Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
File:                     BlpHDbq5wcM08PhfQXzRqkJenxM.mft (raw, json)
Hash identifier:          l7P0m2WQRwShB+SPE29xqeF4p2O/bNrn7hLTnQcE+CI=
Subject key identifier:   D7:41:06:80:09:79:B3:4B:3F:C4:41:D4:FA:DA:54:22:F4:24:E4:8E
Authority key identifier: 06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13
Certificate issuer:       /CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
Certificate serial:       01974BC4345E347D0DDD4045C860570CF925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
Manifest number:          0484
Signing time:             Sat 07 Jun 2025 19:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:39 +0000
Files and hashes:         1: BlpHDbq5wcM08PhfQXzRqkJenxM.crl (hash: PmdXJMPvsAbA1fqOMnbNKYFiScd1QIDKwMl6U60+wXw=)
                          2: ad6x4CiW1Da9W7G7xb_TGfwpp78.roa (hash: YUb9Lf1mTN1JjvT/olnYRSLlIBS8OJGKrxw+VtVpgBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:34:5e:34:7d:0d:dd:40:45:c8:60:57:0c:f9:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065a470dbab9c1c334f0f85f417cd1aa425e9f13
        Validity
            Not Before: Jun  7 19:00:39 2025 GMT
            Not After : Jun  8 19:00:39 2025 GMT
        Subject: CN=d74106800979b34b3fc441d4fada5422f424e48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:61:fc:71:88:d4:e9:fc:d4:99:79:77:bf:0f:
                    7b:9b:41:a4:39:06:f5:9e:45:67:e2:c2:31:09:c8:
                    83:3d:ce:d2:47:63:ab:24:cf:fa:e6:d1:21:3e:eb:
                    eb:44:53:69:ad:17:64:59:af:97:93:d9:1c:9c:df:
                    8a:b8:bc:45:f0:c8:b9:62:da:95:54:d8:21:2b:49:
                    0c:36:10:f9:8a:ab:35:77:6d:f4:5a:be:75:b3:43:
                    d2:c4:8c:44:37:17:96:50:fe:31:99:41:45:99:f7:
                    2c:4d:8b:a9:75:e9:6b:37:bd:2c:32:ca:98:aa:37:
                    f9:8d:e7:89:ab:f5:59:5f:9c:5e:6c:ef:2e:d8:10:
                    18:92:d9:91:e6:54:09:9f:54:e1:50:16:74:cd:61:
                    22:ea:38:dc:a2:1f:8c:7a:8a:b7:31:00:72:71:1a:
                    a3:1e:25:2d:c1:5b:39:b3:a0:80:03:f6:c4:6a:c3:
                    f6:17:e0:a1:3c:03:63:f7:41:52:3b:26:06:1f:a2:
                    26:a1:35:71:42:28:ea:1b:f3:f5:f8:30:8f:44:54:
                    38:82:b5:f9:13:49:aa:86:56:0b:58:c8:c6:37:25:
                    fb:1d:3c:73:03:3d:99:cd:d3:c7:29:1e:79:d5:64:
                    2d:8a:da:f9:63:5a:56:a7:88:82:8b:9f:74:56:7c:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:06:80:09:79:B3:4B:3F:C4:41:D4:FA:DA:54:22:F4:24:E4:8E
            X509v3 Authority Key Identifier:
                keyid:06:5A:47:0D:BA:B9:C1:C3:34:F0:F8:5F:41:7C:D1:AA:42:5E:9F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlpHDbq5wcM08PhfQXzRqkJenxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/375a67-8c4e-4a46-99cc-65078a7f65b8/1/BlpHDbq5wcM08PhfQXzRqkJenxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:e0:40:cd:a2:11:50:77:0d:e9:7c:33:36:01:ef:83:26:
         20:04:64:ae:c8:d2:b6:40:8c:35:50:25:ff:76:57:37:eb:ab:
         4b:7d:f7:4d:42:90:5a:98:8f:a3:12:93:1e:d7:90:7f:d9:88:
         df:1e:9a:23:cf:a5:c8:19:6d:fb:15:8e:6b:ce:03:9f:6c:44:
         ca:b8:c4:ca:02:97:c3:24:e2:88:0a:8c:b1:6f:36:b5:83:92:
         d5:a6:d2:1c:25:12:db:c0:d5:d1:eb:bb:ee:ac:41:ed:bc:94:
         04:dd:fa:33:ef:1a:6c:5b:eb:ca:32:a1:fe:5a:70:65:76:4c:
         b2:73:39:f9:ac:55:ac:ad:27:39:e8:55:6c:1b:5d:e8:47:e8:
         00:7f:d3:45:ce:ad:7a:fe:d9:ad:c0:fb:d9:48:7d:5b:cb:0e:
         6f:76:d6:85:db:2b:35:cf:bb:66:b6:38:a0:3a:97:2e:c0:c8:
         70:ff:17:d8:3e:26:9d:aa:f0:67:a6:bd:99:6b:78:d7:0e:82:
         6f:9d:53:ff:a8:c0:41:9b:d1:e0:c6:f5:0f:d0:f7:de:75:a7:
         ba:a5:c2:af:c0:e8:bf:23:14:aa:79:36:84:07:da:1d:58:34:
         ad:3a:b7:ca:36:4c:6d:85:c8:25:2f:d1:a2:40:61:1f:74:93:
         48:91:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:55:22 2025 by rpki-client