Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File:                     BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier:          SkOTuDKS9JxVJcXhKZTomFvEFcAR3bBj2xb7p9UCP68=
Subject key identifier:   C4:B6:E9:CB:42:1E:DB:0D:74:2E:70:13:A8:0B:12:9F:7E:D5:70:65
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer:       /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial:       01975121B2B0E57ED00F7B1041F3DBD0F80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number:          125F
Signing time:             Sun 08 Jun 2025 20:00:52 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:52 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:52 +0000
Files and hashes:         1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: IN0U2LhXuCIUCeBXObpcIZaum0rs0HofEfLdACqdQv4=)
                          2: hLFJquKo-2HrHgS3tC85H4343DU.roa (hash: nh7NbrSlckvvLuSFfKgI45STQ6KlvJNVJOtaSTVOkeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:b2:b0:e5:7e:d0:0f:7b:10:41:f3:db:d0:f8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
        Validity
            Not Before: Jun  8 20:00:52 2025 GMT
            Not After : Jun  9 20:00:52 2025 GMT
        Subject: CN=c4b6e9cb421edb0d742e7013a80b129f7ed57065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:68:ed:ed:b4:65:69:e3:44:98:17:1a:de:
                    05:0c:36:53:b8:5e:b1:2d:29:40:0c:60:1e:bf:ef:
                    48:18:78:9f:11:61:b9:cb:1f:5f:4d:bf:ed:39:4e:
                    39:0a:33:1a:c9:ef:41:3b:d5:98:9b:44:d6:88:a2:
                    23:d0:6f:a3:49:1a:90:50:1e:dc:ed:13:ca:e6:03:
                    3e:25:5d:34:ce:4f:7b:61:01:47:e3:06:2c:bf:9c:
                    b6:59:e8:5f:5e:62:99:af:f4:68:11:09:09:c6:08:
                    c0:86:9f:3e:bc:e0:5c:cd:5e:bc:51:56:2b:9c:7a:
                    0f:66:c9:a2:dc:44:c5:2c:77:cd:60:ae:0e:19:fb:
                    94:f4:bd:c8:fd:3e:57:6b:59:76:0f:ce:9f:67:cc:
                    e4:64:b6:ce:b8:5f:19:7b:c6:ba:3b:09:29:a9:8a:
                    83:09:2e:b0:d1:83:f9:73:87:37:cc:67:24:3a:94:
                    73:b6:65:fd:e4:53:d4:b3:ce:52:5c:0e:80:41:3d:
                    d9:7f:c4:bc:35:6b:a9:83:14:09:b6:24:b4:2f:b0:
                    8d:6b:bf:fd:f5:f4:fe:ba:eb:59:fa:b8:b7:92:68:
                    be:38:80:03:8a:a5:f3:24:80:b1:7e:51:80:38:9a:
                    95:a6:e7:37:40:26:28:6a:3e:ce:1d:76:83:93:54:
                    67:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B6:E9:CB:42:1E:DB:0D:74:2E:70:13:A8:0B:12:9F:7E:D5:70:65
            X509v3 Authority Key Identifier:
                keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:e4:71:a1:8a:29:37:37:f2:8b:98:2b:94:81:31:34:2e:01:
         ee:99:bb:25:16:f6:5c:3a:f4:08:96:d5:ed:6b:cf:8b:f8:44:
         ba:a2:2e:a0:ff:f3:f9:28:5b:73:f0:11:c2:69:ba:59:92:5b:
         aa:7b:31:65:41:9e:b4:bc:61:bf:b2:65:97:f9:26:4a:07:2e:
         07:3b:77:3c:2a:03:62:b4:b7:0b:b2:72:28:74:d5:0a:15:80:
         79:b9:7f:88:bb:2c:3c:b1:00:72:73:67:ab:61:78:88:8e:97:
         77:57:41:3a:0b:50:e0:f4:bd:b6:e1:12:b8:cb:8a:07:b7:15:
         49:80:62:1a:c4:c7:31:10:b6:35:47:3d:2b:e7:c8:6d:8b:ef:
         71:62:23:a0:22:2a:ae:58:6a:3c:f8:b6:d8:99:d4:36:c8:bf:
         5e:2e:b8:e7:07:a2:29:f6:8e:df:e9:cb:02:d6:21:a0:30:28:
         3e:bd:82:79:59:0c:a0:b7:19:a2:6e:c6:fd:ce:ef:56:d2:18:
         35:97:63:07:7e:fc:32:b2:e3:11:32:7e:aa:88:49:5a:77:38:
         65:9f:48:e5:c1:d8:f6:56:21:22:d2:fd:60:57:b3:19:e9:35:
         c7:72:aa:63:9d:b9:33:ce:61:eb:20:19:41:ca:f8:eb:9a:a2:
         51:4d:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:30:28 2025 by rpki-client