Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          w7V5igETP2aX/ojI0c7pGrdKBULBhmDQlv3CWknhR3Y=
Subject key identifier:   7D:34:60:F3:57:2E:B4:2B:12:D9:E4:5C:17:F8:89:46:F6:35:01:44
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019758A42A072A698C17FE022EAF43895EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          158E
Signing time:             Tue 10 Jun 2025 07:00:43 +0000
Manifest this update:     Tue 10 Jun 2025 07:00:43 +0000
Manifest next update:     Wed 11 Jun 2025 07:00:43 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: l5a1nCDjGBAQ1mTMiaSXikF9KYn+GA7esTlULGbY5/Q=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:58:a4:2a:07:2a:69:8c:17:fe:02:2e:af:43:89:5e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jun 10 07:00:43 2025 GMT
            Not After : Jun 11 07:00:43 2025 GMT
        Subject: CN=7d3460f3572eb42b12d9e45c17f88946f6350144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f6:f8:d8:2a:8e:3d:42:5e:5c:97:b4:1a:40:
                    ca:b7:2d:11:65:e5:1e:49:1a:5b:36:f7:e6:5f:34:
                    9b:3a:a0:7d:e9:e5:4d:7d:0c:3b:38:a3:00:07:cd:
                    a0:11:28:8b:cd:7f:38:c2:c9:12:d0:0b:56:38:23:
                    a5:a8:05:f9:19:2c:84:9c:05:c4:b9:ae:dd:67:11:
                    1c:21:12:69:85:25:71:73:e1:77:e0:51:e0:96:4d:
                    3b:c4:16:97:a0:72:9b:32:9f:c1:1e:cf:10:77:c5:
                    bc:ab:a3:72:f8:16:5e:03:d7:4c:c8:8b:b6:46:c8:
                    3f:07:b2:7c:f9:68:38:8f:0c:7d:1e:55:1b:b5:50:
                    69:bd:34:a2:cc:18:ff:f8:5a:43:4b:82:22:3e:d8:
                    5a:40:6e:6a:f5:5e:0f:78:0e:89:de:ab:17:c6:d9:
                    94:60:1b:77:e5:40:76:c0:e0:68:c6:dc:42:c2:7d:
                    9e:30:91:9e:20:36:de:5e:f4:ab:15:43:3e:dd:8b:
                    ed:77:42:2b:be:4e:c0:eb:e3:21:1c:c5:dd:19:0a:
                    23:f6:8e:72:2d:4a:bc:72:5e:c4:03:04:5f:9f:22:
                    99:ce:bf:56:86:c8:88:84:9e:ed:11:78:81:73:64:
                    d3:1a:37:af:55:00:75:a3:af:ce:b7:b0:d7:db:b0:
                    2d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:60:F3:57:2E:B4:2B:12:D9:E4:5C:17:F8:89:46:F6:35:01:44
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0c:99:d9:1b:0c:56:cc:87:52:dd:9e:e8:3a:21:c7:e1:20:
         9e:7f:f3:66:3e:88:c8:c1:1a:c8:0b:09:ce:1d:43:e6:8a:f9:
         fc:5a:79:33:4b:a2:fc:2a:82:e0:df:29:ff:25:38:ad:a2:90:
         21:80:fa:4e:aa:e3:fe:d4:00:7f:11:b8:c8:3b:23:cd:48:52:
         1e:ac:b4:b0:b9:e5:b5:2c:e6:ad:d7:b9:04:fa:28:34:2d:89:
         d7:2e:c2:9c:e4:4d:18:ba:e7:61:af:53:bb:b4:e5:b3:a6:d6:
         e5:d6:eb:85:c5:4a:0f:31:7b:0c:26:c5:de:2e:72:b6:7f:bf:
         a1:18:71:39:51:0f:95:18:f1:f6:93:85:35:30:d3:8d:cf:a8:
         91:14:37:a7:1b:38:ca:f4:d9:c7:09:e0:5f:da:26:a4:9b:5d:
         c4:f9:59:d2:c3:f0:cb:87:f0:45:c8:cd:b8:52:06:5d:ca:ba:
         4d:d6:ad:29:be:2d:33:2c:ef:50:94:f2:59:41:5d:89:58:3c:
         da:7e:46:d0:b0:cd:a0:93:c1:bb:00:51:2f:5b:07:ba:50:aa:
         a4:79:e2:8c:90:d2:d2:35:c9:dc:7e:5f:51:dd:e7:b5:c8:96:
         ad:bf:48:ca:c0:83:2e:02:0c:bf:ba:6c:43:ea:0f:da:c8:a0:
         a3:37:45:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:55:27 2025 by rpki-client