Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          LlALW9yjIRR6cdmID/ei3Md7Bx1N1E3G1Pr+MGWFcyI=
Subject key identifier:   13:17:47:DF:77:BE:36:74:2A:E3:4B:D9:1B:23:EA:65:07:1C:9F:19
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       01975B6E10145137A2C4FB237CD928310236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          129B
Signing time:             Tue 10 Jun 2025 20:00:29 +0000
Manifest this update:     Tue 10 Jun 2025 20:00:29 +0000
Manifest next update:     Wed 11 Jun 2025 20:00:29 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: TWv0hh1WW0IMMl26WWYwwOKzKHcqq77nubzMAYn0Pzc=)
                          2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=)
                          3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=)
                          4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=)
                          5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=)
                          6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=)
                          7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5b:6e:10:14:51:37:a2:c4:fb:23:7c:d9:28:31:02:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jun 10 20:00:29 2025 GMT
            Not After : Jun 11 20:00:29 2025 GMT
        Subject: CN=131747df77be36742ae34bd91b23ea65071c9f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ca:04:24:78:3b:16:41:01:88:22:3a:2b:5b:
                    6c:3d:0e:2f:70:d9:f3:a7:7e:fe:f3:47:71:65:f0:
                    d6:8d:44:96:69:63:44:8e:ea:27:bd:99:c8:0c:f3:
                    d6:4f:48:da:a8:40:64:93:fa:b8:57:18:81:ea:ba:
                    90:82:ed:87:ae:3e:ce:b9:73:f6:b7:b7:98:18:40:
                    56:08:77:e5:70:0c:7f:73:e9:dc:63:fc:6a:22:23:
                    39:5b:0a:03:11:02:65:cb:74:65:17:4b:ea:98:34:
                    2c:d1:67:3e:47:70:b9:ba:ed:73:33:d4:ee:10:62:
                    c5:3e:06:17:7b:81:60:f8:25:87:85:b1:f0:e6:80:
                    32:97:02:e1:27:31:d0:f1:7b:d6:4e:bd:da:ef:8d:
                    12:cc:d0:d2:0b:5e:6a:52:a8:a6:27:76:51:70:40:
                    c1:66:c8:ba:20:bb:98:fe:56:0f:14:df:07:50:25:
                    ca:a7:4c:fb:17:dc:51:0c:28:99:83:6a:30:3c:d8:
                    d6:0e:e9:72:a0:b9:56:43:76:15:ee:6c:6e:49:9b:
                    be:e8:5c:eb:d6:c4:54:3b:7e:5b:9b:90:28:4e:26:
                    68:a5:8a:e3:5b:9a:2e:db:9c:a1:39:41:54:97:3d:
                    10:aa:b2:a3:6d:b9:a7:63:55:72:bf:bc:d3:98:a6:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:17:47:DF:77:BE:36:74:2A:E3:4B:D9:1B:23:EA:65:07:1C:9F:19
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:98:35:64:62:d5:15:77:95:59:61:47:ea:54:b4:14:02:18:
         fb:0e:0c:42:63:93:d1:6d:19:1f:5f:39:7d:b0:82:92:df:1a:
         3b:b0:f1:48:1d:c1:ca:d8:83:0e:c9:bf:60:ac:43:c0:97:c3:
         ac:a1:e8:32:17:0d:36:16:d6:98:31:d6:f7:87:45:8a:ef:ee:
         17:4e:68:fe:83:50:c6:58:a4:a8:07:87:47:66:6f:62:02:e5:
         f3:a0:0f:ed:d3:24:fc:24:00:5c:75:4b:c8:5e:ca:2f:62:e6:
         a8:97:6a:76:19:75:d1:5e:97:0a:57:7b:01:fa:d8:ed:c3:a1:
         a8:d8:24:67:db:76:b5:bb:ea:ee:94:12:91:cb:15:f4:8f:58:
         ab:c7:62:a1:3d:cd:b9:46:ac:c9:f1:f3:75:7e:1e:48:43:00:
         d5:a9:d1:8b:db:ab:2f:73:cb:66:5c:e2:2b:b5:0e:96:15:df:
         73:cf:66:1f:18:52:ba:3c:58:d2:94:f5:09:8b:40:c7:4f:05:
         ba:fa:36:c9:6e:db:0d:f6:8a:b2:59:6e:34:4d:c3:8d:e6:76:
         f3:b9:73:58:63:d7:ab:81:fd:19:77:b2:78:3c:2f:48:8b:31:
         6b:d2:d8:e8:81:0c:79:4b:01:48:ed:39:4f:0d:a4:ef:41:ef:
         61:25:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 23:26:10 2025 by rpki-client