Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
File:                     BfCLdPURftOAcj2eQp7LSqU4Ulo.mft (raw, json)
Hash identifier:          KBgJ8pOaI/eg1VnL5Fmx6J8H2ZATD/zUfXaMC0p5LCk=
Subject key identifier:   F6:BF:BB:3B:46:E2:59:C5:FD:39:95:82:11:2E:B3:E6:67:B2:8F:86
Authority key identifier: 05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A
Certificate issuer:       /CN=05f08b74f5117ed380723d9e429ecb4aa538525a
Certificate serial:       01974B1F23ECCA6D790C7C5559F8722FA1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
Manifest number:          1581
Signing time:             Sat 07 Jun 2025 16:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:21 +0000
Files and hashes:         1: BfCLdPURftOAcj2eQp7LSqU4Ulo.crl (hash: tUVuplmpIUcmBrI9aVSEj7Yo48fE9b4/uagIsl8IOOs=)
                          2: cadUElPbaF409FA_2Wg_Q_GYDPU.roa (hash: NuxwFEiNd/qBOlqeuoFPvUGS7VeCKWQWl9Silhu16kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:23:ec:ca:6d:79:0c:7c:55:59:f8:72:2f:a1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f08b74f5117ed380723d9e429ecb4aa538525a
        Validity
            Not Before: Jun  7 16:00:21 2025 GMT
            Not After : Jun  8 16:00:21 2025 GMT
        Subject: CN=f6bfbb3b46e259c5fd399582112eb3e667b28f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:ce:91:3d:2d:7d:0c:05:e7:6a:11:24:70:
                    22:1a:30:40:85:2e:6c:91:7a:42:81:89:63:60:1d:
                    de:0f:97:38:42:eb:d4:aa:df:a7:71:65:36:db:c7:
                    7b:ea:58:ac:8d:ac:32:69:7a:51:b8:9b:11:33:4e:
                    3b:5a:63:f4:3b:51:7e:75:ae:7a:f1:4b:3f:0a:70:
                    ce:ac:d2:8f:18:78:a7:8c:16:5f:d3:3f:e0:23:df:
                    b1:7a:c1:12:96:07:a3:5b:5f:0e:69:d1:4d:a5:cb:
                    f7:c4:d7:1f:60:bc:ec:8d:04:5d:7c:5b:de:45:ae:
                    b9:64:a9:94:50:be:23:39:58:78:ae:71:9c:f2:19:
                    01:5c:3c:66:30:3e:41:d4:29:e9:8c:06:f7:3f:f9:
                    db:f3:12:4d:36:43:ec:26:00:fc:a7:b6:f4:36:83:
                    ef:07:52:61:09:bc:e1:56:41:75:dc:42:b0:a1:7a:
                    4d:46:12:09:ab:cf:1e:cc:28:a4:b4:94:bc:4e:b0:
                    39:15:7c:77:ef:35:cb:08:ea:59:92:69:30:2f:10:
                    14:10:ea:c4:c7:ae:20:7b:62:bf:0d:df:4f:8e:8b:
                    a3:ad:b2:39:14:ea:3d:eb:9c:0e:2b:7f:1e:3a:1f:
                    ac:7e:e7:fb:9f:84:d4:db:88:ad:b5:c1:43:d8:dd:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BF:BB:3B:46:E2:59:C5:FD:39:95:82:11:2E:B3:E6:67:B2:8F:86
            X509v3 Authority Key Identifier:
                keyid:05:F0:8B:74:F5:11:7E:D3:80:72:3D:9E:42:9E:CB:4A:A5:38:52:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfCLdPURftOAcj2eQp7LSqU4Ulo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1886d8-d874-4c24-92b9-d41ac81d1cc4/1/BfCLdPURftOAcj2eQp7LSqU4Ulo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3c:e2:c4:a1:6e:05:07:2d:04:12:77:d8:98:b4:f6:a4:17:
         01:ea:2d:d4:d9:1f:92:9e:79:ce:4b:93:51:16:ee:18:38:89:
         35:b1:60:1d:51:3e:71:17:51:30:4e:3d:4e:3e:c0:8d:e0:47:
         48:0a:ee:de:bb:7e:06:a8:b7:6d:98:6c:07:0f:03:a3:04:61:
         7a:de:2f:51:2a:7e:84:2d:00:8c:81:47:3c:88:14:45:c4:ce:
         f8:c0:fb:85:f3:86:0c:34:ff:01:60:56:5d:8d:fe:e7:8a:53:
         47:84:1e:42:d3:b2:09:91:48:77:58:38:bb:36:73:72:81:4e:
         b9:48:fe:64:c2:c1:45:5c:a4:f6:da:ce:fe:5e:38:2b:73:4e:
         6a:d1:41:fa:64:32:1a:e5:94:82:2a:8f:f6:9a:79:7c:56:d3:
         43:75:1a:a5:ab:0e:20:c8:c9:6e:c3:16:c9:2b:ab:86:73:a4:
         73:1e:0c:97:ac:74:6d:83:0e:5e:b5:43:48:f1:09:50:f2:1d:
         44:da:c0:d0:82:b0:da:b1:bd:cb:e1:ee:8d:72:35:8c:a8:cb:
         31:41:e7:95:00:b6:4b:28:6f:df:8f:a5:22:d1:e0:87:a5:10:
         b4:1f:94:57:2b:a3:a9:90:60:74:b8:9a:c2:ae:05:ca:cc:3f:
         fb:2b:50:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:16:06 2025 by rpki-client