Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          M3wX2A3sqV2UhQ5SpfEabV/cGILy5yNbMmhbAwDLC8I=
Subject key identifier:   C7:8C:AB:57:DD:F0:73:DD:51:30:F3:63:C2:72:6A:36:AE:69:FD:1D
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       019747B119A2E1DC01F496F265FF49BBAE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          065F
Signing time:             Sat 07 Jun 2025 00:01:17 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:17 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:17 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: oCCPtVwSthKqVYkT11JVzpt+UnH6ZPsoEJDWdWAnc68=)
                          2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:19:a2:e1:dc:01:f4:96:f2:65:ff:49:bb:ae:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Jun  7 00:01:17 2025 GMT
            Not After : Jun  8 00:01:17 2025 GMT
        Subject: CN=c78cab57ddf073dd5130f363c2726a36ae69fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:96:e3:21:e8:ad:92:b2:08:de:ac:72:2e:
                    93:c8:41:b8:7f:b4:f4:62:85:ae:6b:a3:55:75:89:
                    4b:50:82:fd:41:cd:18:39:6f:e8:18:df:57:a3:ef:
                    b6:f4:a1:3d:15:b3:69:ff:6b:d1:76:17:7b:ee:13:
                    8d:a0:a7:94:6d:f9:87:95:6a:9d:ae:d6:92:74:44:
                    d5:87:f3:84:15:40:78:16:fa:53:87:ca:50:0e:97:
                    39:62:95:92:c1:3b:96:15:25:07:26:57:f7:9d:a3:
                    f8:ca:2e:37:d0:d9:ca:54:88:88:41:17:c3:b7:86:
                    d7:15:8b:0a:66:60:2e:8c:19:77:07:fe:2d:fc:2a:
                    4c:cd:c4:22:42:fd:d5:05:19:c9:0f:49:0e:bb:24:
                    ae:cf:8e:b0:f4:2d:eb:a5:83:22:32:80:48:f6:9e:
                    86:23:22:0a:36:b1:bf:8a:20:22:8e:c4:a4:73:32:
                    fb:a0:17:11:5f:8a:95:6f:ec:f2:a5:e7:a8:7a:73:
                    2a:a5:ba:7c:5e:33:65:c2:61:8a:7d:75:11:25:16:
                    e5:4d:ba:c9:c4:01:e4:1b:55:11:cb:12:94:ab:a1:
                    b5:7c:0e:02:49:64:af:69:77:af:b0:93:06:a3:4c:
                    c8:0e:75:f3:10:fa:23:2d:28:d5:3e:4c:3d:49:3f:
                    49:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:AB:57:DD:F0:73:DD:51:30:F3:63:C2:72:6A:36:AE:69:FD:1D
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:37:02:04:e8:57:05:4c:2b:02:ff:8f:bf:10:83:e8:e3:f1:
         b4:07:2c:24:5b:7d:77:01:4e:ad:a2:ec:0d:77:4b:0b:0e:81:
         67:02:f6:b6:ac:70:79:20:71:3d:91:b4:4d:9a:a6:2e:43:03:
         70:d0:c4:93:f7:7d:45:8c:f2:06:29:12:89:27:b0:88:f0:7a:
         9b:8e:63:ca:24:14:9c:38:75:cc:34:3b:7e:be:2a:68:4b:43:
         c0:eb:d8:ce:81:d6:44:31:5f:a3:a1:09:65:d3:95:27:b8:f8:
         f8:6f:a6:c5:5b:35:cc:7e:45:d7:47:c8:ec:d0:29:6c:84:04:
         84:2d:97:7a:e6:4f:94:5c:09:e6:8d:60:b3:7b:2b:e4:e2:53:
         c9:05:8b:1f:db:0c:fb:55:7f:e9:13:96:d6:ee:11:e3:c1:b4:
         5f:6a:ff:fd:ad:4e:42:67:e3:d2:68:bf:e9:a1:ab:e8:c1:3a:
         84:aa:2e:cc:f5:ac:68:ed:5f:25:96:46:1f:4e:c6:ce:55:fe:
         c1:3a:45:bd:aa:cd:6d:30:10:4a:f4:59:ef:a1:f0:28:4f:a0:
         a0:77:fe:94:35:05:d4:bf:c5:9e:f0:9f:31:a6:89:8c:29:18:
         25:e4:b6:a0:56:27:0b:ae:2a:5a:b4:d8:c9:6d:f2:e5:0f:c9:
         00:a5:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:26 2025 by rpki-client