Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          z/BO3HyJKVMa19tUnDUDXoIVFpbRGt2RX5ShxVg8BDk=
Subject key identifier:   D0:BE:FD:DE:88:F7:B9:36:10:9D:7C:F0:5F:94:CC:FE:16:F4:8E:9A
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       019751212EFE535151B550BCA31C417F94A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          04B4
Signing time:             Sun 08 Jun 2025 20:00:18 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:18 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:18 +0000
Files and hashes:         1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
                          2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: ASDE5nqxziINdSGF8GkiNvMm/Lv4cFX8Z//jsPVSuQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:2e:fe:53:51:51:b5:50:bc:a3:1c:41:7f:94:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Jun  8 20:00:18 2025 GMT
            Not After : Jun  9 20:00:18 2025 GMT
        Subject: CN=d0befdde88f7b936109d7cf05f94ccfe16f48e9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:44:25:fe:57:e5:b9:11:32:5d:26:4f:83:
                    b6:6e:42:f5:20:43:b6:8f:1d:d5:61:92:61:91:b3:
                    98:11:0b:db:60:b5:28:82:f1:b9:b1:fc:51:d2:25:
                    e5:99:00:98:44:52:f6:b0:0b:47:f6:f4:98:ec:bd:
                    f3:31:c8:05:a6:d7:c4:db:51:86:80:b1:75:95:a1:
                    e8:05:5c:02:66:38:6f:31:64:20:d1:f7:ba:42:e7:
                    c3:55:85:13:4c:01:d8:6b:66:16:ae:31:5d:30:65:
                    4f:2d:2a:9a:7a:54:e1:d9:58:58:d1:b7:d2:57:97:
                    dd:3e:48:70:ec:f9:11:02:12:15:bf:fc:10:1b:a0:
                    2d:3b:28:f7:0d:04:7a:28:96:6d:71:e7:c0:5a:17:
                    ec:79:0a:42:fc:1f:1c:71:e6:5c:a7:a1:b4:a1:1b:
                    a0:03:2b:13:15:0e:cf:22:8a:df:81:ce:12:d5:15:
                    2f:3f:e4:e0:7f:39:06:b7:0d:e5:8c:70:58:64:ec:
                    1f:6e:28:2b:34:e1:f7:04:72:54:22:86:d0:45:25:
                    65:30:62:97:88:cd:97:78:62:07:1b:ea:c5:06:74:
                    63:c9:1d:68:e8:d3:1b:53:9b:bd:61:85:79:f5:3e:
                    8d:01:66:8f:3d:34:4d:cf:c4:3f:fa:40:44:16:af:
                    e0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BE:FD:DE:88:F7:B9:36:10:9D:7C:F0:5F:94:CC:FE:16:F4:8E:9A
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1b:10:9a:12:eb:a8:b1:e8:0f:fb:70:b3:de:a2:a0:e3:1d:
         9b:a6:5a:73:49:49:2c:c0:32:ba:4f:0d:32:db:d3:a6:f6:45:
         37:21:9f:58:ca:fe:31:2b:a6:52:60:fd:2a:24:e4:65:bf:ad:
         2a:4b:b7:5c:a0:93:21:9b:55:b9:5f:75:ef:55:03:77:87:f7:
         a2:d7:2a:70:47:7d:27:22:6e:59:fd:d4:8e:c9:35:8d:e8:41:
         c9:b9:90:7a:76:8a:2f:90:63:ef:c1:44:92:c5:e0:87:6d:e6:
         1e:c4:38:4a:2f:29:c3:67:e2:42:dd:6d:7a:fb:54:d3:7a:0f:
         68:6d:c8:d2:35:c9:a0:10:68:cc:ed:2b:93:5b:b1:b4:6b:2c:
         69:36:ff:52:a0:ad:b8:9b:d8:f4:e2:79:f9:71:98:21:56:ca:
         06:73:f8:01:a7:33:a0:f3:3d:e2:a8:72:fc:1f:80:36:0d:3e:
         ba:a1:dd:4e:1e:59:26:ae:f6:ce:47:37:4b:1b:0f:61:34:7d:
         36:30:9c:3c:5d:9c:b4:73:24:99:b5:88:fc:ca:3a:30:dc:22:
         ea:e9:9c:ba:c2:ca:bb:8d:81:40:00:7e:76:ad:be:dd:44:a1:
         c1:f8:86:17:2b:14:92:db:b7:78:63:22:5e:c3:af:e8:6a:ca:
         08:15:85:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:28:23 2025 by rpki-client