Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          XAJSJRhQMu7boQJkvQfP/SoTRMD7vo4yKkHWfWhUUek=
Subject key identifier:   5B:58:3C:8D:F2:CF:2A:99:E6:F4:E3:1E:5C:22:75:B3:0D:CB:11:77
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       01975C80F2A2F3C41B9A4CD3F164B0099B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1590
Signing time:             Wed 11 Jun 2025 01:00:43 +0000
Manifest this update:     Wed 11 Jun 2025 01:00:43 +0000
Manifest next update:     Thu 12 Jun 2025 01:00:43 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: xvvJ83i9Rxy6jWqF+PmOxkvt4AlGs+JahrK4onYKvnY=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 20:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:80:f2:a2:f3:c4:1b:9a:4c:d3:f1:64:b0:09:9b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jun 11 01:00:43 2025 GMT
            Not After : Jun 12 01:00:43 2025 GMT
        Subject: CN=5b583c8df2cf2a99e6f4e31e5c2275b30dcb1177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:e7:50:84:9a:af:45:aa:83:25:04:81:e1:
                    1e:95:25:35:7e:0e:f4:68:a5:c3:8b:3c:0f:d1:26:
                    dd:36:b3:49:aa:3f:a6:90:c2:78:dd:87:35:07:0f:
                    d7:22:d2:48:66:e3:22:a1:67:8d:6e:e0:6d:e7:96:
                    71:a8:df:98:8e:e1:a2:3f:9a:fb:40:f0:fc:0f:b8:
                    9c:ef:d5:af:6a:6b:f9:b7:bd:0f:1e:26:1a:5d:d6:
                    86:9f:61:3b:dd:cb:67:dd:ae:16:82:07:2f:5e:1f:
                    d4:59:23:6d:78:e8:02:89:95:30:eb:a8:3d:f8:3a:
                    80:5d:34:e2:55:8d:54:67:ff:4e:60:9b:c7:96:6b:
                    0b:06:7d:a6:f0:ec:0d:39:c2:23:ea:ae:de:ed:de:
                    81:bf:3a:cc:5d:f6:55:e3:7f:cf:3a:e4:08:d6:18:
                    47:da:c6:ba:eb:14:8e:c4:b9:4f:53:6a:26:2d:27:
                    5a:22:69:75:d9:81:e9:47:32:40:c1:20:d5:0d:aa:
                    17:cd:53:2f:c8:ea:99:04:bf:d8:cc:11:81:9e:a4:
                    46:95:58:1e:dd:6b:be:7c:48:f8:e2:02:87:ff:1f:
                    f3:32:76:ef:9f:40:43:e9:a8:b8:f6:1f:2e:12:fa:
                    a7:7d:c9:58:eb:1a:d6:fb:fe:a5:8d:77:df:f2:e7:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:58:3C:8D:F2:CF:2A:99:E6:F4:E3:1E:5C:22:75:B3:0D:CB:11:77
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:02:40:6e:cf:d9:d6:a7:89:cc:f6:36:48:34:1a:e3:88:21:
         c7:e2:b1:73:ed:6e:fc:70:19:54:ee:83:75:32:35:ca:a2:93:
         54:d3:6b:ac:8e:18:b6:7f:70:a7:01:39:3b:a4:74:a6:ae:dd:
         f3:5c:19:b2:0c:af:83:50:4d:57:ab:cf:c0:45:e0:9e:f4:41:
         94:0b:a8:8a:e1:63:c6:fe:0e:fb:cf:ed:5a:dd:76:3e:06:5d:
         c1:c3:0b:ac:ee:25:8a:3a:98:14:98:e4:a6:89:57:a3:2a:a4:
         2e:1b:73:63:92:9e:51:f2:08:c8:41:2d:5f:5d:9e:0b:cf:ff:
         be:19:80:56:74:1c:f3:e6:f1:c3:15:f9:c2:35:49:0d:7c:4f:
         dc:fb:f0:6d:18:c2:c5:96:70:96:b1:e2:1d:da:8c:e0:c5:50:
         e6:9d:1b:8c:e1:04:22:a5:7b:69:43:7c:06:00:88:17:8b:41:
         7b:4e:31:58:88:1a:61:cc:68:55:13:5a:7a:14:7e:11:00:d0:
         b1:27:13:60:63:16:12:1c:c4:8b:5d:76:cf:fb:20:95:f8:fe:
         1c:e4:69:a7:d9:09:c4:31:3c:a9:2e:da:2a:fb:89:b2:0a:7e:
         93:6a:95:f3:d5:77:d5:39:24:25:dc:cc:23:5e:14:89:b9:31:
         44:15:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:42:46 2025 by rpki-client