Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
File:                     Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json)
Hash identifier:          Y1epxaF4cyeSglHU4j5/oJs9EhEXFBC0HwthRmowEsI=
Subject key identifier:   18:E6:AF:8F:5C:BC:92:CC:46:F4:A8:84:7E:E0:E9:53:F1:FF:1C:D0
Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98
Certificate issuer:       /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
Certificate serial:       019747B10C71A81F657FD5BE18466FA72CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
Manifest number:          019E
Signing time:             Sat 07 Jun 2025 00:01:14 +0000
Manifest this update:     Sat 07 Jun 2025 00:01:14 +0000
Manifest next update:     Sun 08 Jun 2025 00:01:14 +0000
Files and hashes:         1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: YJe8AwV3ztDJ8ZVXIdCDrDMsrN751bXrmZmKOzrliJU=)
                          2: aTqNBiMtHyqY4sjo2vUby0yJMKk.roa (hash: 8tR80jRMgENDFDI+mB0B/a9/v+rAAXYdo53Fd7KchX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:b1:0c:71:a8:1f:65:7f:d5:be:18:46:6f:a7:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98
        Validity
            Not Before: Jun  7 00:01:14 2025 GMT
            Not After : Jun  8 00:01:14 2025 GMT
        Subject: CN=18e6af8f5cbc92cc46f4a8847ee0e953f1ff1cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f4:7d:a7:7d:5c:e6:01:86:80:5e:0e:4d:8b:
                    49:b9:9a:94:6b:7e:ae:38:50:b7:03:b4:f7:58:ae:
                    ed:4e:38:c9:8b:60:11:9c:7c:72:d5:c9:19:22:47:
                    41:e4:d8:6f:d1:8c:24:c9:b5:f1:35:f4:64:db:ae:
                    2a:b3:eb:65:41:a5:a9:e5:e3:30:b3:f2:73:18:80:
                    1e:0b:84:02:21:d0:ff:2f:e4:11:3c:c1:21:cc:af:
                    45:19:79:31:bc:db:1a:f7:d4:64:ee:ba:3e:a5:8b:
                    dc:59:cf:f1:82:8d:28:4b:43:89:f3:45:fb:41:0e:
                    e6:23:73:4b:86:9e:42:78:33:61:66:81:95:0e:b9:
                    e1:14:b1:da:56:5a:97:0c:f3:bc:5a:28:9b:9b:f3:
                    19:d0:97:be:e3:ae:12:2f:82:c2:60:a3:12:23:39:
                    34:c9:88:73:8a:83:35:9e:e6:8d:ca:8c:8f:c4:65:
                    78:e0:48:29:1c:57:96:d9:56:d9:54:6c:07:34:96:
                    81:7c:57:08:c6:28:cc:9a:09:fe:44:17:af:07:dc:
                    35:b3:05:0e:c4:0b:6a:d1:69:06:66:f6:37:35:62:
                    bb:98:93:5e:38:47:ab:c8:2c:54:86:21:a6:4e:1a:
                    be:ad:fa:65:dc:06:51:fb:4d:44:3e:06:d0:2a:d0:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E6:AF:8F:5C:BC:92:CC:46:F4:A8:84:7E:E0:E9:53:F1:FF:1C:D0
            X509v3 Authority Key Identifier:
                keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ed:1f:ef:6c:88:25:8a:b9:ff:34:77:03:b2:23:76:5f:a3:82:
         16:4a:55:62:cf:14:16:65:cb:a5:9d:0b:de:ae:ae:5d:2d:8f:
         eb:eb:22:60:66:cd:53:2b:5b:81:2c:35:e3:1b:ce:bf:78:e5:
         1e:56:05:6e:94:75:ba:a5:d1:ba:c3:34:8d:32:41:a0:2a:be:
         fb:99:f7:f8:c6:82:21:d4:85:d5:3a:8a:69:d1:57:37:65:a0:
         fa:73:71:e3:e6:03:29:b4:13:6f:83:95:ac:92:f6:82:2a:a4:
         7e:47:08:af:bb:ef:39:2c:bd:a8:e8:3d:3d:a0:5b:f8:8d:f5:
         42:3e:4f:b9:8c:b2:02:d0:7e:4b:6b:d8:6f:aa:83:a6:ac:95:
         6e:19:eb:98:17:a3:fe:98:4f:30:0f:17:2b:ae:46:72:e2:7a:
         9e:1b:04:ec:49:6e:32:48:e0:5b:22:50:ae:cb:80:b2:a6:1f:
         14:77:ac:13:78:14:32:63:9f:8f:f5:57:c8:43:07:5c:8f:b3:
         db:32:b5:30:6e:76:ea:22:88:90:26:53:30:1f:85:cb:55:c4:
         dd:e0:db:09:50:83:be:bf:95:db:2c:74:33:0d:1b:77:a8:54:
         dd:84:1d:e7:4a:31:7c:58:9b:7a:6a:3c:03:35:84:d4:a1:e5:
         40:08:e6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:04:34 2025 by rpki-client