Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
File:                     BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft (raw, json)
Hash identifier:          8fdY1VI9CVTgIRYf3QVCVrWuDuQ1iiiYNq6qJxXwHM8=
Subject key identifier:   C3:04:79:EA:96:67:72:26:DD:D1:6C:CB:98:8B:21:32:57:62:D5:F4
Authority key identifier: 04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7
Certificate issuer:       /CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
Certificate serial:       0197639612F0D1EF7B6C1C2EA7A7234EB6F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
Manifest number:          0498
Signing time:             Thu 12 Jun 2025 10:01:08 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:08 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:08 +0000
Files and hashes:         1: BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl (hash: 5OanLFhuuOkrNZKyrmohYDEP8cmylSKUUiXw4PCejPk=)
                          2: WhtfNl4kPsvSKKPK4a5edmJqBO0.roa (hash: fLmSne41hG7wjVHW396uQUWjNlIxQRVkrNFvdbSceKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:12:f0:d1:ef:7b:6c:1c:2e:a7:a7:23:4e:b6:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
        Validity
            Not Before: Jun 12 10:01:08 2025 GMT
            Not After : Jun 13 10:01:08 2025 GMT
        Subject: CN=c30479ea96677226ddd16ccb988b21325762d5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:8b:14:2f:fe:93:36:8a:aa:75:b5:26:b4:
                    66:84:8f:fc:e0:a5:51:46:5c:88:c8:3a:ab:a8:f8:
                    9b:30:bb:11:f1:a9:70:4e:bd:6e:73:0d:34:33:37:
                    31:7a:95:8b:80:33:1c:1a:67:74:1d:00:9a:70:80:
                    23:a1:c8:3f:1c:c0:95:88:bd:ab:20:51:30:be:8a:
                    3b:ac:23:7d:55:c1:e8:58:34:36:e0:d2:78:23:94:
                    92:a7:98:0e:11:f4:00:21:5d:0b:c6:48:3f:ad:6e:
                    c3:88:fe:cf:7b:31:6b:03:a0:2d:84:2a:c0:e8:78:
                    9f:ff:30:f7:41:93:ce:ce:f0:91:fd:c3:c0:f1:ae:
                    ee:6a:57:72:c0:1a:9f:44:ff:c6:8b:ec:c7:63:28:
                    82:df:5d:61:8d:df:41:af:1e:3f:e0:02:68:49:e3:
                    a2:a2:2f:15:fb:4e:ec:04:17:18:c2:f1:02:43:7e:
                    ad:8a:19:ba:7e:6d:8b:1d:6e:f3:06:45:06:84:30:
                    34:1a:f9:62:7a:65:cb:a8:2a:33:a0:f6:45:d7:d1:
                    7a:51:96:05:ec:0f:fd:38:e4:53:bc:d4:a7:ca:02:
                    b1:89:1c:f8:d0:8b:6a:8a:94:6f:8e:24:7c:7e:4c:
                    cd:12:1a:ae:23:51:12:02:8e:80:2c:b3:ab:f4:0e:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:79:EA:96:67:72:26:DD:D1:6C:CB:98:8B:21:32:57:62:D5:F4
            X509v3 Authority Key Identifier:
                keyid:04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:cb:32:2f:f3:7e:2a:8c:10:73:92:d1:0b:ba:bc:2b:45:
         bf:32:c5:77:ff:44:e3:60:f8:77:6f:33:d7:4c:c8:de:a1:94:
         5f:75:d0:a4:11:ec:fc:7a:6b:c7:e3:bd:f3:9a:fd:8c:00:ff:
         15:aa:90:dc:0f:74:13:de:e8:5a:42:e6:28:2f:63:33:4b:c9:
         fb:60:61:ae:63:a9:df:d8:b4:ea:96:77:c7:4e:3f:40:8f:31:
         60:aa:de:10:cc:ee:4c:9b:9e:ea:05:cd:2c:d9:ac:4e:c5:85:
         7d:77:a8:c7:6f:63:d3:55:95:2c:8e:32:5b:69:5d:94:ef:15:
         be:50:ed:68:4e:30:ce:d6:87:e7:63:76:fb:de:cf:96:8a:7c:
         90:4b:e6:f2:b6:6b:45:ed:6c:78:7c:b2:1c:9c:ee:92:a4:db:
         10:f0:ab:c4:b3:d1:99:e5:ee:dc:f6:18:36:3b:c1:72:46:83:
         ef:11:92:9a:48:67:b2:d3:7d:87:c5:d1:47:aa:48:84:c5:4f:
         b2:52:62:fc:63:ff:84:cf:3a:97:c3:21:18:40:cf:c9:51:f9:
         b4:a6:9b:a3:57:95:db:94:aa:cd:97:ab:70:26:f9:c2:e1:1e:
         b1:cf:f8:47:31:9d:8e:d0:9d:67:bb:a3:d8:2d:87:79:fa:1d:
         f9:be:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:44:11 2025 by rpki-client