Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          IcAzhIpGcHVVUgylV9YmUfWX/Vaw9pkJBMeMnNF/XLE=
Subject key identifier:   0F:47:FD:3A:55:0F:E7:54:10:4D:25:46:0C:D3:14:17:11:A0:BE:79
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01974B1F67BFA0C16F1CED70F0411C5DE6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          098A
Signing time:             Sat 07 Jun 2025 16:00:38 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:38 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:38 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: imAWUVil44r75F7KG8+PqBx4BblB2p+rKaFmGtm82dM=)
                          2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:67:bf:a0:c1:6f:1c:ed:70:f0:41:1c:5d:e6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Jun  7 16:00:38 2025 GMT
            Not After : Jun  8 16:00:38 2025 GMT
        Subject: CN=0f47fd3a550fe754104d25460cd3141711a0be79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f9:1b:04:9d:12:36:a4:85:dd:e6:35:ea:fa:
                    b5:c8:3d:e9:06:96:86:51:8b:f5:3a:9d:47:9f:14:
                    f8:79:fa:60:dc:fb:21:d8:9c:0f:0c:b5:83:7e:23:
                    c7:fb:76:d7:45:a4:07:32:fd:62:27:75:60:a5:fc:
                    e9:2c:78:06:12:f9:79:17:12:85:7f:ca:01:e9:0d:
                    ed:34:ed:90:52:f6:f8:83:2c:3e:b1:7b:71:c1:5a:
                    67:26:d9:1a:e3:2b:02:45:73:c1:99:da:5c:2d:84:
                    97:4a:ab:13:9f:3e:72:32:9e:66:fe:e2:2d:44:04:
                    c6:3f:10:67:47:db:fa:9c:e2:8c:02:27:68:c4:80:
                    5d:d5:29:b4:60:c2:ba:39:b9:e7:59:4d:52:14:fd:
                    20:58:4c:ee:24:46:4e:8b:f7:ca:83:69:2c:57:82:
                    56:16:8f:2c:48:30:58:e7:2a:d7:3e:c5:97:72:4e:
                    40:fc:82:9a:6b:2e:0c:1a:6e:59:b0:2a:e7:b3:6f:
                    59:6e:82:e6:2e:63:1f:e2:d8:e3:e0:26:35:c9:88:
                    39:55:1f:49:f5:71:84:c8:88:00:13:c5:4b:1b:00:
                    73:dc:f9:50:8c:15:e3:4e:e2:26:e7:47:43:c1:c7:
                    e0:f3:c0:e8:2f:27:4f:6c:e7:12:50:8c:ed:57:a0:
                    c9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:FD:3A:55:0F:E7:54:10:4D:25:46:0C:D3:14:17:11:A0:BE:79
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:68:1c:28:b2:f7:01:da:a0:63:c1:35:98:11:c7:0d:a1:
         3a:8b:6b:28:69:b4:22:93:32:bc:29:29:ee:20:c2:02:4b:55:
         9f:fb:53:c8:99:32:a0:5d:e9:b1:88:84:9f:a1:60:a7:e0:97:
         71:b5:60:91:67:01:e9:53:2b:3e:bd:12:63:13:2e:7c:8c:73:
         cf:a4:61:1a:09:a7:e5:b7:55:d9:11:a6:c5:eb:cb:4a:9a:a8:
         31:e8:9c:07:78:fe:77:f9:d6:a7:d7:30:c9:ef:1d:93:07:b3:
         8b:e2:dc:54:60:be:a8:04:e7:22:fd:f7:17:f4:b5:c5:48:ad:
         6f:35:43:6c:e8:fb:1d:af:ae:2d:f0:e3:92:9b:b4:77:c1:91:
         d6:23:5f:75:6b:82:05:47:b3:bd:dd:3b:08:06:1f:7d:5d:95:
         0b:a2:a5:53:ce:6f:86:40:da:b6:4f:b2:f8:9d:35:a9:a1:41:
         0c:c3:e1:2f:b0:f4:f6:19:a8:df:14:35:85:d7:59:70:15:28:
         74:c4:ca:fc:e7:15:83:bf:52:2e:0f:db:42:8f:e0:ae:08:79:
         4f:f5:79:8f:6a:61:f8:80:61:80:af:d5:7e:ea:a4:eb:b5:e5:
         3b:bb:47:d6:f0:85:8d:77:b9:d8:b4:49:b5:fe:8a:63:66:29:
         71:78:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:17:28 2025 by rpki-client