Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File:                     BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier:          7l41U/lIvPfUI/k1WrnpjK4XZDImD3TCQWZ9FI689rA=
Subject key identifier:   26:92:DC:93:3A:8D:E9:4F:2D:B4:66:ED:C8:D9:C6:A6:DB:0F:B1:7D
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer:       /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial:       019749315AE9F1AD99F3567EB728C3129990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number:          038E
Signing time:             Sat 07 Jun 2025 07:01:00 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:00 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:00 +0000
Files and hashes:         1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: ERcdT59Uvj70QyMqrBc+qTP8DKV0qRZfg+gbztYtVAI=)
                          2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:5a:e9:f1:ad:99:f3:56:7e:b7:28:c3:12:99:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
        Validity
            Not Before: Jun  7 07:01:00 2025 GMT
            Not After : Jun  8 07:01:00 2025 GMT
        Subject: CN=2692dc933a8de94f2db466edc8d9c6a6db0fb17d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:05:ac:19:32:33:32:f7:c2:1f:8a:e7:5f:6c:
                    01:34:fb:d8:ea:7c:f0:dc:8e:11:a0:ac:43:3f:39:
                    3f:ee:80:f1:cd:35:8c:7c:66:5f:d2:81:43:b0:0d:
                    49:a0:6c:0d:15:ee:35:1e:f2:61:ba:00:76:8b:c6:
                    1c:7b:e2:c3:54:a8:da:c7:f6:34:e3:de:3c:0a:dc:
                    ce:91:ec:33:5a:9a:35:02:3d:30:70:9e:11:ad:84:
                    3b:c1:f0:42:14:3a:69:0a:fa:fe:5f:74:84:21:3d:
                    f9:60:d5:42:7d:bd:a1:be:9b:80:be:0c:c9:33:0e:
                    28:30:fb:8e:17:e5:49:1a:61:7e:33:bd:37:42:c2:
                    dd:01:d6:1f:9c:5d:db:bc:ab:74:d0:7c:02:ad:a4:
                    f0:5c:e8:ab:e8:f0:9c:26:c3:1e:27:06:14:ff:72:
                    f9:19:a1:a7:17:75:64:f5:98:28:51:16:73:c0:7c:
                    78:a4:31:64:80:97:ab:99:65:58:2c:86:f2:7c:8f:
                    27:79:aa:5f:62:5b:77:90:45:73:e6:a8:d2:37:d0:
                    23:ee:42:05:4a:92:d7:8a:d7:54:d7:20:2b:49:a3:
                    99:fe:82:4e:b7:1a:b0:26:57:27:78:89:86:48:37:
                    71:37:93:e3:e5:c3:f6:f5:1d:1a:d0:40:1f:6d:ab:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:92:DC:93:3A:8D:E9:4F:2D:B4:66:ED:C8:D9:C6:A6:DB:0F:B1:7D
            X509v3 Authority Key Identifier:
                keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:e5:47:2f:d0:3a:90:ea:f4:50:e3:d0:46:5b:fc:a7:2b:
         3e:d6:1a:78:03:5d:0a:97:a5:29:76:5b:40:8d:dd:cb:d2:f1:
         57:21:05:b2:69:14:a6:49:c5:cb:77:47:27:00:ba:e0:8a:51:
         12:0c:59:4a:a3:e4:d9:fc:4c:51:6b:a2:7e:92:26:58:3f:39:
         de:4c:95:1b:c9:73:2e:1f:b3:84:94:43:29:5e:f2:4c:72:92:
         b9:93:d4:b6:40:cb:03:2d:29:cb:0b:42:74:99:69:8f:25:a0:
         71:dd:33:3c:c9:6b:62:57:95:0b:9a:b2:3b:00:f8:47:70:6e:
         79:8f:97:7a:3f:c7:83:17:50:f2:09:42:3f:99:01:cd:36:e9:
         9c:37:ae:ac:d5:77:3d:06:f1:95:26:5e:f7:2c:f0:0b:75:0f:
         17:cb:c7:88:6a:2b:19:9d:8d:bd:f3:49:0c:88:56:2e:ae:b8:
         3f:11:0f:5e:9f:02:67:b7:df:31:bf:7b:65:a9:c8:27:74:87:
         7e:be:63:77:29:62:83:fe:ff:ff:da:e0:92:3e:5b:67:fc:17:
         4d:90:b4:b8:25:21:8a:41:b8:f6:16:bb:ed:3c:3c:0d:5a:86:
         de:91:97:f6:2d:93:cf:05:a6:e6:3e:b2:28:24:51:6a:94:0c:
         fa:df:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:12 2025 by rpki-client