Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File:                     BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier:          vOkQQUD+9MgMg49jUZ6dKWHQPcaUak/6XUZBcblripA=
Subject key identifier:   BF:90:0F:81:2D:23:37:CD:75:71:0D:F3:F1:BE:D7:9E:36:EA:A1:C4
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer:       /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial:       01975BA55968A874B530098F706A99986E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number:          158E
Signing time:             Tue 10 Jun 2025 21:00:52 +0000
Manifest this update:     Tue 10 Jun 2025 21:00:52 +0000
Manifest next update:     Wed 11 Jun 2025 21:00:52 +0000
Files and hashes:         1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
                          2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: El2Nj++dgdlcuClX4N9lk44MEVt2vZVJWzR4auLlATk=)
                          3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:a5:59:68:a8:74:b5:30:09:8f:70:6a:99:98:6e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
        Validity
            Not Before: Jun 10 21:00:52 2025 GMT
            Not After : Jun 11 21:00:52 2025 GMT
        Subject: CN=bf900f812d2337cd75710df3f1bed79e36eaa1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:e8:c9:e4:37:ae:0a:fb:f7:2b:58:4c:ff:
                    e9:58:65:44:16:76:51:aa:4e:7d:59:65:cd:31:fa:
                    0d:7c:46:e8:ed:94:da:01:60:47:fb:13:2d:60:8e:
                    18:06:23:c1:d4:4c:7f:96:8e:47:0e:27:68:40:d6:
                    53:53:93:a2:f2:9c:5e:b0:be:29:35:43:fb:69:f8:
                    61:04:48:89:ec:ea:6c:ca:57:27:50:5e:f4:81:c4:
                    6c:bd:5b:3b:3c:85:2d:73:d6:15:6e:10:0f:98:1e:
                    d5:47:a7:e5:99:ef:37:30:f5:bb:f8:98:d7:0c:93:
                    42:32:85:02:4a:7a:1e:7a:ff:a5:c6:5a:af:45:d7:
                    53:90:54:3a:67:30:54:8e:a7:4e:b6:ef:ca:ba:38:
                    29:a9:5e:52:ad:d8:01:1b:1c:ee:7e:08:a2:d7:ee:
                    b0:7d:19:4a:26:e6:11:b4:7f:a6:29:49:c4:1c:26:
                    77:f3:7d:97:fc:91:fe:da:ef:d1:47:9b:b7:6c:36:
                    38:44:3e:33:dd:46:7e:8e:d2:1b:81:33:e2:34:f8:
                    5a:6c:40:a3:68:12:94:97:11:3b:9c:6a:3d:35:4f:
                    0a:11:38:0c:32:1a:51:77:ab:31:6a:85:16:53:d1:
                    43:17:94:dd:40:c2:48:99:e6:6f:58:5b:ef:47:2c:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:90:0F:81:2D:23:37:CD:75:71:0D:F3:F1:BE:D7:9E:36:EA:A1:C4
            X509v3 Authority Key Identifier:
                keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e6:03:40:8f:aa:dc:cf:44:f8:7c:db:02:76:a3:30:e4:19:
         1d:15:70:d4:c6:9b:dd:80:48:d9:e2:12:7d:32:df:0f:11:73:
         1f:e6:2a:53:47:bc:10:f3:c4:26:58:19:cd:b2:66:b0:6c:bc:
         01:94:33:99:f3:c2:e1:b4:e3:82:4d:be:c8:52:fc:4b:6a:55:
         49:1b:ce:dd:8d:8f:ba:33:1a:73:96:a1:92:f5:06:40:66:4a:
         30:8a:8c:0b:e6:f9:e9:53:f6:56:88:76:4e:4a:ca:c6:93:25:
         5d:24:4b:94:09:37:8a:c2:9b:bd:9c:9d:fc:96:a4:3a:b3:f6:
         f5:71:46:2c:79:5c:ce:d0:5e:18:a0:5e:c7:a8:c9:e8:46:32:
         5e:7d:98:3d:80:f5:64:31:e4:37:6f:fc:7d:99:f2:e2:00:8e:
         19:af:8f:f7:fc:f8:2b:cf:89:a5:b2:05:5f:1d:ab:5c:91:e5:
         86:7c:94:6b:9e:a5:7d:7f:c0:34:50:54:f3:73:46:75:ee:94:
         fc:bd:67:4d:e7:70:cf:86:95:91:bc:50:55:f0:7b:b2:d2:97:
         2f:21:b0:df:2e:68:b9:6a:63:74:1a:b3:41:75:8f:f0:ab:ef:
         26:3d:07:e4:7e:2f:92:6c:c4:4d:ad:ee:85:b1:17:e7:ac:41:
         d3:3c:d3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:00:43 2025 by rpki-client