Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
File:                     B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft (raw, json)
Hash identifier:          3ssMVZ2dHcrdbHSdVFrWgOjxioPcNPpekeMfjztA9Z8=
Subject key identifier:   BC:C3:D5:A0:9D:EE:91:4E:0C:F8:82:71:9A:97:0E:AF:D5:DD:14:7D
Authority key identifier: 07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36
Certificate issuer:       /CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
Certificate serial:       01976CCFF16B612FA28ED87751CCC3C4DB84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
Manifest number:          108D
Signing time:             Sat 14 Jun 2025 05:00:56 +0000
Manifest this update:     Sat 14 Jun 2025 05:00:56 +0000
Manifest next update:     Sun 15 Jun 2025 05:00:56 +0000
Files and hashes:         1: B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl (hash: w6jQWgqEPqgIza+QhbMsX7Nfq3BAgwCcFaGowTFggcM=)
                          2: jIFgf1lBNqu6NES_hhmJCRkx6WU.roa (hash: b4SkMZ2qfegq/aAVSnzcin5lHV5SoqB7AozMTZpTRfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:cf:f1:6b:61:2f:a2:8e:d8:77:51:cc:c3:c4:db:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0781ee869d2e1c200ff8c697e2d37eaa42940a36
        Validity
            Not Before: Jun 14 05:00:56 2025 GMT
            Not After : Jun 15 05:00:56 2025 GMT
        Subject: CN=bcc3d5a09dee914e0cf882719a970eafd5dd147d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:11:b0:b0:ea:c5:13:c4:f7:26:b4:73:b4:
                    d3:0e:15:4a:28:2a:3a:86:b6:b9:a8:2f:59:41:a0:
                    14:89:78:3a:25:71:81:c5:38:fc:66:71:46:4a:b4:
                    00:f0:4d:19:45:81:33:6f:da:5b:82:ff:a0:92:82:
                    51:83:22:7b:a4:57:e7:75:9b:b2:e9:8a:dd:7b:47:
                    39:47:b5:8f:23:db:02:53:7c:5f:2d:77:09:ed:4b:
                    1d:61:77:fb:f5:ad:1d:64:38:6c:b2:14:c8:d1:38:
                    6c:82:01:6d:1f:05:bd:b8:25:ed:60:85:6d:51:aa:
                    3a:01:cc:77:27:ac:bd:8a:f8:4d:ff:e9:fd:54:e4:
                    cd:47:0c:6e:53:3b:5e:3e:d7:a3:32:41:c8:97:3a:
                    c9:84:ac:4c:e9:aa:db:04:69:eb:85:64:31:e5:c0:
                    9f:40:bd:4e:39:e0:59:1c:52:88:04:a5:dc:5a:30:
                    2f:d3:e4:b6:8b:02:3d:0c:37:7f:1d:bf:b9:e4:57:
                    a9:51:16:4f:66:e0:58:d6:b9:36:be:df:04:8c:93:
                    38:f1:f3:d0:11:60:0c:23:1a:e5:eb:4a:46:61:2a:
                    f9:64:6d:fe:fa:61:8f:96:da:43:4c:1c:95:00:55:
                    fc:b8:d9:9f:ff:e1:2e:1e:e6:6e:b7:d9:53:f1:46:
                    e0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:D5:A0:9D:EE:91:4E:0C:F8:82:71:9A:97:0E:AF:D5:DD:14:7D
            X509v3 Authority Key Identifier:
                keyid:07:81:EE:86:9D:2E:1C:20:0F:F8:C6:97:E2:D3:7E:AA:42:94:0A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Huhp0uHCAP-MaX4tN-qkKUCjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5645d2-7224-4d10-82bf-3e75051b8eac/1/B4Huhp0uHCAP-MaX4tN-qkKUCjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c6:57:e0:f2:18:be:43:2d:0c:96:6f:de:95:d0:e1:e2:28:
         d7:b7:5a:6f:13:d7:62:cd:76:ff:d8:0a:6a:f8:40:fb:ed:7b:
         ca:e9:72:32:44:3b:2e:2d:0a:2a:e5:24:fd:b5:28:aa:58:60:
         6c:9e:a7:e2:e1:61:99:db:83:76:54:d5:46:d5:97:c3:e6:19:
         f1:a0:25:f2:81:e6:84:5e:00:43:f5:18:48:32:da:c4:f6:02:
         fb:a2:cd:fe:fc:8a:07:2e:5c:62:6b:58:fe:ab:dc:e0:fb:51:
         2f:b7:b4:c3:c7:15:60:49:70:80:80:23:bb:a3:79:6e:37:33:
         57:d3:c1:17:76:bd:68:c3:7e:b6:a2:22:a9:df:79:e2:80:9b:
         47:73:9d:fb:ff:23:7f:cb:99:ca:99:68:a8:48:f6:64:0b:07:
         ab:f9:1c:a9:a5:a1:a6:84:5d:d3:ca:ef:ee:19:d3:40:80:33:
         f8:53:76:41:e5:d6:a8:2b:15:98:02:40:11:68:6a:40:96:13:
         dd:b4:c4:10:b1:24:98:93:88:d4:86:f1:e5:e0:5e:a9:7d:02:
         36:22:65:56:77:09:14:5a:c3:3e:b8:ee:38:d8:76:c5:ee:9a:
         c5:0c:32:fb:c1:9d:1a:80:19:c0:44:91:a9:01:52:9d:f5:6b:
         98:e0:f7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:25:45 2025 by rpki-client