Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          Kg0tfiYo5lepLc2wpuQOA2s3Ewv6NNjWdgFlij80TLs=
Subject key identifier:   C1:F7:1D:3B:F6:55:88:8E:BE:7A:DD:45:BC:42:AD:33:B7:3A:94:67
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01974A7AAD9C05F989C6539C9DFF1B6AB985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          026F
Signing time:             Sat 07 Jun 2025 13:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:43 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: aKs2TilkikcmfzG5NQ+NgIKaFrKpOt0D8SVxyCllNfw=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ad:9c:05:f9:89:c6:53:9c:9d:ff:1b:6a:b9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Jun  7 13:00:43 2025 GMT
            Not After : Jun  8 13:00:43 2025 GMT
        Subject: CN=c1f71d3bf655888ebe7add45bc42ad33b73a9467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5a:79:3f:62:72:30:1c:c9:4f:85:1d:9c:59:
                    f1:c7:1a:99:4f:9a:b8:ed:17:41:67:ae:c4:a5:21:
                    eb:c0:d4:c3:3a:95:fa:6a:cd:02:ba:b6:d8:15:1e:
                    93:e0:ff:af:98:e1:c0:3b:7e:5b:07:4d:2c:60:47:
                    e0:d6:11:be:a1:8c:e8:9c:53:6f:fe:ce:a9:02:45:
                    67:18:ca:8d:e9:90:7c:cc:8c:9c:5a:ec:e7:44:24:
                    8e:48:c5:43:cb:03:fc:55:56:f0:7c:25:e9:5f:64:
                    54:95:97:08:fd:e6:86:bd:e2:9f:3a:b5:46:c9:a7:
                    94:2f:90:b9:f8:d7:57:10:8f:3a:78:90:5b:f8:34:
                    20:53:3e:7a:2a:82:99:b0:a9:33:b1:6b:45:6b:d7:
                    9a:14:7e:a6:15:3c:37:4c:d9:d5:2e:80:fa:78:20:
                    c2:dc:0f:0d:e0:e3:55:95:92:8e:c5:19:d6:56:a2:
                    93:01:39:9b:87:e9:ad:aa:fb:d3:61:0b:0b:b8:31:
                    9d:73:e5:25:e8:a8:b7:16:4e:aa:45:5c:3f:e3:68:
                    af:31:2f:36:db:3b:c7:28:6f:ba:fb:e1:7a:b7:5d:
                    6d:68:b0:0b:2a:a2:6c:c1:42:82:03:b9:88:21:2b:
                    1a:a5:b5:7b:87:3f:cf:91:5d:ef:90:17:5a:7f:ee:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:1D:3B:F6:55:88:8E:BE:7A:DD:45:BC:42:AD:33:B7:3A:94:67
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ec:f6:67:19:10:0e:ad:02:70:4e:e6:55:31:13:90:d5:4a:
         c1:51:ca:28:07:b7:98:3c:18:35:f1:12:58:fe:2e:11:62:bb:
         3d:9e:fb:20:0c:5f:33:61:e0:e0:e2:2f:44:9c:ab:8e:87:c8:
         9e:35:46:7c:32:19:19:6d:d3:93:58:65:c5:23:ee:96:8d:20:
         83:52:65:82:ab:8a:0d:32:03:c2:d2:26:6a:22:56:92:28:11:
         2c:5f:0f:b3:d7:e5:99:23:b4:2f:40:2a:7b:ca:a8:a2:8b:99:
         28:20:af:c9:fb:36:a0:98:d3:a0:13:87:78:83:75:ff:04:3c:
         11:ea:04:e7:b0:9c:53:66:a8:9e:30:d0:94:2b:fb:80:df:3b:
         8e:c6:70:25:b2:8a:05:37:5e:04:b9:61:28:fa:e0:ce:12:ce:
         98:1e:85:e6:b1:6a:8f:66:23:99:65:61:f7:0b:5f:8d:e9:36:
         2d:b2:84:57:51:cc:46:f1:62:af:d7:79:41:4f:bd:50:62:fb:
         8f:e8:ea:10:dc:71:3d:b2:b3:8e:0f:5a:ab:bd:c2:ae:35:3c:
         8b:8e:0f:bd:1e:cd:0a:1d:57:ff:c6:ff:d9:6d:de:29:3b:e1:
         e6:3b:4c:c0:f8:2a:39:3c:9f:a7:fe:86:06:6c:d7:46:0c:64:
         90:33:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:03:16 2025 by rpki-client