Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          d7h7l5GSVDDIDCdY07Jk8rfbojhBJj3Y8UPWxCFqCQ8=
Subject key identifier:   53:EA:83:58:13:51:15:E2:52:FC:6B:71:FC:C5:98:AE:DC:4A:33:A4
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       019921B102B90C8F6DA26D353001626113F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          166D
Signing time:             Sun 07 Sep 2025 01:01:12 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:12 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:12 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: AMECnsdzhd6FTrsYtGZfRRC1EspmwN0dJiad6V1p+8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:02:b9:0c:8f:6d:a2:6d:35:30:01:62:61:13:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: Sep  7 01:01:12 2025 GMT
            Not After : Sep  8 01:01:12 2025 GMT
        Subject: CN=53ea8358135115e252fc6b71fcc598aedc4a33a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:e8:3c:2c:1a:41:8c:c2:70:5f:1e:6e:c6:
                    5a:59:2a:c7:be:6b:81:b2:1f:63:2a:5c:cd:92:47:
                    3f:68:ce:6f:33:d8:d5:9d:aa:46:8a:5e:98:52:ec:
                    90:06:03:72:e8:23:17:52:7b:8e:1b:04:aa:92:1c:
                    2e:ed:56:e5:7c:f1:ea:2f:be:d6:85:7a:50:f2:f0:
                    43:ea:94:9c:8c:8d:db:48:67:58:fd:6a:ab:c0:be:
                    f1:0c:f2:11:29:3a:ae:51:34:8b:d6:9a:2b:ec:8a:
                    1b:c2:41:82:aa:33:47:ad:01:8e:5d:29:93:6e:55:
                    ed:b7:e3:f8:d5:b4:3e:a3:2d:a5:2b:ae:1c:bd:12:
                    2c:0c:a1:ee:61:f6:5f:64:17:2b:01:bc:fb:b6:02:
                    1e:ba:ed:4b:50:f2:79:e7:cf:29:89:b4:af:47:e9:
                    f1:05:7a:ee:27:3f:48:c3:36:67:e0:46:0d:d9:58:
                    86:77:6a:bf:8a:5d:8b:ab:79:84:67:69:1c:a8:65:
                    f7:84:e7:2d:0f:a8:02:01:79:fd:3a:53:05:62:5f:
                    19:b5:e1:b6:c2:ae:41:88:b4:86:d7:d3:2c:bc:cd:
                    65:3e:ef:6b:56:cd:f5:57:dc:8f:9b:0b:7d:6a:a8:
                    57:19:40:55:59:c9:f6:ef:fa:e7:12:c0:09:c2:dd:
                    1c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:EA:83:58:13:51:15:E2:52:FC:6B:71:FC:C5:98:AE:DC:4A:33:A4
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:26:f8:99:d6:d9:06:2f:8d:ec:2c:2e:9d:f6:b8:fd:1c:dd:
         e9:80:1e:13:68:2f:97:e5:d6:8e:2c:43:9b:bd:51:18:71:bc:
         98:b7:ce:7c:6b:62:de:dd:76:23:20:58:22:5b:14:2c:c5:09:
         fa:57:ca:2c:b3:8d:a9:93:9b:94:27:9c:3b:b9:d0:48:1a:3c:
         04:58:39:4b:17:e9:5d:89:08:ae:e3:40:6b:9b:ad:12:ca:e5:
         17:1c:9c:3d:e6:75:74:a5:b4:ce:3c:c6:f8:6c:8f:a1:08:a0:
         08:76:e1:03:ba:86:de:bd:cd:d9:e5:20:95:fd:be:3e:2e:d2:
         c3:a4:e5:7c:93:65:b0:85:d7:8e:24:3d:e7:d4:22:20:4f:7a:
         f3:ae:d3:43:f4:18:94:68:2f:67:01:11:69:f4:51:97:69:8c:
         47:45:6a:9a:ad:88:10:96:7a:e7:d5:95:5b:fc:f7:8e:f1:42:
         17:b3:b6:7a:fd:8c:39:83:37:96:3c:d0:c9:f1:10:71:10:c5:
         3d:eb:43:c3:2b:68:40:82:92:e4:c7:ac:72:4c:1c:ab:f9:db:
         59:34:04:34:5b:34:ba:a4:81:d3:10:1b:3c:83:5f:2a:7d:a5:
         6d:26:3c:3f:07:21:1e:9c:01:3b:76:7b:a1:1a:7f:70:2e:29:
         e0:b8:3a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:00:36 2025 by rpki-client