bc:17:e8:32:48:3f:76:72:a6:ec:f3:34:7b:73:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e5c4e4be3b8cbde0eae9460a11032d6a64ab71
        Validity
            Not Before: Jun 13 10:00:46 2025 GMT
            Not After : Jun 14 10:00:46 2025 GMT
        Subject: CN=2b410aee5043e7020179feeed553e1e83c7d2c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e1:3c:9d:1e:9a:07:ec:88:45:17:45:a0:0e:
                    0b:09:f2:11:ce:e5:b0:d0:33:75:1c:8b:39:ae:83:
                    d4:c7:83:cf:24:36:b8:af:9e:a7:b9:a2:51:08:90:
                    08:07:ae:2a:14:74:64:f6:45:aa:40:06:ef:f1:c6:
                    6f:e2:d1:cf:6f:a2:19:af:2e:b9:20:f3:b8:f0:a9:
                    56:95:80:36:e0:a8:1d:d3:4f:78:ab:2d:26:35:03:
                    39:a4:16:46:86:da:b9:c8:e6:45:dc:56:b4:f2:d0:
                    b7:5a:53:b0:aa:a2:ca:e2:5c:43:3a:49:64:ad:51:
                    dc:22:29:79:a8:07:41:61:54:20:d4:3b:52:59:7e:
                    8e:92:06:d8:a8:e6:af:5c:03:78:53:9d:4b:64:e5:
                    16:5f:07:ea:49:7e:dd:a8:69:87:35:a3:6c:5b:29:
                    d0:95:b2:d5:d8:db:db:e7:83:a2:7f:4b:7e:e3:3c:
                    d0:9a:43:2c:17:74:02:01:01:68:6c:fd:2f:8a:6f:
                    12:8d:15:3e:82:48:95:e7:4a:35:00:8a:07:79:5e:
                    ed:e3:ef:c5:55:0c:dd:c0:5c:ae:de:87:0c:80:12:
                    27:95:a2:35:44:49:80:56:96:cc:7e:8a:bf:c4:b4:
                    13:2c:0d:83:ab:98:1c:2f:d8:45:40:05:34:cd:42:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:41:0A:EE:50:43:E7:02:01:79:FE:EE:D5:53:E1:E8:3C:7D:2C:1E
            X509v3 Authority Key Identifier:
                keyid:07:E5:C4:E4:BE:3B:8C:BD:E0:EA:E9:46:0A:11:03:2D:6A:64:AB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-XE5L47jL3g6ulGChEDLWpkq3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f6b173-912c-4151-bac5-4c8883327a2a/1/B-XE5L47jL3g6ulGChEDLWpkq3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0e:41:e6:5b:91:9f:55:dc:90:84:00:a9:81:0c:eb:c6:ca:
         d0:a9:19:c9:71:ec:b1:69:44:68:6d:9e:27:94:32:57:9f:bc:
         f9:2a:04:66:69:75:cd:1f:4f:e4:3b:b4:c1:30:53:3d:90:59:
         89:95:23:e7:c2:52:49:22:68:c7:7f:b6:fb:45:45:5c:ae:50:
         88:ae:9c:2b:95:e7:d6:e5:68:b9:1b:cd:e0:0b:39:d5:5f:9d:
         a6:b1:d6:cc:5b:f0:51:0b:60:30:62:74:1c:18:b1:77:ad:2c:
         3b:7f:93:ee:3e:49:24:c4:7c:21:36:8d:3e:f0:9b:5c:a5:31:
         0b:79:8c:4a:25:ea:6d:83:22:5d:19:f4:eb:f2:6d:43:ce:c2:
         d5:0a:8e:42:35:78:46:98:03:3f:e3:22:2c:7a:a9:55:4d:ff:
         56:c5:fc:0d:04:52:9c:ca:18:0a:e2:2e:fd:6b:2c:f0:15:28:
         e2:f4:88:80:65:18:0d:04:65:be:d5:ac:2f:92:55:cc:36:5e:
         68:e4:9e:f3:b8:e8:f0:60:78:dd:b8:98:24:6f:c3:09:ee:a4:
         16:d9:4b:23:40:0a:a2:ca:3f:ab:d4:a1:52:d8:48:3e:e4:96:
         a5:ab:1c:b0:33:f7:9b:8e:47:db:e8:88:50:49:e8:91:1d:1e:
         d8:76:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:51 2025 by rpki-client