Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
File:                     BcCcQdI4lrLVQoGCYj-I-mdubJA.mft (raw, json)
Hash identifier:          aYXIr/FAAsrljzrW4JvqYA6rqZ4j91I7t99jcdfbgYQ=
Subject key identifier:   F8:69:C5:0A:EC:11:4E:D7:54:68:AE:F6:1A:EF:B5:0F:11:7C:20:8F
Authority key identifier: 05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90
Certificate issuer:       /CN=05c09c41d23896b2d5428182623f88fa676e6c90
Certificate serial:       01974968649D2C5AB54303718582167E2437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 08:01:07 +0000
Manifest this update:     Sat 07 Jun 2025 08:01:07 +0000
Manifest next update:     Sun 08 Jun 2025 08:01:07 +0000
Files and hashes:         1: BcCcQdI4lrLVQoGCYj-I-mdubJA.crl (hash: HGkO8BjFp9KefYux0XRxX2Nxk6SVsrui3NQ6UM5VgMI=)
                          2: LjpB0wqPDlAY2LkZEeFhm2QXKMA.roa (hash: 90iV42vsD6bXusmrjQ9UcKOk5lPPv2pkCMxcdhSqD2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 08:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:68:64:9d:2c:5a:b5:43:03:71:85:82:16:7e:24:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c09c41d23896b2d5428182623f88fa676e6c90
        Validity
            Not Before: Jun  7 08:01:07 2025 GMT
            Not After : Jun  8 08:01:07 2025 GMT
        Subject: CN=f869c50aec114ed75468aef61aefb50f117c208f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:96:c2:2b:57:dc:8b:be:68:a0:9e:f3:54:
                    6f:a3:d8:57:1d:4c:ee:95:f9:2f:eb:1e:46:16:ff:
                    e8:1d:24:46:4f:31:2a:55:9f:ac:47:a5:8f:73:2b:
                    32:0f:bc:3b:fa:83:db:67:70:df:6f:6e:26:76:31:
                    bf:c4:a6:76:63:ef:4d:20:e3:d1:26:de:a2:87:c2:
                    d0:16:9a:95:b7:e9:5e:f5:36:1e:1d:72:d3:18:62:
                    f5:7a:cd:fc:bc:20:ca:12:43:a4:98:06:e3:f0:b7:
                    ad:70:b0:43:53:fc:23:ed:6e:b6:84:f6:d4:11:81:
                    00:5b:91:3a:0f:7f:7b:4c:60:80:f4:27:c9:85:d5:
                    9d:9c:1f:4a:ff:e5:48:f6:88:1a:bb:99:e3:f7:a1:
                    cf:f6:05:bc:5f:7f:4d:da:90:e8:55:f0:0b:f4:6c:
                    25:dd:4d:c2:c9:83:fc:5e:ef:26:5b:3b:09:93:ed:
                    65:dd:e5:d1:2a:78:06:3d:ad:e0:54:8b:b5:d3:c0:
                    a7:46:08:89:32:41:e3:c9:0c:79:15:8d:11:2a:70:
                    b9:ff:7d:08:2c:7c:fd:9a:53:0d:da:a6:7d:12:f5:
                    fe:89:3e:cd:45:7b:cf:01:d1:4e:5c:12:c6:f9:15:
                    95:c1:d2:dd:eb:8e:90:72:5f:d8:70:12:d9:e5:0b:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:69:C5:0A:EC:11:4E:D7:54:68:AE:F6:1A:EF:B5:0F:11:7C:20:8F
            X509v3 Authority Key Identifier:
                keyid:05:C0:9C:41:D2:38:96:B2:D5:42:81:82:62:3F:88:FA:67:6E:6C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcCcQdI4lrLVQoGCYj-I-mdubJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/94e5fd-e033-4a5e-aefc-b33440aaab72/1/BcCcQdI4lrLVQoGCYj-I-mdubJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:59:85:f8:2b:a2:f1:40:d6:53:56:a1:95:af:c6:19:43:23:
         16:49:6d:6e:e2:85:d2:61:40:09:08:19:e6:67:a4:c7:d7:e2:
         64:59:a2:b2:3a:a1:3f:f1:46:a7:7b:31:82:44:43:38:67:e7:
         0b:48:51:6b:9a:30:cc:a4:c3:f4:2b:3e:2d:df:31:40:9e:a0:
         1c:f0:fa:29:58:53:88:84:e2:43:9b:46:dd:31:3b:55:0c:6a:
         9e:04:16:00:64:b2:3b:25:4e:f4:96:b9:2c:19:27:1c:80:ae:
         79:58:7f:45:cd:41:b3:d2:d7:4f:c4:82:f8:85:23:d4:22:81:
         b0:e9:79:a3:15:73:e3:3b:d6:1e:bd:49:37:e7:30:8e:4f:c7:
         d7:ec:cf:9b:29:ac:c6:a9:d9:a0:1e:0c:0f:97:80:39:a7:83:
         28:d1:af:a5:06:06:0f:ea:b9:5f:4d:97:92:ab:a7:2e:7d:cd:
         49:b2:44:04:d9:d9:14:5f:d1:c2:e5:7f:e3:46:aa:aa:be:b0:
         b0:ea:3a:d3:80:ed:69:9d:2f:af:61:9b:66:9b:b2:02:b2:62:
         95:0b:f1:ee:f4:0c:60:40:28:a3:e3:a6:bd:c3:88:bd:5a:53:
         64:9a:93:94:ec:63:3a:dd:aa:36:45:b6:58:e4:07:97:1a:65:
         99:a5:99:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:43:58 2025 by rpki-client