Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File:                     Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier:          VkI/RtV9DiHKVbhAGu1OH9c+I13g9kBgh32hk6bnBB4=
Subject key identifier:   28:42:8B:9D:41:17:18:D5:D6:AF:6D:4A:91:7F:4D:A5:BF:BC:39:D9
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer:       /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial:       019764DF2E136A7F8D22F9A1DBA5A29498CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number:          151C
Signing time:             Thu 12 Jun 2025 16:00:37 +0000
Manifest this update:     Thu 12 Jun 2025 16:00:37 +0000
Manifest next update:     Fri 13 Jun 2025 16:00:37 +0000
Files and hashes:         1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: WVreEzs+XY2X3k53eXwu0dnpRYMM8k00rAG1h+TMzvQ=)
                          2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:64:df:2e:13:6a:7f:8d:22:f9:a1:db:a5:a2:94:98:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
        Validity
            Not Before: Jun 12 16:00:37 2025 GMT
            Not After : Jun 13 16:00:37 2025 GMT
        Subject: CN=28428b9d411718d5d6af6d4a917f4da5bfbc39d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:eb:12:54:2e:c1:60:27:6b:6a:9d:2f:2f:
                    d7:b3:fa:44:e2:86:3c:a5:cd:3a:2b:1d:33:06:e1:
                    22:eb:ed:67:b8:96:5d:5e:9e:b9:50:00:ff:12:c7:
                    33:b2:56:a0:9e:30:98:d6:18:57:c2:ff:7e:61:b0:
                    44:b2:d5:73:1c:f8:e5:7f:1a:0b:ce:16:b1:86:0f:
                    b0:70:b4:79:1c:27:66:8e:52:fc:47:87:94:82:d1:
                    15:02:dd:fa:95:dd:c9:6a:06:63:a9:46:50:6a:2c:
                    c8:2f:3d:c0:73:fe:c5:11:aa:94:d0:94:0c:e5:db:
                    1e:bc:23:d9:5e:c9:8f:c4:42:ee:82:f2:80:67:19:
                    94:3e:76:7d:74:d8:13:04:6e:df:38:1f:5d:11:3c:
                    87:23:ef:51:85:75:3e:07:c0:6d:8c:5d:76:ad:f6:
                    9c:92:31:63:86:cc:03:43:77:b8:b7:6e:83:11:81:
                    ef:eb:f8:13:06:8a:00:5f:61:5a:ea:5c:ae:88:e2:
                    3f:39:7f:52:d7:d0:90:52:0a:08:56:bb:7a:f4:f6:
                    83:63:df:3b:49:83:87:23:cf:e6:d3:a4:92:1c:55:
                    a2:3b:96:6a:6f:0a:64:15:fc:c5:2d:71:9c:21:49:
                    63:c9:47:8c:b4:ed:25:59:be:38:b0:21:86:70:1c:
                    74:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:42:8B:9D:41:17:18:D5:D6:AF:6D:4A:91:7F:4D:A5:BF:BC:39:D9
            X509v3 Authority Key Identifier:
                keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:3a:e3:90:d2:09:96:2c:a6:0e:dc:76:1d:1e:77:2d:09:
         65:10:74:71:a2:b0:48:3f:4a:40:5a:9d:e3:c8:52:36:00:24:
         16:24:c4:25:d1:57:31:57:75:f0:07:67:a0:e7:cf:bb:69:84:
         97:1c:fc:65:2f:31:ec:c7:ea:28:f4:2d:31:bd:99:0d:99:2d:
         c0:29:2f:65:0c:fe:10:2b:91:a9:ba:d0:74:49:ad:39:79:40:
         6e:71:62:88:32:f9:00:9d:fb:29:f2:42:28:77:50:fe:5b:30:
         8c:7b:13:02:00:4d:4b:b5:b0:25:c2:cb:9c:c5:f9:46:e9:37:
         76:14:b8:df:1c:e8:66:6e:83:72:93:3d:e7:69:a1:30:c1:3f:
         5e:05:43:85:6b:df:32:56:f2:86:2e:2e:01:6f:00:94:f6:a9:
         c3:e8:68:80:3d:78:15:cb:a5:cc:98:63:2f:50:24:4e:41:1d:
         d7:4c:05:5c:92:b9:15:88:ed:77:e4:a8:4b:c6:21:64:68:1b:
         de:a5:95:e2:96:31:bf:b4:2c:71:ce:54:af:1b:9b:d1:76:85:
         57:1c:67:c7:5d:df:8c:c8:04:58:a6:18:1d:7e:51:9c:a6:2d:
         ce:0a:12:28:70:07:18:2b:28:5f:2b:06:2a:cc:e6:b6:fe:24:
         4f:5d:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:52:28 2025 by rpki-client