Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          ooRw27Bug3i2kPAzM53lYEVG+SeIFgQx5l7kqCjDCe4=
Subject key identifier:   3F:AF:DC:DB:78:D0:CC:BE:34:49:DE:A0:29:2F:DF:9B:63:74:A1:84
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       01974BC3FA7CEAF7A50E89CC32FEB4D558B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          1283
Signing time:             Sat 07 Jun 2025 19:00:24 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:24 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:24 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: BEeFYtBwJTLYmAuoGh7MrGpysxSQsfSpLQuEU24zLJ0=)
                          2: Ss7XTWpHmXw6L7KiP6AnSkLRnd4.roa (hash: rhKrnmJP9HKc4ydR4WxRdbHD2Fh6lt0Ep1m2e2GnBII=)
                          3: vjNiGGPMMIohREeXJHQsS5InGhc.roa (hash: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c3:fa:7c:ea:f7:a5:0e:89:cc:32:fe:b4:d5:58:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Jun  7 19:00:24 2025 GMT
            Not After : Jun  8 19:00:24 2025 GMT
        Subject: CN=3fafdcdb78d0ccbe3449dea0292fdf9b6374a184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:c2:83:a5:0c:e3:5e:4b:d9:1f:50:99:21:
                    b6:0d:db:2e:be:6a:41:59:be:5a:87:a7:71:7c:af:
                    eb:8c:fc:4b:90:96:14:b9:db:67:f0:11:a4:78:a1:
                    3e:40:9c:32:d6:af:b6:64:e2:e8:2f:07:8b:53:10:
                    ec:3c:18:83:4f:ce:f5:27:e5:6d:9b:86:96:2d:99:
                    d8:72:cb:d9:9c:40:8e:41:c9:ea:fa:6a:a9:6d:9f:
                    0f:85:7d:36:67:d8:27:9d:82:1b:0b:b0:24:f1:1c:
                    b8:7a:f2:42:06:a1:91:13:07:84:3c:09:e5:cb:4a:
                    cd:96:5d:0a:bf:8d:3a:e1:78:a8:2a:f9:3b:97:36:
                    af:40:31:15:f7:ec:47:f8:d8:0e:18:d4:6c:3f:e6:
                    6a:d8:f6:98:f6:86:07:c4:73:92:80:6a:17:a1:09:
                    ac:d0:3c:18:ca:a9:0a:04:57:68:61:5a:d2:56:8a:
                    65:15:20:e7:d1:2f:04:7b:c8:f9:df:6a:3b:ee:43:
                    f7:fb:63:de:b3:68:43:c0:52:c8:b6:77:76:2e:1e:
                    56:1a:49:7d:e4:98:69:a4:bf:c5:74:c0:df:7b:78:
                    32:a3:51:6f:f7:05:f2:e9:51:94:f5:58:a3:a1:0e:
                    e1:c8:df:c6:2a:74:28:01:57:aa:11:a2:85:8b:3b:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:DC:DB:78:D0:CC:BE:34:49:DE:A0:29:2F:DF:9B:63:74:A1:84
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:09:ff:39:96:24:29:08:74:79:4c:b9:75:5a:9a:a1:e1:5c:
         ca:f9:83:a6:79:49:35:40:90:77:0d:5d:39:cb:6b:92:f5:32:
         1c:98:d6:3f:64:c1:ca:53:79:fd:2c:68:66:b9:2a:6e:c7:ce:
         1e:a4:58:6d:e5:7d:8e:10:9b:3c:7a:ec:91:8f:cc:c5:b7:7f:
         80:de:9d:1b:0a:7c:5a:95:b5:e6:5c:7a:5b:c6:62:43:4e:16:
         21:e2:78:48:8a:12:81:0f:c4:04:fe:44:62:73:8d:58:8f:7e:
         4a:55:8d:5c:6a:e8:30:6b:9a:c9:44:4b:18:a0:c9:69:03:a1:
         ef:22:e5:93:e9:ea:60:32:e2:cc:fd:0d:5e:85:60:ca:24:24:
         df:25:e6:03:ea:e9:0b:60:b2:f1:31:cd:40:ae:fa:10:fc:d8:
         f8:c4:4f:34:a4:b8:30:c0:3d:a8:97:e8:37:18:64:d7:0c:df:
         0b:eb:27:0c:68:b3:5c:99:6f:51:12:67:47:b2:67:8a:f1:e3:
         13:ba:c0:82:9d:65:83:8d:72:7f:2a:77:1e:64:32:78:52:56:
         d0:6a:3d:90:da:f3:a3:7c:f4:54:fd:43:2b:a3:ef:78:8c:17:
         42:8e:bb:2a:2c:c2:1a:e8:48:e1:c6:64:14:08:ff:73:f1:80:
         85:ae:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:00:11 2025 by rpki-client