Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
File:                     btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json)
Hash identifier:          KNCpxMdRCFKWT8re171/b6Mv3PHlbKQRj/upqE9O+fI=
Subject key identifier:   73:56:FF:90:F0:53:52:2C:F8:2D:77:7A:9D:2F:96:03:C4:8F:89:76
Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C
Certificate issuer:       /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
Certificate serial:       0197488D2E56CACC57E6448D385333EBDDD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
Manifest number:          0BBC
Signing time:             Sat 07 Jun 2025 04:01:41 +0000
Manifest this update:     Sat 07 Jun 2025 04:01:41 +0000
Manifest next update:     Sun 08 Jun 2025 04:01:41 +0000
Files and hashes:         1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: W57H/oTgiGFdctO8IqzMZLk51WvecqfI0nqfkFL4nqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:8d:2e:56:ca:cc:57:e6:44:8d:38:53:33:eb:dd:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c
        Validity
            Not Before: Jun  7 04:01:41 2025 GMT
            Not After : Jun  8 04:01:41 2025 GMT
        Subject: CN=7356ff90f053522cf82d777a9d2f9603c48f8976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:7c:d0:95:63:a7:c6:58:cf:df:93:0f:05:
                    e5:48:80:55:ba:61:9b:fc:14:3b:31:95:43:51:b2:
                    59:02:c1:32:71:02:90:76:92:77:aa:a8:4d:f6:38:
                    74:0a:e9:b0:a8:ca:83:00:df:bf:10:7d:c3:5b:cc:
                    47:ae:bd:8a:59:f2:ab:7a:b0:65:a7:c7:ed:42:5f:
                    95:b2:ec:6f:a5:6f:24:3f:8a:e8:a9:05:2d:6f:ee:
                    a5:af:ef:ce:eb:1f:fc:c5:87:dc:ad:20:38:b2:5d:
                    25:e7:9a:59:fb:66:12:97:03:17:04:e6:a8:68:1d:
                    b3:59:18:cf:a7:d4:17:14:20:77:8c:cf:12:9c:77:
                    1c:c4:ff:40:e6:3b:9e:f5:43:96:9a:9f:c4:d5:e5:
                    7c:db:a6:39:b8:27:46:08:e8:6a:97:d4:64:cb:74:
                    a8:a3:0c:66:89:97:19:d5:7c:dc:85:1b:30:bc:80:
                    3d:60:c1:a3:fb:d9:a0:87:93:e6:8a:02:91:65:5d:
                    3b:b2:42:da:ab:2e:88:76:73:ad:06:b2:41:c8:ea:
                    7d:31:ec:a0:2a:c0:6f:18:b9:cd:ab:75:1e:1e:04:
                    df:6b:13:77:97:cc:53:47:6e:3b:49:82:6d:44:46:
                    4c:be:bd:fd:42:18:a2:72:de:32:ee:2a:2c:35:19:
                    af:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:56:FF:90:F0:53:52:2C:F8:2D:77:7A:9D:2F:96:03:C4:8F:89:76
            X509v3 Authority Key Identifier:
                keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:4c:72:d4:5f:14:48:b9:62:e5:aa:e8:4b:a3:cf:b5:97:b0:
         d6:9b:05:85:d3:75:d3:03:ca:ab:fb:66:79:10:fa:4b:ed:e3:
         91:2a:54:34:f5:43:a5:85:8b:ec:92:d1:ce:15:c0:71:40:75:
         0c:83:4e:c9:68:79:43:de:20:a6:48:dc:f7:f8:ca:cc:b3:ed:
         cc:c0:49:7a:15:a4:5b:02:cf:64:57:16:54:24:ee:20:db:bb:
         ae:9b:ea:b6:7d:9f:c3:72:5d:47:57:44:50:24:5f:50:d5:a1:
         f1:09:c1:8f:f3:ed:ba:2e:d4:cf:b5:43:e4:88:9c:31:b0:bd:
         28:9a:fd:4c:c7:3b:d1:8d:d3:34:a1:f2:84:64:33:51:c0:d4:
         95:f9:13:ea:d4:a9:9c:f4:00:d3:fc:da:5a:f8:4c:9e:d8:13:
         23:d2:a1:4e:61:e4:5c:ec:f4:0a:75:45:fc:25:b4:aa:1f:c1:
         37:b2:d3:c1:a7:6e:d7:c2:0c:0e:83:e6:35:9a:87:6c:28:3d:
         8d:a9:51:5d:d2:92:2e:f6:41:ce:46:17:68:af:d2:92:24:aa:
         c7:31:b2:27:d5:a9:f6:33:7b:11:ed:1a:7f:e8:33:6d:28:c7:
         d5:ef:fa:58:28:1a:cb:ba:43:b1:3c:89:77:ae:70:87:a7:ac:
         42:21:27:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:37 2025 by rpki-client