Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
File:                     BesSFXMXvsWP1B2S_xBbNhhkpvI.mft (raw, json)
Hash identifier:          i71pxIyVigcpFBRhcoQDS3voIqkS5bnt3nMew1kz9dE=
Subject key identifier:   14:2A:EE:0C:8F:24:46:30:76:1F:63:25:77:B8:33:A6:0B:40:74:CB
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Certificate issuer:       /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial:       019748FA532C9CFC2CE00043804D84F16EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
Manifest number:          085B
Signing time:             Sat 07 Jun 2025 06:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:54 +0000
Files and hashes:         1: BesSFXMXvsWP1B2S_xBbNhhkpvI.crl (hash: Rmj1cXbOqiJr0I58mbrhCqgUX2GmJYvn3Hmhu2oiYdM=)
                          2: GmOEGytdPBI0M6M4F6yAHlQDNk4.roa (hash: rCxXhyimVf47IInvL9Aht6Onq89mIZd51JHlO7lZEGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:53:2c:9c:fc:2c:e0:00:43:80:4d:84:f1:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
        Validity
            Not Before: Jun  7 06:00:54 2025 GMT
            Not After : Jun  8 06:00:54 2025 GMT
        Subject: CN=142aee0c8f244630761f632577b833a60b4074cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:12:50:95:59:0d:b1:7c:6a:b7:8f:ea:a3:
                    cf:91:97:a5:0b:b9:8c:35:e7:c8:00:e0:0d:99:f2:
                    ad:fe:2b:b5:19:b9:53:ff:ff:5b:28:5f:70:89:40:
                    8c:65:82:85:13:b6:38:2d:a9:1f:62:85:be:b6:ef:
                    9c:5c:35:37:32:00:28:0d:24:00:05:d2:bd:4d:84:
                    d9:b8:94:37:64:dd:72:52:80:fe:e8:d0:e2:bc:a6:
                    c4:b7:09:5d:b7:32:84:ea:d4:83:6b:58:d2:a1:d3:
                    24:9d:56:c0:03:ab:fb:97:3e:7b:b2:81:07:1e:9c:
                    16:81:85:7c:88:af:bd:2e:45:35:cd:45:4b:f1:83:
                    2c:36:67:7e:30:3f:96:e3:24:cf:bf:d8:b5:47:86:
                    11:90:e5:63:aa:f3:8c:83:60:bb:d5:b6:c9:b1:54:
                    5c:71:ba:28:a5:f3:00:ae:ed:c9:09:a0:d4:13:34:
                    0a:cb:6a:98:ba:41:3b:0f:15:98:6c:00:9d:44:c5:
                    1b:40:b4:67:5c:da:1e:7b:b4:52:28:19:26:0b:4c:
                    99:ca:4e:80:26:01:00:ea:10:d9:17:3e:57:3b:9d:
                    83:9f:5f:6c:b0:42:09:52:ce:2d:e4:d9:a5:78:08:
                    0d:b5:2d:94:a0:a6:1e:cc:b7:57:6b:ac:6b:b0:e5:
                    a0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:EE:0C:8F:24:46:30:76:1F:63:25:77:B8:33:A6:0B:40:74:CB
            X509v3 Authority Key Identifier:
                keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5a:43:a7:d5:fe:0a:3c:67:99:c8:59:76:3e:f8:f9:12:7c:
         9e:71:88:1b:4c:5c:24:a0:da:de:30:30:be:11:09:7b:6d:23:
         10:a5:8e:68:f4:dc:55:07:24:c1:25:95:aa:91:5e:52:aa:1e:
         26:cc:a3:36:df:f2:b2:78:26:03:57:6f:7a:3e:73:95:14:4d:
         7e:e1:3e:79:7e:0c:51:9c:7c:28:2f:db:2f:f0:84:43:67:32:
         b8:ba:6f:9b:c7:9c:42:c7:c6:4d:72:05:0d:18:f6:24:56:b5:
         82:8f:9f:e4:f4:8d:6c:7b:34:e0:d1:0e:87:d1:6e:f0:de:6e:
         20:6f:88:29:e3:b4:c9:8c:8b:6a:dd:36:6a:5b:77:b7:c3:d2:
         fc:26:dc:97:2d:53:b3:f1:b8:d1:c8:8f:a1:47:af:0b:df:53:
         80:60:91:30:15:6f:19:4a:fa:04:56:59:75:f8:e7:2f:ff:76:
         e2:71:77:5e:fa:3b:56:9b:7d:39:dd:9c:4a:3b:64:da:40:91:
         81:01:21:55:c9:4d:0c:e5:15:12:2d:d1:e0:e1:09:4f:54:a0:
         74:d8:37:a0:78:db:b0:d1:93:f7:1d:8f:5f:23:c5:e3:4d:34:
         f8:3d:99:a7:68:ee:b1:26:54:e5:e3:1e:15:e6:39:ee:8a:bc:
         0e:a7:78:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:21 2025 by rpki-client