Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          hntqE6N+qTfr/vO8/rsbJTC1ZMO2mcNHocaEnmZugv8=
Subject key identifier:   96:D3:3B:58:C7:0B:60:CD:2E:D1:5F:45:D9:BA:71:92:F4:CB:90:0B
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       01974C9FC8A55D9A27475F8BBFCFBBDB4423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          096B
Signing time:             Sat 07 Jun 2025 23:00:29 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:29 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:29 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: 4Grp6ERHwrYpw6d7gHbtwihuLlFQrhjGzW/w1xR1RRk=)
                          2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:c8:a5:5d:9a:27:47:5f:8b:bf:cf:bb:db:44:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Jun  7 23:00:29 2025 GMT
            Not After : Jun  8 23:00:29 2025 GMT
        Subject: CN=96d33b58c70b60cd2ed15f45d9ba7192f4cb900b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:75:fb:56:ce:ad:f3:61:97:48:c2:a8:55:a0:
                    45:2f:6c:60:b1:f8:f6:5a:91:a8:3e:8b:c6:6f:1c:
                    a9:be:17:e2:88:f9:7b:16:ea:70:20:58:5e:09:30:
                    00:58:54:9e:ec:57:51:01:07:76:a0:5e:cc:3c:ac:
                    3a:50:ca:1f:cb:30:2d:42:21:4a:96:bc:58:f7:e4:
                    54:62:7f:a9:bc:98:f6:d4:ab:86:82:0f:cd:2a:34:
                    b4:e7:da:10:c0:fb:0c:20:27:54:b7:46:4a:7d:8f:
                    1c:a5:15:e8:5a:8e:5d:67:15:82:c5:83:2c:38:41:
                    7a:8a:db:f9:d7:39:3b:97:d3:a8:9c:41:c0:f1:ef:
                    fe:79:90:84:82:ae:95:86:00:b1:66:24:64:0f:95:
                    d0:21:81:5a:c5:ed:63:9f:82:c2:06:42:58:d8:8e:
                    51:79:26:3a:e0:27:f7:25:89:0b:a1:6a:95:8e:80:
                    39:f9:67:67:f8:07:58:46:b2:2b:85:d1:0f:86:5b:
                    b8:61:7b:95:ed:4d:0e:b5:2d:e9:ac:dd:5f:ed:2a:
                    1f:a9:c5:24:60:e2:f9:06:b3:11:7c:21:7e:4b:9a:
                    95:97:b1:95:5b:4b:c2:e2:59:e2:bd:e0:3a:4a:af:
                    83:39:ce:59:07:b6:1b:a2:c4:24:41:83:90:af:51:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:3B:58:C7:0B:60:CD:2E:D1:5F:45:D9:BA:71:92:F4:CB:90:0B
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:23:5f:46:04:c7:64:66:15:06:8f:47:9b:2f:73:cb:a9:
         37:ad:5d:77:b0:c5:31:d6:51:4e:65:e3:9e:74:ca:df:ad:d4:
         41:4a:58:be:34:42:c3:17:5c:3a:40:5c:ed:23:ed:f2:78:05:
         e3:06:17:68:70:51:c0:d1:84:c6:8c:3e:9a:7c:fa:cb:b5:e5:
         42:31:24:6c:d1:27:f9:c0:41:e3:f9:5e:33:83:32:90:9a:51:
         09:2c:5b:16:fc:8b:77:c4:58:3e:19:5b:fe:1e:c2:60:8e:79:
         35:2c:10:79:3b:75:f0:9f:ff:8f:e4:06:fa:45:19:6e:7d:ad:
         c8:52:d5:e1:6b:b4:8c:ef:fa:54:b3:68:68:90:32:30:ca:c0:
         cf:17:71:cc:ef:ac:f6:e2:b7:bc:1d:6f:49:4c:9c:99:84:46:
         7b:05:ff:c6:7c:ea:de:a0:60:8b:9d:02:be:1c:8a:69:92:2e:
         78:16:ac:ed:f9:af:20:a0:0b:15:e5:88:e6:87:3a:6b:37:75:
         8e:a4:3f:58:77:07:19:ea:d4:18:86:47:32:fd:21:c3:4e:9b:
         1e:3c:02:c7:34:e0:02:61:f5:a1:0e:66:7b:b9:4b:cf:1d:d2:
         42:93:5b:6f:0b:e0:83:8c:f8:47:17:df:88:1f:0a:cd:19:be:
         3c:9f:d2:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMn8ilXZonR1+Lv8+720QjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjM5NDg0NTMyNTA4NGJiOWVmNzhkNGY3MTdmYzRiNTQ1
ZmE3ZWQwHhcNMjUwNjA3MjMwMDI5WhcNMjUwNjA4MjMwMDI5WjAzMTEwLwYDVQQD
Eyg5NmQzM2I1OGM3MGI2MGNkMmVkMTVmNDVkOWJhNzE5MmY0Y2I5MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3X7Vs6t82GXSMKoVaBFL2xgsfj2
WpGoPovGbxypvhfiiPl7FupwIFheCTAAWFSe7FdRAQd2oF7MPKw6UMofyzAtQiFK
lrxY9+RUYn+pvJj21KuGgg/NKjS059oQwPsMICdUt0ZKfY8cpRXoWo5dZxWCxYMs
OEF6itv51zk7l9OonEHA8e/+eZCEgq6VhgCxZiRkD5XQIYFaxe1jn4LCBkJY2I5R
eSY64Cf3JYkLoWqVjoA5+Wdn+AdYRrIrhdEPhlu4YXuV7U0OtS3prN1f7SofqcUk
YOL5BrMRfCF+S5qVl7GVW0vC4lniveA6Sq+DOc5ZB7YbosQkQYOQr1EOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbTO1jHC2DNLtFfRdm6cZL0y5ALMB8GA1UdIwQY
MBaAFAdjlIRTJQhLue941PcX/EtUX6ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQt
MzRiN2QxN2ZmNzE1LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTk2YWEtMmRjYi00YzQzLTkzZmQtMzRiN2QxN2ZmNzE1
LzEvQjJPVWhGTWxDRXU1NzNqVTl4ZjhTMVJmcC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0cjX0YE
x2RmFQaPR5svc8upN61dd7DFMdZRTmXjnnTK363UQUpYvjRCwxdcOkBc7SPt8ngF
4wYXaHBRwNGExow+mnz6y7XlQjEkbNEn+cBB4/leM4MykJpRCSxbFvyLd8RYPhlb
/h7CYI55NSwQeTt18J//j+QG+kUZbn2tyFLV4Wu0jO/6VLNoaJAyMMrAzxdxzO+s
9uK3vB1vSUycmYRGewX/xnzq3qBgi50CvhyKaZIueBas7fmvIKALFeWI5oc6azd1
jqQ/WHcHGerUGIZHMv0hw06bHjwCxzTgAmH1oQ5me7lLzx3SQpNbbwvgg4z4Rxff
iB8KzRm+PJ/SPg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:13:40 2025 by rpki-client