Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          Y6MZ84NpEzaQT/7IIx4V23hPjdVndjA7Du2bFxI8AZE=
Subject key identifier:   AD:70:88:74:BE:D5:E7:B3:F9:7C:49:79:A8:AA:13:CE:F0:10:2A:E9
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019746D485B7AF1C9B968BDE8F54D606CF9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          1256
Signing time:             Fri 06 Jun 2025 20:00:22 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:22 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:22 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: fhvIfXDG2UMIQ2seOjf9xJsiwaKRR3ACEK/omypPMwY=)
                          2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:85:b7:af:1c:9b:96:8b:de:8f:54:d6:06:cf:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jun  6 20:00:22 2025 GMT
            Not After : Jun  7 20:00:22 2025 GMT
        Subject: CN=ad708874bed5e7b3f97c4979a8aa13cef0102ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:9b:58:6f:31:5b:95:2f:09:ea:7f:16:8f:
                    5f:20:19:e9:44:7e:00:c8:7a:af:4b:51:18:03:5a:
                    23:5c:62:03:91:b5:73:74:e0:97:9b:f3:4a:9b:d6:
                    c4:89:15:4d:01:1c:d6:cc:0e:ac:5b:4f:5a:ea:b5:
                    21:c3:1c:de:56:b6:d1:e0:3f:b8:af:78:3f:a2:4b:
                    f0:73:05:29:c6:0f:11:ce:8a:e6:3a:39:d5:d2:88:
                    2b:c2:f2:eb:06:0f:b8:94:4b:7d:2b:1a:90:33:06:
                    ef:42:d4:71:27:dd:48:36:85:25:0a:7e:6a:a9:49:
                    47:9a:ec:01:75:c2:b3:39:2a:5d:a7:4d:b1:89:5c:
                    2d:74:0b:c1:a5:01:f6:52:66:25:17:0a:3d:a1:a1:
                    9e:b8:49:a2:bf:9f:17:e5:49:8a:90:eb:7f:7c:92:
                    53:64:2e:e7:7e:f1:8d:34:10:b8:c5:4f:93:ec:c0:
                    c8:a4:8b:36:f8:0d:b0:b7:03:b0:80:e1:0f:c2:6c:
                    f5:58:65:ed:10:c3:57:1a:c6:53:45:16:86:e7:2f:
                    35:28:16:34:b2:bc:86:6a:69:1e:f2:5b:84:45:16:
                    54:ba:24:35:58:8a:ed:7d:4b:ad:a0:a2:b5:ed:da:
                    fa:8a:59:ef:67:03:ce:bd:56:21:4c:55:25:67:07:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:88:74:BE:D5:E7:B3:F9:7C:49:79:A8:AA:13:CE:F0:10:2A:E9
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:49:b5:ee:06:95:e8:83:2d:8e:8c:1d:4a:32:a2:7c:05:5e:
         75:4d:d2:db:0b:0c:06:e2:07:ad:67:e5:dd:d8:46:33:41:59:
         c5:6b:47:fd:1c:9d:5d:62:99:52:59:1e:0d:da:6e:e1:33:71:
         c9:5a:bf:16:98:99:bb:01:1b:6d:19:88:21:e5:89:60:d9:0b:
         5a:8e:b9:87:64:97:6a:8a:fa:c8:53:f0:ee:5d:27:4b:a3:32:
         8f:7d:a1:a5:c4:b4:bf:2d:4a:c5:6e:26:d6:2a:59:39:60:a0:
         57:a2:0a:87:15:f9:a8:4b:6e:a3:3f:07:25:46:b6:4c:6a:6e:
         56:74:9a:a9:b6:25:ec:9e:d7:cd:e0:c3:8e:fb:18:48:93:4e:
         8a:68:c5:e5:7b:49:6f:74:17:f6:68:45:07:c9:b0:bf:d5:a8:
         30:e1:ae:b5:df:e8:87:9b:17:1a:d6:79:2c:5f:28:62:8f:99:
         22:87:50:be:bd:dd:13:c4:bd:d6:7e:f0:16:38:72:58:22:e9:
         ce:5a:ff:f7:e1:ee:2d:ee:97:ba:63:47:be:ad:b3:e2:12:b2:
         2c:64:88:6f:e1:6f:79:66:66:4f:ac:c3:e5:dd:f4:b8:c5:f2:
         06:4b:c9:99:9c:64:2f:6e:42:a8:68:93:af:43:63:11:6a:e8:
         29:58:83:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:42 2025 by rpki-client