Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          dTEGQ2lI6TVFjOjd5vjHcW0NYLvA8JgUwSbkvcYtzVo=
Subject key identifier:   FB:59:59:4E:4D:E0:5C:EE:CE:10:B4:98:BC:51:69:CA:23:75:BE:CD
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       01974A0CB1CE328AED3BE88EEF0A840E90DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          078C
Signing time:             Sat 07 Jun 2025 11:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:35 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: fNlChDZc8GqBpm/+l89n2CXx9aEmYjkPSp1weoO5/EU=)
                          2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
                          3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
                          4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:b1:ce:32:8a:ed:3b:e8:8e:ef:0a:84:0e:90:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Jun  7 11:00:35 2025 GMT
            Not After : Jun  8 11:00:35 2025 GMT
        Subject: CN=fb59594e4de05ceece10b498bc5169ca2375becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:09:f1:44:20:d1:53:03:69:17:b5:cc:84:70:
                    66:79:55:44:cb:89:5c:ba:cb:68:dc:6d:ac:9f:7c:
                    f8:88:4e:9f:7b:ff:cf:2d:08:a3:42:c1:0d:bc:e0:
                    a4:a8:41:d3:08:a8:fc:7d:3f:16:00:84:c6:31:be:
                    96:b9:35:f8:cf:c1:16:df:a6:83:05:71:2f:71:b7:
                    48:98:6f:a5:09:0e:66:76:40:14:b4:70:f3:af:a3:
                    f7:6c:30:7c:7e:2e:28:0d:cd:58:e8:1d:d2:12:79:
                    a4:69:62:e8:c7:15:64:36:cb:99:b5:a5:70:45:35:
                    e8:17:9e:a1:a6:c9:cc:87:3e:00:46:92:ab:1e:c4:
                    ea:60:45:56:26:c5:cd:21:b4:b3:7d:42:33:19:25:
                    fd:30:4a:59:38:33:84:b6:31:96:46:ae:75:32:e8:
                    c1:67:1e:5c:e8:43:97:c9:04:c5:57:5c:6f:6f:17:
                    d7:8e:25:22:2b:31:30:e3:03:80:25:d6:65:4e:d5:
                    4c:19:ac:3a:f0:d9:5f:88:f2:b4:9e:16:4b:39:c2:
                    b0:14:74:ed:c1:de:2d:a8:fe:15:9e:ca:f8:3f:70:
                    06:f4:91:85:53:f5:9f:85:09:21:4f:7a:d8:e5:8c:
                    b8:b8:b2:92:c8:b0:ff:c3:e7:e8:58:4f:42:60:23:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:59:59:4E:4D:E0:5C:EE:CE:10:B4:98:BC:51:69:CA:23:75:BE:CD
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:9c:4b:18:10:10:ac:86:54:bd:e3:41:67:41:9e:a3:e3:
         58:8c:ff:10:bf:ae:10:6b:e7:3f:b9:75:63:2f:4d:14:b0:90:
         12:d5:ca:8a:03:57:5e:89:37:97:d5:5b:19:94:73:66:e4:64:
         2d:24:2f:43:80:3a:bb:38:d6:ee:41:e4:2d:72:f2:f5:0f:43:
         17:2b:d0:0f:73:10:3c:5a:17:3c:c8:46:63:a9:87:02:b7:39:
         9d:09:b7:53:19:09:47:ca:89:c3:96:3d:53:69:24:76:da:b7:
         df:97:7f:61:4f:e2:ce:1a:46:a9:ff:23:cf:ff:a9:e1:dd:cc:
         2c:a0:53:c2:5d:5d:d2:6e:10:0a:0f:f9:1d:db:99:e2:4f:29:
         df:82:dc:76:9f:1a:6a:4d:2c:55:a1:21:44:6d:e3:20:79:af:
         77:ad:22:bf:89:31:14:fa:68:f7:a9:35:57:93:23:34:32:b9:
         b5:19:bb:76:0c:36:3d:64:8a:53:d7:8c:e2:8d:96:66:57:15:
         ed:5d:4a:17:6f:c1:39:fd:ae:8e:68:66:19:80:d5:4f:85:4b:
         90:e3:4e:9a:4b:ed:90:6e:19:10:45:8b:df:86:91:0f:af:c5:
         b4:7c:c4:40:a3:63:1f:6e:34:5f:76:d3:89:2f:c3:c5:e7:df:
         6f:88:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:19:13 2025 by rpki-client