Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          ULMYK3E8vhjiELFf42ezCgdP69I9ehHOTbUZzSSMRJY=
Subject key identifier:   71:04:09:41:6F:59:64:37:9C:93:41:82:9C:3C:D2:95:6D:7C:AC:BC
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       01974F330C5D3741D332C08729FCE01A327F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          0503
Signing time:             Sun 08 Jun 2025 11:00:34 +0000
Manifest this update:     Sun 08 Jun 2025 11:00:34 +0000
Manifest next update:     Mon 09 Jun 2025 11:00:34 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: akpgK4TRxo2IK4sLOvehZ+Epo6MGkp7C8qHreuxW8lI=)
                          2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:33:0c:5d:37:41:d3:32:c0:87:29:fc:e0:1a:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Jun  8 11:00:34 2025 GMT
            Not After : Jun  9 11:00:34 2025 GMT
        Subject: CN=710409416f5964379c9341829c3cd2956d7cacbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3f:1e:16:ed:77:c9:46:38:4f:9d:cc:fd:42:
                    60:4f:dc:41:cc:b8:67:aa:29:8b:e2:31:fa:78:ea:
                    73:ab:92:3b:99:07:ee:2e:89:10:08:c3:54:4f:ea:
                    d5:3b:b1:51:e8:3a:71:ed:95:7b:2e:fa:61:a4:23:
                    56:0b:31:ab:4e:a7:fc:77:5e:a3:10:9a:ca:3b:cc:
                    48:b1:d8:cc:fa:4d:d1:49:5b:bf:b3:7a:b2:ee:9c:
                    20:b1:5f:09:48:1a:43:1f:83:03:22:f0:0e:4f:6f:
                    5d:a7:9c:53:79:ab:60:92:8b:c4:05:07:e0:5c:e2:
                    fe:e9:e9:b2:ad:6f:4b:f5:9f:c5:af:25:7b:d8:8d:
                    75:81:fd:40:66:b8:1a:75:f7:b4:70:11:b6:63:34:
                    68:08:4a:fb:d4:71:74:dd:a0:a2:04:e0:bd:c7:84:
                    f7:60:98:08:a9:d8:16:f0:6d:d6:e2:b6:2a:51:96:
                    8c:75:73:8b:ed:72:36:4c:d7:86:af:d3:ed:79:2b:
                    9a:5e:71:7a:e9:6b:09:84:eb:07:af:97:73:cf:bf:
                    9b:02:63:37:b4:3d:61:12:da:0b:d3:e0:90:16:ba:
                    e0:28:69:2d:db:c8:7c:fc:be:ab:96:b6:c9:10:a2:
                    05:ed:a1:0d:9f:5e:03:aa:85:d6:3e:e3:0a:28:15:
                    f0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:04:09:41:6F:59:64:37:9C:93:41:82:9C:3C:D2:95:6D:7C:AC:BC
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b3:78:98:16:bb:fc:59:09:ad:b6:02:94:13:42:2a:e1:85:
         d2:42:99:bc:8b:66:fc:fc:38:b0:e2:0e:57:50:e3:62:ca:18:
         3c:2f:4c:e9:88:70:de:6b:7c:64:6f:c4:8f:e7:75:54:de:40:
         c6:80:05:fe:1b:f9:84:6e:d4:3a:6b:c1:4e:34:ea:e3:99:d7:
         93:e5:df:a7:a0:d0:ba:d8:73:b0:8a:f7:ca:bd:3e:ef:d0:31:
         e5:4a:d0:c0:26:d4:1b:54:de:79:be:cd:04:74:82:a8:fb:09:
         ae:da:3e:cb:97:a8:57:47:c7:c6:f8:dc:d5:fe:27:86:9e:37:
         89:0b:91:22:1e:13:2f:ec:48:09:83:4b:4c:98:05:87:89:d3:
         b0:57:30:c7:b4:73:55:2c:13:e5:fa:f4:bb:99:bb:94:97:f4:
         53:1f:53:26:e4:84:e4:4f:88:aa:f8:05:cb:72:e5:00:6f:bd:
         cb:2e:6f:0a:0a:7e:d2:ae:cc:a2:2b:34:ee:d6:ee:d4:16:74:
         4c:4d:dd:8a:78:87:c0:73:24:75:04:a0:ee:6c:df:1c:b2:72:
         54:dd:d5:29:28:8a:6b:12:2b:09:62:2a:eb:7d:c7:28:1b:70:
         f7:fb:cd:e0:91:a7:17:15:50:18:34:54:d4:09:9d:df:f6:71:
         47:d9:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:38 2025 by rpki-client