Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File:                     BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier:          pWgwqsusgPMb3nhdXMoPiKjQF0xJ+I/SNhifMAuILZw=
Subject key identifier:   E0:45:84:E1:9B:72:D6:3F:0C:7B:1D:D6:08:DA:59:FB:7C:D7:D8:3C
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer:       /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial:       01974A7B685A13190E412526A57CD48DF95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number:          08AF
Signing time:             Sat 07 Jun 2025 13:01:31 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:31 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:31 +0000
Files and hashes:         1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: To4rw2zUGslyDba8qWiXN3KnqY8TxiUQnU/ks5hxiO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:68:5a:13:19:0e:41:25:26:a5:7c:d4:8d:f9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
        Validity
            Not Before: Jun  7 13:01:31 2025 GMT
            Not After : Jun  8 13:01:31 2025 GMT
        Subject: CN=e04584e19b72d63f0c7b1dd608da59fb7cd7d83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:f5:3a:10:34:13:cd:26:03:78:52:0b:6e:
                    86:61:a8:73:e2:ea:fa:46:97:70:d9:3c:9b:0b:58:
                    c1:03:d0:40:66:ec:8b:45:e3:39:83:4d:eb:d0:71:
                    15:0c:e6:21:cc:e5:53:d6:d7:ff:07:7c:95:15:86:
                    47:7e:cb:33:e5:6e:21:28:1d:83:b9:df:47:d7:1c:
                    4f:e1:2e:33:a6:98:09:61:75:e4:11:17:e1:b1:3c:
                    5e:26:53:4a:13:0a:8f:74:af:91:32:b3:23:59:3b:
                    43:28:7d:e2:7e:df:0e:62:a0:5d:07:ee:e9:3b:06:
                    dc:0c:3e:99:9e:8c:96:b1:d0:e5:40:ed:33:02:ac:
                    47:0c:50:af:37:83:f2:88:ed:a9:f8:bf:92:dd:53:
                    d5:c9:5a:f3:a8:e6:df:32:ba:de:fe:0e:8c:f1:2d:
                    24:1f:11:b3:d0:e8:45:bc:e1:a8:49:0b:61:01:b1:
                    0f:70:a5:59:bd:a7:86:69:e6:55:6b:80:ea:35:db:
                    fa:2b:18:5d:b2:bd:a5:3e:4d:3e:2d:99:f0:00:e2:
                    e3:ed:20:55:b8:53:a7:d5:01:13:7e:a6:56:bb:b7:
                    a8:ef:2c:18:a6:5f:aa:5d:50:60:cd:a7:5a:09:8c:
                    8e:ae:c5:52:6f:75:8b:60:1a:32:c7:1e:8f:50:46:
                    2a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:45:84:E1:9B:72:D6:3F:0C:7B:1D:D6:08:DA:59:FB:7C:D7:D8:3C
            X509v3 Authority Key Identifier:
                keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b3:f3:a8:f2:72:7d:1d:cf:51:c7:4e:15:2c:1a:78:ae:c5:
         ab:92:a2:30:10:cd:5f:33:17:f6:75:23:af:f3:df:7c:f3:9e:
         53:8a:04:95:4f:fc:05:d1:cf:23:99:14:d0:49:1c:fd:10:7e:
         d6:a4:ce:09:64:0e:d8:1b:94:29:be:9e:0d:56:46:50:af:54:
         2e:a2:b9:84:19:a3:8c:8e:0a:10:76:c2:f8:53:c5:4d:aa:70:
         89:4c:62:52:a0:7e:9e:54:39:49:01:3c:e2:0b:61:9a:29:7d:
         46:fe:3c:15:3c:61:73:a4:02:ef:df:8a:02:1f:97:01:db:bf:
         53:77:b8:c1:57:6f:50:97:f6:45:0d:cf:c2:9f:bf:48:8c:c1:
         04:51:a9:05:68:61:02:c1:dc:fd:5f:dc:3f:43:c7:49:8c:e6:
         d3:14:19:aa:2b:f9:e7:f0:50:4c:84:12:29:d9:ca:ee:72:e8:
         5c:1a:cf:ec:b2:11:15:32:5e:0b:08:d0:c2:52:6c:36:87:3f:
         9f:54:d8:a0:93:3d:ff:2f:8e:18:ca:ab:8d:4d:91:fb:03:10:
         64:16:37:cb:de:ab:a3:d5:6c:d6:02:b3:ab:37:4f:f0:64:e0:
         a1:cc:7c:95:f8:6e:55:10:94:e4:56:5f:e0:89:77:79:7b:dc:
         e1:d6:2b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:40:03 2025 by rpki-client