Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          QrAzxtkmTD0bkNXvJo60R7AasdEoH4bJ0kV3ApacRM0=
Subject key identifier:   71:E8:46:C9:DD:70:E4:92:6D:22:60:88:12:9E:7E:06:D4:11:DF:78
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       019768F3073295F0C826A83487B7494F7423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          12A2
Signing time:             Fri 13 Jun 2025 11:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:46 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: InzjiHc3kcU/tzSYo+PaMrkK1OEKH+0SXG+CUH7idzo=)
                          2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=)
                          3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=)
                          4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=)
                          5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=)
                          6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=)
                          7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 07:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f3:07:32:95:f0:c8:26:a8:34:87:b7:49:4f:74:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jun 13 11:00:46 2025 GMT
            Not After : Jun 14 11:00:46 2025 GMT
        Subject: CN=71e846c9dd70e4926d226088129e7e06d411df78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e9:fc:91:97:fb:63:8d:a6:e3:91:67:c0:e6:
                    cb:c9:1c:c7:59:db:a7:1b:6f:75:50:8d:18:b7:a7:
                    45:2d:6d:86:a2:93:9b:dc:72:7d:a3:ae:5e:c9:09:
                    a0:fe:78:c7:d6:80:71:c7:63:8b:63:4b:68:dc:4c:
                    c2:8b:18:09:51:88:f0:fc:22:fa:eb:d3:e2:b5:78:
                    0d:34:3a:15:52:92:9c:50:04:51:fc:e2:e3:f0:01:
                    0a:fb:cf:04:98:ff:98:49:11:29:8d:cd:83:a1:b7:
                    6c:55:36:90:c5:11:88:c5:20:8b:d8:26:83:55:99:
                    41:50:29:cb:f9:19:ad:7e:9b:8c:5d:42:c0:30:cc:
                    68:ab:a6:d3:0e:7a:45:35:ba:3c:df:f5:c1:71:74:
                    ab:c3:d2:59:5f:48:79:b1:6e:de:ce:ec:23:5b:2f:
                    a1:a9:a1:80:05:08:33:32:f4:f9:ce:ef:3d:f6:60:
                    bb:d8:01:63:64:bf:6a:fb:c5:18:0f:6d:96:cb:b6:
                    8f:9e:98:03:bb:45:89:bf:71:a7:cb:bc:70:d5:f7:
                    a3:18:ba:d6:33:bc:3e:e1:f6:b1:8b:2d:95:33:54:
                    f9:6f:ea:9d:36:38:20:49:aa:f2:bb:e2:73:72:48:
                    b7:e9:2d:92:00:0d:42:df:4a:2f:30:7b:3f:01:1c:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E8:46:C9:DD:70:E4:92:6D:22:60:88:12:9E:7E:06:D4:11:DF:78
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:c0:3a:92:7b:b7:c6:90:21:79:55:45:fd:39:aa:60:b4:bc:
         1b:12:af:33:08:38:c8:84:a1:bd:70:a6:f3:80:9f:b3:bf:90:
         74:9a:4b:ab:73:54:5a:e4:bd:e6:f9:b8:df:9f:c2:56:36:27:
         3b:8c:ff:23:e4:d2:13:f5:24:5d:5a:23:f8:72:c3:50:8e:0a:
         64:13:28:07:bb:af:da:a6:bc:9a:a3:81:c2:52:61:7a:08:45:
         af:4d:d9:33:d7:a1:8a:eb:4a:03:13:c3:07:cf:7b:05:c9:af:
         1c:78:10:17:26:47:5b:84:f4:72:9a:e2:c7:a0:d6:76:98:d0:
         c9:bd:71:6a:bd:2c:95:f3:78:fe:57:4d:9d:d0:01:cd:50:e6:
         a5:79:f3:ec:c0:83:43:4e:ea:a6:75:ba:53:9a:a2:3c:6b:a2:
         5d:32:58:05:9c:33:d9:fe:81:44:9f:38:e8:3c:46:09:82:9a:
         17:32:dc:2c:d8:2e:ad:83:2a:2c:bd:f3:c3:2b:9e:ee:f6:2e:
         dd:93:c2:05:7b:5c:c0:f0:fd:57:4b:bb:bd:15:c2:ba:ac:c5:
         2d:b9:00:ee:f7:3c:e0:40:65:0a:59:c8:66:2a:1f:14:de:d8:
         d1:4f:43:35:2b:54:d4:57:01:64:a5:d5:03:a9:b2:8f:31:a4:
         ed:f8:78:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:21:51 2025 by rpki-client