Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
File:                     BkhNH1fbDMIyb6pT06eq0mjbwmY.mft (raw, json)
Hash identifier:          w1Qp/Zq6ANjotkDRiOXM6L6prXYRDsQ5dfdAjGkMaEs=
Subject key identifier:   99:91:F9:BF:04:47:80:93:A9:5E:BF:55:C0:32:E5:77:69:9B:FF:7D
Authority key identifier: 06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66
Certificate issuer:       /CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
Certificate serial:       01974E8E1CA72E9E11AA17C3F73FFB86E2B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
Manifest number:          157E
Signing time:             Sun 08 Jun 2025 08:00:25 +0000
Manifest this update:     Sun 08 Jun 2025 08:00:25 +0000
Manifest next update:     Mon 09 Jun 2025 08:00:25 +0000
Files and hashes:         1: BkhNH1fbDMIyb6pT06eq0mjbwmY.crl (hash: TC7j8ow/UvS0mBZX9hDxvdzeIGhbXr3S/cdpPWANU9U=)
                          2: wjXBOQcWQ-FZfNOvsXQ1F4lPlGw.roa (hash: E+xrzCXzCwEyErrE4D/BReffI2+8855YllSEHagiBtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 08:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:8e:1c:a7:2e:9e:11:aa:17:c3:f7:3f:fb:86:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06484d1f57db0cc2326faa53d3a7aad268dbc266
        Validity
            Not Before: Jun  8 08:00:25 2025 GMT
            Not After : Jun  9 08:00:25 2025 GMT
        Subject: CN=9991f9bf04478093a95ebf55c032e577699bff7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:91:1d:16:08:f7:de:d2:53:96:8e:bc:23:53:
                    78:fb:54:56:83:81:8d:79:88:ba:c0:76:d0:ad:f4:
                    93:e6:0e:2c:87:d0:61:4b:29:76:20:81:5b:5a:f1:
                    dd:36:c8:65:91:39:21:85:76:89:26:17:15:48:52:
                    73:cd:e2:60:66:bd:99:6e:44:47:dc:94:62:8e:d4:
                    cc:d7:55:18:b8:f2:98:d6:3f:d2:ab:69:ae:7d:a6:
                    0d:8b:7d:d6:95:27:33:ff:7e:ed:81:6a:f2:67:6d:
                    ad:7a:0f:df:99:24:13:92:c1:da:56:08:69:20:30:
                    9f:68:c9:22:d7:4a:86:f8:37:cd:b2:f6:8b:e2:f3:
                    94:52:39:64:4a:52:af:ad:b8:1b:94:18:42:8a:52:
                    ba:a8:1c:db:09:b0:ae:70:ce:ab:fa:f1:63:f1:20:
                    13:69:d2:40:0b:7f:05:b9:d9:29:4a:8a:6c:6c:2f:
                    fd:a6:92:4b:90:86:24:f4:4e:94:94:64:4d:2f:16:
                    cb:63:8f:52:5d:8d:2f:bf:d0:ae:3a:28:46:a2:f0:
                    3f:29:23:12:d4:73:63:78:51:52:1c:69:5f:91:f5:
                    78:41:62:50:53:2b:52:d8:35:e1:ec:dc:93:9d:b6:
                    6d:7c:1d:0e:a2:e8:18:fa:2a:7f:a2:37:8e:a6:37:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:F9:BF:04:47:80:93:A9:5E:BF:55:C0:32:E5:77:69:9B:FF:7D
            X509v3 Authority Key Identifier:
                keyid:06:48:4D:1F:57:DB:0C:C2:32:6F:AA:53:D3:A7:AA:D2:68:DB:C2:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkhNH1fbDMIyb6pT06eq0mjbwmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/702829-0d8e-49db-84ae-04925194c5e6/1/BkhNH1fbDMIyb6pT06eq0mjbwmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:c0:d2:5d:1e:0d:96:cc:2e:b8:f6:ea:1a:c1:f0:31:d2:
         b6:c5:44:80:97:64:f3:28:1b:82:34:ac:35:de:1d:84:99:c4:
         31:c3:30:a7:e9:e5:75:e0:cf:aa:86:62:f1:2e:0d:ad:7d:8a:
         be:cd:6a:f8:e4:3e:0a:fe:74:5f:90:ce:ee:18:34:7f:b0:0d:
         de:82:4b:fb:07:84:d5:04:ac:6e:25:d3:b3:a0:b9:c8:61:f0:
         64:1e:d1:75:06:7d:25:f3:bd:60:17:d2:38:a4:97:39:40:0f:
         56:e2:73:a5:d5:d1:70:41:30:d3:3f:2c:3b:65:23:75:89:28:
         24:3d:43:8b:32:89:2f:44:77:b3:8a:6a:20:94:bb:a5:e5:6f:
         4d:3d:f6:5c:cd:16:68:23:70:23:6b:ba:8e:9c:ff:c7:f0:a2:
         a1:cc:c8:ca:24:1f:b1:5b:85:31:f6:ef:f1:57:32:53:15:a8:
         11:7a:9b:d4:1b:af:4e:40:db:07:2c:ba:04:40:00:29:75:c6:
         fb:ef:e5:ac:11:50:a6:d0:a8:2f:86:d9:41:48:3c:9e:a4:3f:
         75:1b:1b:70:80:9c:da:a2:f4:0f:fc:db:74:ab:39:17:06:a7:
         ea:f4:d6:76:38:7d:d6:fb:05:5b:88:88:10:61:98:28:c5:8e:
         c8:3b:5d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:40:57 2025 by rpki-client