Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          PYYy3/MIZiyr80CclwLkbDdIOys9p24q0VELFIjp5ek=
Subject key identifier:   AC:3F:82:B2:88:B5:AB:37:63:6E:10:04:E8:C1:3D:24:DF:22:D6:20
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       0197507CBEA4A312E0BF5C301A319FC3AD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          149E
Signing time:             Sun 08 Jun 2025 17:00:41 +0000
Manifest this update:     Sun 08 Jun 2025 17:00:41 +0000
Manifest next update:     Mon 09 Jun 2025 17:00:41 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: 15vF5Y33fjjRYFDSdn+1jI5TDHe5NYT2m/5vn0JhGi8=)
                          2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:7c:be:a4:a3:12:e0:bf:5c:30:1a:31:9f:c3:ad:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Jun  8 17:00:41 2025 GMT
            Not After : Jun  9 17:00:41 2025 GMT
        Subject: CN=ac3f82b288b5ab37636e1004e8c13d24df22d620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:49:34:bc:97:95:50:e3:1f:8e:a7:2e:c0:
                    68:a1:84:91:30:f9:d1:5b:ea:17:89:ee:77:54:e9:
                    2b:96:87:b2:d4:f5:44:6b:a4:85:38:f2:c9:7a:f1:
                    dd:f3:32:81:4c:8d:a9:e2:17:a2:37:dd:ce:3e:1d:
                    f8:bb:73:b1:0c:44:ff:6d:41:15:0d:06:9a:12:ff:
                    dd:c2:51:9f:bf:2d:2b:56:73:1d:fc:5e:e9:6e:92:
                    10:b8:d6:b0:c6:15:af:c5:e4:fb:39:d4:c9:eb:e2:
                    88:17:c9:3f:8d:44:31:2f:4f:f1:6d:cf:b5:4e:b5:
                    d5:0a:d2:34:40:a8:05:81:5c:df:b1:10:97:28:1d:
                    8e:f4:0e:e7:29:3e:20:95:1b:49:1a:cb:d8:d9:dc:
                    61:a4:fe:25:af:8a:76:03:f2:b9:70:cd:f3:dd:cb:
                    1c:29:a3:b8:54:44:15:19:38:ee:aa:d9:03:ec:df:
                    d5:84:38:d2:fd:2f:ea:68:50:c3:52:95:1c:f0:42:
                    c8:90:7d:67:ce:f1:b1:7c:3a:b7:86:19:77:e3:0d:
                    88:7f:25:fc:5c:df:9d:44:cd:81:f1:8c:e2:4e:b5:
                    a6:ea:20:24:e8:e5:de:b2:31:64:ee:f5:e5:ff:f4:
                    56:07:52:5e:11:0d:54:a9:1f:74:e7:bf:54:67:10:
                    52:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3F:82:B2:88:B5:AB:37:63:6E:10:04:E8:C1:3D:24:DF:22:D6:20
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:71:5e:f4:e7:d6:bf:5d:4e:b0:fe:97:39:eb:b3:82:1b:
         9b:c9:4e:f9:59:9a:1f:f8:30:2d:97:04:65:c1:fa:90:9e:b1:
         9d:c4:46:9a:00:b4:95:1b:e6:7a:71:11:5d:4b:63:bb:68:fe:
         97:d5:28:8b:52:58:9a:e4:ab:34:88:4b:24:62:3f:d6:8c:e4:
         6c:e4:06:23:c4:f8:6e:b5:e3:27:8c:e8:81:b8:3b:05:a3:50:
         75:ca:1b:8f:ef:a8:ae:54:79:dc:73:12:48:04:43:99:65:95:
         57:94:b5:4e:64:97:ba:b7:00:2e:0e:f9:67:8b:83:c1:b6:fb:
         e0:52:77:26:4a:d6:0e:05:84:5a:22:46:50:01:79:dc:32:2a:
         3c:5e:32:d1:57:0a:1d:19:06:42:32:80:89:a6:da:e8:25:3f:
         57:8a:ac:d5:6a:73:0d:d2:f8:22:0d:51:47:ce:78:c6:58:30:
         79:dc:3b:a6:dd:25:32:18:74:9d:b6:76:90:9f:9a:7f:d3:4c:
         8c:86:ad:56:11:fc:53:d2:c1:09:cf:b8:8e:32:b3:20:50:dd:
         0e:f4:fd:80:4e:bd:48:27:06:9c:fa:6e:42:f2:d0:ee:ed:00:
         0f:6e:88:5f:7f:3b:7c:86:ce:b4:3c:42:89:13:e8:db:3b:54:
         da:90:af:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:31:28 2025 by rpki-client