Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File:                     BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier:          hBt24Y4qEEWqFmjLVL5B5wF8KLkIeswIGo+scZd78cs=
Subject key identifier:   6C:B0:19:0A:A0:82:1D:7E:33:F2:16:96:D0:50:A1:40:79:79:AE:24
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer:       /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial:       01976F999109D36EE08278ACDC3D5C3C4518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 18:00:24 +0000
Manifest this update:     Sat 14 Jun 2025 18:00:24 +0000
Manifest next update:     Sun 15 Jun 2025 18:00:24 +0000
Files and hashes:         1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: 4KRc5oF+I6PbkMj0mfhSF+Z+SngEiA9vS2/GZrLoCc4=)
                          2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:99:91:09:d3:6e:e0:82:78:ac:dc:3d:5c:3c:45:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
        Validity
            Not Before: Jun 14 18:00:24 2025 GMT
            Not After : Jun 15 18:00:24 2025 GMT
        Subject: CN=6cb0190aa0821d7e33f21696d050a1407979ae24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:f6:f8:7d:92:82:d5:0d:e1:e3:dc:fd:1a:
                    41:bc:b6:50:71:59:36:42:1a:87:cd:26:90:5f:9d:
                    27:84:21:8c:2d:59:9c:f3:e6:87:b0:c1:91:c6:96:
                    bf:17:8a:29:ce:75:bd:ca:55:d6:27:17:30:52:78:
                    22:ae:db:bb:bc:10:cd:cb:7c:34:73:30:e8:a3:f1:
                    f8:40:b7:af:26:94:6d:47:72:0d:8e:85:45:06:8f:
                    2c:48:8a:6a:cc:53:26:29:be:64:9b:64:83:20:71:
                    32:c4:dc:28:4b:25:b3:c6:c0:72:db:01:e7:53:a6:
                    90:d9:5d:95:44:17:85:a7:62:c5:30:b2:6b:02:04:
                    6c:f2:4f:c7:53:dd:56:eb:79:ca:1a:86:a5:d1:10:
                    ab:1a:90:e1:a3:5b:73:8d:1a:ca:47:ec:25:97:fa:
                    c8:3d:33:6b:36:e3:a3:00:76:a6:bb:fc:d2:d0:f0:
                    e5:87:82:5d:2d:50:e9:e7:aa:e5:4c:62:73:76:14:
                    98:2c:08:fb:19:a5:e6:1b:48:36:0c:88:2c:2c:3d:
                    71:7b:3f:83:8d:c6:03:f8:f6:e9:33:9b:93:c2:96:
                    6d:b3:a1:16:55:20:e5:4e:72:da:e6:bc:c7:a3:cf:
                    0f:59:aa:83:7d:ac:d2:5b:d5:0e:91:62:0b:2d:a8:
                    d9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:19:0A:A0:82:1D:7E:33:F2:16:96:D0:50:A1:40:79:79:AE:24
            X509v3 Authority Key Identifier:
                keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c8:9e:1e:fc:b1:34:f8:2a:5d:1d:15:46:3b:43:f6:3a:e9:
         86:93:3e:33:e7:a5:11:a3:92:62:a7:81:21:f5:ed:c6:57:31:
         d1:f7:de:bb:c4:72:53:c3:48:63:94:b4:ec:a8:6e:93:6b:87:
         7d:04:92:8e:59:70:f3:7e:1e:cd:02:da:fb:29:41:c0:6e:94:
         99:78:77:5a:a6:f1:1e:bd:86:7b:12:8b:b8:5e:db:9c:e0:54:
         5a:7a:00:7a:93:5d:23:29:10:f6:45:77:0f:41:a4:56:42:b7:
         bf:4b:34:62:db:1c:d0:11:70:71:6c:71:bb:ce:29:0f:d2:2f:
         bd:9d:c1:b3:6c:a2:34:e9:b3:69:be:52:7d:ed:a8:c3:96:6e:
         0e:b9:3e:7b:e4:0f:94:20:ce:9d:c9:80:a7:da:08:94:5b:ec:
         c1:f3:28:eb:82:e3:2a:7e:7c:8e:07:e3:99:9a:b4:c4:c4:04:
         a1:ba:6b:a4:fb:08:b9:07:65:5e:da:37:d1:bc:b4:6a:00:45:
         e0:04:26:06:cb:e5:ec:a9:e9:aa:eb:77:90:79:8c:5e:74:57:
         28:9a:01:ec:9c:f2:93:a9:78:1c:d5:a7:df:0b:f6:ac:63:6c:
         82:76:81:a1:db:54:94:39:67:10:69:f1:34:ed:4e:09:49:db:
         07:5f:b9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:11:57 2025 by rpki-client