Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          +haIxSG/Mc0mOTYr5wkU1eitL89qNhr/NLiLkqW/vrc=
Subject key identifier:   2C:6E:BF:1F:2A:76:44:AC:BF:F2:53:4A:CE:3A:D8:A1:ED:6A:C1:12
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       01974FA1630C19F27512A6B8C96A8BC3E98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          1584
Signing time:             Sun 08 Jun 2025 13:01:06 +0000
Manifest this update:     Sun 08 Jun 2025 13:01:06 +0000
Manifest next update:     Mon 09 Jun 2025 13:01:06 +0000
Files and hashes:         1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
                          2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: s83a9oPFs8UyDC7N6Hjwa+kGVDHmqokF0W9uzO+cr7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 11:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:63:0c:19:f2:75:12:a6:b8:c9:6a:8b:c3:e9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Jun  8 13:01:06 2025 GMT
            Not After : Jun  9 13:01:06 2025 GMT
        Subject: CN=2c6ebf1f2a7644acbff2534ace3ad8a1ed6ac112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:00:14:67:97:4e:80:81:0e:f3:ae:88:d0:
                    52:96:4b:ef:89:ed:30:b2:98:8c:b2:c0:a7:68:0a:
                    e1:2c:ff:81:9e:a7:22:40:6e:ca:f4:f8:b9:54:54:
                    40:5a:fa:47:c5:44:d2:95:de:da:d0:4f:d1:fc:66:
                    85:ff:b5:01:36:c4:48:2f:e2:50:61:c8:74:b3:0e:
                    6e:57:8e:62:93:d5:9d:28:df:50:0d:84:b6:99:e1:
                    d8:18:17:4d:62:05:e1:54:ed:88:f3:0f:d5:f8:03:
                    b8:68:bd:06:77:20:94:a8:8b:c4:3f:84:df:f6:b6:
                    9f:94:4d:52:76:81:78:e6:5f:ae:1f:2a:a8:f7:fd:
                    99:01:34:b9:6a:82:87:7d:98:47:b2:ac:ce:52:4a:
                    8a:f0:99:67:52:b7:43:30:11:c8:f9:92:ae:62:80:
                    6f:28:34:5c:41:86:ac:1b:0a:62:76:34:98:e9:95:
                    76:7c:ed:58:5b:43:1a:d2:14:66:7d:64:2e:b6:3c:
                    a0:90:09:be:ff:bc:62:fb:e6:cf:7d:e4:99:ca:b0:
                    af:15:7f:67:71:ce:d6:f7:c2:34:1e:37:2b:4b:78:
                    46:b5:fc:a2:70:e2:a6:ff:8c:d4:60:9d:1a:be:36:
                    fc:90:7d:7c:30:09:08:a3:dd:fd:15:49:ff:fa:be:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:BF:1F:2A:76:44:AC:BF:F2:53:4A:CE:3A:D8:A1:ED:6A:C1:12
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:30:bf:8e:df:92:a0:65:3e:f6:f0:78:0b:67:f9:df:79:
         f2:fd:c5:c4:31:7a:51:ec:a5:93:71:24:9a:a9:37:c3:d7:c1:
         3d:1b:f9:ca:c1:2d:44:c0:3e:ad:f9:61:32:5d:46:18:70:d9:
         73:26:24:4a:8a:fe:cb:a4:17:96:9b:eb:88:6b:d8:9a:2a:17:
         f6:bc:08:3e:3b:a6:75:2e:ec:89:29:90:d0:68:a9:fa:98:af:
         7f:58:7f:84:82:20:a1:df:88:ec:04:f5:f9:fb:0d:f4:e4:68:
         2b:e0:0d:ff:f5:49:58:77:70:e2:cd:9a:4a:31:54:54:06:19:
         d2:83:b9:a9:4e:d5:48:8a:6d:4d:ea:51:53:29:38:3b:5b:14:
         df:78:aa:50:cd:35:94:f5:c0:eb:44:96:10:bd:68:b8:37:ba:
         3d:4b:79:10:16:a4:f2:f5:15:cd:9a:af:99:1c:04:19:f1:91:
         8e:47:55:82:b3:46:60:bc:6e:da:a4:57:bc:7b:3b:57:08:90:
         f3:b9:55:37:3d:86:40:15:f3:53:77:21:c5:0b:1b:87:4b:6a:
         a6:77:4b:d0:29:3d:78:23:12:a5:4f:ae:f3:15:43:d3:41:62:
         c8:31:16:81:31:8f:37:67:78:e0:e0:68:76:4e:c7:ec:ea:1b:
         e8:d5:02:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:38:40 2025 by rpki-client