Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
File:                     5BCXLMRZVogEu0t5HXwTz7IoOIM.mft (raw, json)
Hash identifier:          OYKBHPi6zMIquQzdBj70zxvPMSnK9dp/B6olZQJbpfA=
Subject key identifier:   30:1C:A4:B5:C2:64:E6:82:B8:2D:8C:59:15:7F:D1:46:C7:85:DC:58
Authority key identifier: E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83
Certificate issuer:       /CN=e410972cc459568804bb4b791d7c13cfb2283883
Certificate serial:       0197665FEBAF01BB468AA3AABB1712CD0EA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
Manifest number:          135A
Signing time:             Thu 12 Jun 2025 23:00:51 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:51 +0000
Manifest next update:     Fri 13 Jun 2025 23:00:51 +0000
Files and hashes:         1: 5BCXLMRZVogEu0t5HXwTz7IoOIM.crl (hash: Pm35wYir7YAg88dNPyk5qxX2QeFvV4mwEnGKHYFoDpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:66:5f:eb:af:01:bb:46:8a:a3:aa:bb:17:12:cd:0e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e410972cc459568804bb4b791d7c13cfb2283883
        Validity
            Not Before: Jun 12 23:00:51 2025 GMT
            Not After : Jun 13 23:00:51 2025 GMT
        Subject: CN=301ca4b5c264e682b82d8c59157fd146c785dc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:a7:7a:f4:64:e1:64:30:de:71:27:1d:5a:
                    b4:c8:32:21:07:94:6a:6b:6c:eb:ad:81:4d:33:b6:
                    af:f2:bd:bb:9c:81:99:37:11:26:e6:89:94:21:9f:
                    a2:14:71:2c:6e:bf:6c:14:32:af:ac:92:ec:1f:49:
                    bf:c5:32:30:70:25:87:5e:0b:f6:9f:d8:57:81:5a:
                    80:2e:51:b5:0e:73:52:90:46:ba:13:a4:8e:53:07:
                    dc:8c:2e:e5:eb:ff:19:9c:60:80:79:2a:62:9e:df:
                    67:2d:c3:b3:6a:4e:d9:95:8a:73:8e:de:4d:74:99:
                    c8:fb:95:cc:51:7a:57:59:30:19:ee:32:38:2a:b0:
                    a3:0d:6b:0f:6b:bd:08:77:ea:4d:ac:d9:e1:29:de:
                    a7:e6:09:62:a4:b9:c5:54:0e:22:94:4d:09:98:63:
                    06:4e:8c:ad:94:16:a8:ba:2b:fe:12:db:49:c5:5f:
                    1c:91:5a:32:6a:da:32:d3:cb:a1:a0:80:e3:c0:34:
                    84:f0:2e:65:f7:2e:bb:76:8b:66:d2:12:d8:fe:98:
                    68:4c:4a:86:ea:7e:66:95:91:74:1b:e0:06:33:d0:
                    8a:fe:14:0c:59:5d:db:ae:45:3d:09:aa:61:e1:55:
                    50:d4:73:ca:f3:b5:cf:75:bc:b6:a0:2d:04:0c:b6:
                    23:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1C:A4:B5:C2:64:E6:82:B8:2D:8C:59:15:7F:D1:46:C7:85:DC:58
            X509v3 Authority Key Identifier:
                keyid:E4:10:97:2C:C4:59:56:88:04:BB:4B:79:1D:7C:13:CF:B2:28:38:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BCXLMRZVogEu0t5HXwTz7IoOIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/306e62-e584-492a-bf46-f27cef4ba224/1/5BCXLMRZVogEu0t5HXwTz7IoOIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a1:c0:b6:4c:eb:00:2c:b7:93:3e:b1:b7:43:39:17:ea:d4:
         fa:3f:f8:8c:80:82:bd:bb:48:6f:54:ea:5f:f9:e8:50:a9:5d:
         ec:67:b4:e4:0d:3c:9d:8a:c5:d2:93:84:1e:50:aa:31:28:4b:
         a0:29:50:0b:fe:c0:22:0a:fe:62:e4:34:05:9f:2a:3b:b9:82:
         74:64:84:20:94:8f:d3:4c:e5:c7:e1:55:82:7f:3d:15:74:8c:
         48:28:51:79:24:ec:7c:31:6d:8a:6c:53:4e:b1:ef:fe:7a:f0:
         2e:39:d1:96:f6:6e:e8:94:a4:f0:7c:0e:18:3a:47:f9:06:bc:
         ca:5c:a5:7e:5e:f6:4a:60:02:92:c0:de:c4:4b:33:44:e0:d1:
         1c:cc:90:48:98:c6:ca:90:87:fb:c9:83:14:c5:98:da:0d:b9:
         f8:46:ae:56:16:24:23:53:ba:2f:c3:17:a2:63:29:c0:41:e7:
         49:6c:7c:c0:c0:dc:69:85:14:f8:2b:0f:1c:17:4c:44:ff:8b:
         c6:9e:ee:11:30:ec:5e:32:76:7b:13:8d:ab:c2:7a:13:ac:41:
         9c:9c:ce:d9:7a:6d:d7:d7:ca:69:a4:59:1f:1c:2d:52:1f:c0:
         3a:c8:3d:be:02:c7:5c:27:e8:e0:69:a4:32:15:6e:14:56:a0:
         3f:f6:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:57:56 2025 by rpki-client