Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File:                     BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier:          e0VYaOA9/cG/GRQXHGdaZ+lhxvUQx+mc/vkTzcK3E7A=
Subject key identifier:   58:0E:AC:9E:32:61:09:1F:D7:B6:A7:4F:6C:D4:53:42:3C:C8:22:2E
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer:       /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial:       01974AE8A201F2B903861D0724520FA82BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 15:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:49 +0000
Files and hashes:         1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 1Ap6y84FEGOv2uRNvfj7LjIRq7Nw+pTqy5I3sEXUQdg=)
                          2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:a2:01:f2:b9:03:86:1d:07:24:52:0f:a8:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
        Validity
            Not Before: Jun  7 15:00:49 2025 GMT
            Not After : Jun  8 15:00:49 2025 GMT
        Subject: CN=580eac9e3261091fd7b6a74f6cd453423cc8222e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1b:92:9f:93:a0:72:d4:e9:7a:01:f1:58:71:
                    b2:9f:fd:17:82:42:14:3d:12:20:a2:78:97:d4:d7:
                    ca:d0:ea:76:d7:6b:44:df:f2:64:7b:48:cb:be:c0:
                    f9:3d:bb:b3:33:18:b8:88:9b:39:46:52:a4:f6:ff:
                    00:d8:fc:1f:0e:dc:e7:ec:f3:dd:bd:5f:aa:7b:d2:
                    25:67:f4:4c:6d:9e:1f:73:ad:2a:88:33:8e:f2:4a:
                    ce:2e:de:dc:81:30:c5:68:36:ef:06:dd:f6:f4:2b:
                    23:84:d9:92:15:42:2b:48:d4:4e:20:2f:56:77:66:
                    c9:4d:9c:d2:27:4f:1c:65:43:ea:8e:a7:7b:3b:23:
                    98:1c:3a:f7:a1:c3:c2:26:2e:1e:73:76:f6:cd:0e:
                    54:51:e2:1e:5a:36:44:57:11:80:ff:c9:7c:80:77:
                    56:67:45:45:de:20:22:f7:ee:4b:ea:d8:86:0f:50:
                    1f:37:ad:ae:f5:b4:a6:64:d8:d5:ea:3e:37:72:ca:
                    d3:50:97:0b:26:0e:fb:14:26:07:69:cf:31:d3:6a:
                    78:f9:a3:8b:3e:d4:df:cb:47:7f:38:f9:bb:3d:e4:
                    ee:22:6f:f5:2b:89:74:f5:ba:9a:89:93:5b:9e:b5:
                    bb:b2:22:7e:fb:06:cb:93:79:83:3a:9a:74:bf:e8:
                    8d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:0E:AC:9E:32:61:09:1F:D7:B6:A7:4F:6C:D4:53:42:3C:C8:22:2E
            X509v3 Authority Key Identifier:
                keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:94:ef:56:6a:a1:22:d9:3c:6e:48:d4:98:58:e9:9f:45:3e:
         2a:46:30:0e:6f:ea:d5:08:98:4b:df:94:f7:ce:9a:3e:55:e2:
         3d:1f:4c:33:af:40:e4:c3:5c:2b:f1:2e:3f:24:11:ee:dc:19:
         10:ed:22:9c:d3:a7:8e:69:b6:ab:f1:22:b5:e5:4c:c0:03:e0:
         71:14:c2:fb:57:7e:ba:13:e5:94:b7:93:38:ec:e8:75:c1:5d:
         2a:d9:bf:3e:e3:f0:76:b3:56:71:a8:ab:54:1d:ed:32:b8:18:
         49:20:40:86:1a:ec:ef:42:89:55:69:9f:b3:85:a2:cd:b4:86:
         e6:aa:1f:e3:9f:a0:75:79:f5:7e:ee:1d:a3:0f:97:fc:01:36:
         14:64:9b:f5:b7:a6:59:a4:67:6b:e8:71:0c:1c:fd:35:53:b0:
         08:b5:d2:01:d4:cc:7f:44:59:08:be:ed:73:99:7a:bc:a4:51:
         70:9a:33:91:7f:47:45:64:fc:3a:45:c5:3c:94:aa:7e:74:3a:
         06:a7:67:6c:b4:4a:c8:82:83:86:70:db:c9:fa:f5:48:49:16:
         44:d3:62:f9:59:ff:d2:40:7f:36:b7:5a:19:40:3e:17:f3:ea:
         82:8f:5e:cc:b0:0e:45:2e:c3:67:ce:63:e2:f1:f2:af:92:d1:
         8b:67:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:25:42 2025 by rpki-client