Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File:                     BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier:          TRuPDPe4Yr17css2qEfQPQnZ+VzQGPA/Dv45efW5X0w=
Subject key identifier:   1E:8A:35:E8:23:C2:08:BC:1B:58:77:BC:B0:7F:00:CC:79:56:0E:B1
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer:       /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial:       01976B4FE3A4A06444188A243E5446779BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 22:01:27 +0000
Manifest this update:     Fri 13 Jun 2025 22:01:27 +0000
Manifest next update:     Sat 14 Jun 2025 22:01:27 +0000
Files and hashes:         1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: fg/UufJcAkjsCHv8A7/DiJ7IM/tVv1IsM2U6qd4ttG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:4f:e3:a4:a0:64:44:18:8a:24:3e:54:46:77:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
        Validity
            Not Before: Jun 13 22:01:27 2025 GMT
            Not After : Jun 14 22:01:27 2025 GMT
        Subject: CN=1e8a35e823c208bc1b5877bcb07f00cc79560eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8c:aa:45:ba:df:f9:bc:01:77:8c:ee:e5:78:
                    c1:f1:0d:cb:d9:cf:03:09:34:e6:48:4a:7a:61:38:
                    a3:51:f3:92:b7:d4:4f:70:7d:73:d4:90:84:03:be:
                    45:3c:76:a3:44:29:12:83:39:1e:0c:e1:4c:11:8d:
                    f5:b7:75:21:b0:2d:7b:42:c3:30:7a:e2:c1:b0:7e:
                    b2:a6:a5:73:bd:b0:2e:53:0f:f7:99:48:ef:71:97:
                    d2:7b:ac:fd:3b:9c:b2:8b:2a:f4:d7:21:8c:a8:74:
                    58:1f:b8:d3:70:03:5a:ae:ac:14:25:3b:3d:3c:c3:
                    3a:4e:66:05:b2:d6:8f:b8:27:60:7f:ef:29:00:2c:
                    76:15:f8:16:3a:50:5d:20:60:29:e4:20:e9:56:1e:
                    8b:8b:04:e0:c7:c6:a6:da:8b:4e:eb:0e:b3:ea:ad:
                    b1:90:97:79:a0:a5:44:94:43:48:84:e8:4e:0e:8f:
                    d4:0e:17:7e:e0:35:9b:23:e5:a3:e0:f5:56:65:e0:
                    b6:c9:eb:42:1f:e2:93:db:66:4b:be:65:1d:b9:a0:
                    cf:c7:9c:ea:5d:d8:f6:46:87:48:1b:52:20:54:66:
                    6f:01:45:d8:ec:81:16:ac:97:cd:7e:62:3f:b3:37:
                    41:29:30:8d:2e:a0:01:43:5f:70:13:40:f4:5b:69:
                    be:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8A:35:E8:23:C2:08:BC:1B:58:77:BC:B0:7F:00:CC:79:56:0E:B1
            X509v3 Authority Key Identifier:
                keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:e4:0a:e5:e9:56:ea:34:29:7e:16:08:b1:d8:54:ea:98:
         38:81:60:6f:e3:2b:55:30:97:7c:bb:fc:58:05:16:0d:f7:74:
         04:29:9b:60:27:e8:9a:3e:04:24:62:6f:79:86:19:6a:79:8b:
         11:76:08:c8:0d:ec:8e:6d:f5:ee:4d:cb:c7:d7:d7:e8:d0:1a:
         f2:8b:2a:d3:0f:39:7b:4d:d2:50:a9:73:1b:7f:c3:69:cc:5c:
         90:cb:4d:66:05:a3:9c:44:01:d9:21:3f:e8:89:1d:15:65:aa:
         da:14:28:81:48:fc:32:a6:fb:cd:1c:d5:d5:c1:5a:a9:81:45:
         fb:bc:57:4d:e7:89:cf:7a:40:74:00:da:1e:15:ce:07:ce:69:
         07:c6:90:53:d5:be:22:99:4a:5f:1b:35:38:7d:fd:42:20:c0:
         30:f6:08:f9:d1:17:cd:d0:97:2e:f2:7b:4d:33:4f:7e:fd:64:
         79:cf:0d:07:d1:1f:81:ff:79:d0:7d:29:d6:91:17:9b:42:aa:
         cc:3a:1d:54:df:6e:5a:67:5b:cf:5f:1e:c5:bc:3d:58:e2:6c:
         ba:45:33:47:ce:f8:e9:f1:53:8c:46:32:e0:4e:1e:b5:5a:5c:
         be:b5:81:fc:22:75:b9:05:32:92:72:fd:8a:3c:b7:ec:46:5a:
         a0:a4:59:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:32:58 2025 by rpki-client