Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
File:                     BOIiiGeO__Ff6nne8kxgZ84kqic.mft (raw, json)
Hash identifier:          iVqhOVPBnfuV672zyLUILAp0LIWRVIcYcOOkEBVawRU=
Subject key identifier:   76:C9:DE:25:14:5F:41:36:0E:1A:EF:F1:43:94:44:D8:2F:16:2B:39
Authority key identifier: 04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27
Certificate issuer:       /CN=04e22288678efff15fea79def24c6067ce24aa27
Certificate serial:       01974A7AFF5AEE17F9E75C404E5CC633DADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
Manifest number:          1579
Signing time:             Sat 07 Jun 2025 13:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:04 +0000
Files and hashes:         1: BOIiiGeO__Ff6nne8kxgZ84kqic.crl (hash: DxFY6OY+8YiIBWYyuo8Rt24yLyzD2cJThj6LMY3l29U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ff:5a:ee:17:f9:e7:5c:40:4e:5c:c6:33:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e22288678efff15fea79def24c6067ce24aa27
        Validity
            Not Before: Jun  7 13:01:04 2025 GMT
            Not After : Jun  8 13:01:04 2025 GMT
        Subject: CN=76c9de25145f41360e1aeff1439444d82f162b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:33:41:11:90:97:8e:6d:ad:8e:25:30:d0:bc:
                    b3:34:d5:25:80:f7:08:bc:c1:91:fe:76:ba:98:cc:
                    3c:3c:67:f8:79:f2:65:96:37:f1:3a:ee:6a:bf:cc:
                    18:6f:67:c8:ee:a5:be:75:b8:b6:0e:55:ab:bb:87:
                    83:6b:e8:28:6c:c1:6f:12:93:55:7b:20:ac:00:41:
                    81:65:de:00:96:d6:f1:fc:80:24:20:80:38:cc:a1:
                    92:84:5d:c9:f1:dc:80:ff:a7:e8:a5:4e:d9:cd:53:
                    2f:1d:55:7e:3d:bf:6c:2a:19:18:45:21:46:ce:02:
                    5e:d3:29:fc:3e:11:8f:6f:6e:56:6e:cd:b9:ea:10:
                    c6:e3:be:ba:7a:2e:9b:b3:84:0a:6b:75:22:90:3b:
                    37:b7:ea:b0:78:53:9d:c2:e2:01:e8:45:f0:f9:43:
                    b8:d7:75:ad:59:7a:5c:ca:a1:2c:50:ba:bb:7c:de:
                    5c:51:84:70:74:cf:6d:4d:0e:01:d2:a5:f2:b2:66:
                    f6:9f:d5:ed:e1:35:3c:ee:62:ed:00:68:8d:5c:f9:
                    79:f2:18:23:46:60:50:21:06:9e:e4:6b:b6:e5:d5:
                    b7:a2:9d:99:88:74:aa:ca:c7:ee:38:b4:1c:92:2b:
                    7f:9f:ef:25:c1:f7:c5:7c:cd:51:92:79:ef:d8:a9:
                    75:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C9:DE:25:14:5F:41:36:0E:1A:EF:F1:43:94:44:D8:2F:16:2B:39
            X509v3 Authority Key Identifier:
                keyid:04:E2:22:88:67:8E:FF:F1:5F:EA:79:DE:F2:4C:60:67:CE:24:AA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOIiiGeO__Ff6nne8kxgZ84kqic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/54f8f6-b900-4405-927c-89c9892c14f0/1/BOIiiGeO__Ff6nne8kxgZ84kqic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4c:6d:a0:d6:5a:58:f8:c2:e2:a8:f1:fb:ef:b3:33:65:b9:
         78:b9:eb:0f:34:80:4d:34:39:9c:9e:20:5a:40:07:bb:35:4d:
         2e:ea:64:1a:10:2a:df:5c:f6:82:de:3d:a7:09:a7:15:34:5b:
         1a:18:2e:6e:4c:e6:e9:e8:43:0d:bd:66:81:de:c0:ca:1c:4c:
         04:24:f7:de:4d:43:ea:bb:51:9f:ed:94:83:10:25:cc:cc:cc:
         d0:3f:6f:08:64:8c:93:e5:d6:2c:cd:19:7a:7f:0a:91:61:51:
         c5:be:8f:12:b0:7b:0e:22:a1:a8:55:3b:c3:76:8c:a4:b9:be:
         a4:ba:9a:a4:63:e0:65:79:a8:af:b2:16:07:3a:b2:25:7b:08:
         d2:e9:46:cd:63:5c:68:03:89:99:bd:95:14:21:6d:ca:55:53:
         8f:df:5a:7a:31:40:06:a3:04:3d:72:18:64:cd:7c:7b:60:2f:
         5e:4b:7a:53:8e:52:f7:1d:73:c0:34:70:72:34:f7:45:74:e6:
         20:b0:f8:84:8d:42:3d:2b:76:07:93:e2:92:c6:58:b8:6e:c0:
         ad:10:e4:ff:e4:cc:86:c0:04:42:40:70:44:2d:fe:43:04:0a:
         3e:75:b4:9c:85:7e:66:db:e5:8a:b8:88:89:a7:e6:0a:a4:57:
         2b:eb:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:36:28 2025 by rpki-client