Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File:                     BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier:          nDk8h47OOi0Yo05u8eI0ymXtdf8CP8CI3NkRBYDCh0M=
Subject key identifier:   43:29:ED:D1:2B:E6:CF:89:74:F0:BE:CA:D9:CF:D8:30:B5:CB:B9:16
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer:       /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial:       019767A94C6EA36656289ACD6AC707697003
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number:          1591
Signing time:             Fri 13 Jun 2025 05:00:37 +0000
Manifest this update:     Fri 13 Jun 2025 05:00:37 +0000
Manifest next update:     Sat 14 Jun 2025 05:00:37 +0000
Files and hashes:         1: 1IQ6XGH492q6Le1AzC8jaBrQe44.roa (hash: eh3HA+b+4o4D/vtiKknODxG3cbXEFcxbrcIdlrGMDDE=)
                          2: 6d37vYn_-0Vq6SZZXEO_rUvt6Aw.roa (hash: yqhfQUl7ISZr9l55UFBvqcAGhrf4HDq7TYMtgBwdeKY=)
                          3: 8iX1O9Nr2sq2PzTsb0QhKjkmqM8.roa (hash: T1LBCnYiryGN37/+HhdZ0s82/cAkH+vRbdKZsBwMESM=)
                          4: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: CRaMyZX8mW5OemEAbWXgunGLUKtqDJncVZxhSfmKjAk=)
                          5: F30_OjUKB9VrnLXkNiR8ZpIRWCg.roa (hash: KNylbSVcnthrIQLqbAEtatSFLiC4vlvqJbUkOcuBjgA=)
                          6: HlE6_oEGWUnkV2aOy0hIE_eccLM.roa (hash: KMuseZ9dduPSpqKAHzp40YhKxMBU3BNq8v2w/jHb10A=)
                          7: KeLhOHzM1hDk5wpHT7c7dEJSGkg.roa (hash: k3lH8dOoEf0HsgtNnTnuPk43FfXpsQ32ISf9a9kGUX8=)
                          8: ML8pn-E_qbwwKV6QggJMhgPXITY.roa (hash: ef5cpNSnOqt0Z/JAbuAq/vEylovlmI0cvvWhbxjYTVw=)
                          9: PcEinGOpGykuWaZ-GFM2Ka0slXA.roa (hash: rf4MR8W/0t7Ie6erW268II2+T/VIpYCArEcylPgsAZw=)
                          10: PpFwrmWlH3pZymfQKYsFi4K-adw.roa (hash: VNpgtEF99hGLPA2VWaum0vMKKj4EiyXdZlg9ym9z/M4=)
                          11: S5xlWD61ZlkKBvIdjcuXh70hU00.roa (hash: acUk31YMeUIzj/C2hdmOvm4SydFnJz984QamvIyEhmQ=)
                          12: STMeHdcRelLXHuz0XA2ZrlxkOfo.roa (hash: xctjghfROSEtHLzk7gqelYxtcJeTH+HaafmMd/Bhkno=)
                          13: _WC8m05zrJALjZD8B7I7xHZvjyA.roa (hash: nZIwVpCUoRV/Klb2Soopj24xKIAgFJkwlUy3h/LTuoc=)
                          14: fdr6JGL9aDsAMAVqq7owWMfDFak.roa (hash: wll1ih7H+GHk4J4WZ4Giu/GdS7PhLq3pl6U7jtSGTDw=)
                          15: kKBf6B_wDBiAjuapAEosWlhIkcs.roa (hash: H/XgfanhHflto4Y/YugSIHV0iMdPHKaUn9VzxnOCcaA=)
                          16: l-DhQVId14lLiR2CC18PSmaWD58.roa (hash: kDvQ14x5xl/z/Akv3wuLy8Glw+piuvb8lVLCQ9ahBkI=)
                          17: lvJUcUmW5vFUs87cnXSzy_rAw1M.roa (hash: 5ur3+Sn88YvlV68V3QWwA+CaFBaugcIaPdteF4FrI+E=)
                          18: mFPikFTe5Ye_6V6NFpkHU1XHUyc.roa (hash: aIL2Fs+7AxI62yg5Zs86j8z9yx7P9IGny7yZekRMFg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:67:a9:4c:6e:a3:66:56:28:9a:cd:6a:c7:07:69:70:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
        Validity
            Not Before: Jun 13 05:00:37 2025 GMT
            Not After : Jun 14 05:00:37 2025 GMT
        Subject: CN=4329edd12be6cf8974f0becad9cfd830b5cbb916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:5f:27:9d:f6:47:34:dd:9e:d9:38:aa:a1:
                    93:80:ac:2f:7d:ad:42:70:90:da:da:08:fe:47:c7:
                    cc:3b:82:31:8a:97:09:de:0e:54:79:76:7a:ea:9a:
                    85:98:df:a3:1b:26:5a:2a:11:4e:7f:4d:82:3b:20:
                    da:56:08:67:a3:8b:c9:9d:ad:e7:00:f8:89:73:db:
                    3b:2e:46:89:d5:1c:29:eb:db:04:53:ea:86:66:0a:
                    7f:df:2c:46:56:61:66:34:c5:81:83:59:00:f7:b0:
                    4e:ec:db:bc:d6:79:56:65:08:bd:78:fb:45:da:3e:
                    c9:e2:c8:49:d4:05:c5:66:0b:0b:5a:20:73:d5:6b:
                    00:00:d8:c0:6b:74:af:1d:de:4b:f5:c3:78:4f:06:
                    44:dd:62:b3:02:38:cb:f7:71:49:70:0e:00:8d:0b:
                    f6:46:6c:68:2c:a3:84:9c:1a:1d:04:a3:6f:f0:32:
                    09:14:42:3b:fc:79:bf:05:e7:7f:e0:ac:91:d2:a7:
                    b3:28:15:ca:1a:34:55:87:5a:25:77:56:f1:ea:65:
                    cb:39:52:94:af:a1:11:75:d4:bc:8a:f7:cc:4c:18:
                    17:2f:26:7e:5f:c1:1a:61:db:ac:34:a2:7f:7f:9b:
                    79:31:ca:2d:cf:30:1e:c2:b1:09:fd:1c:78:11:09:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:29:ED:D1:2B:E6:CF:89:74:F0:BE:CA:D9:CF:D8:30:B5:CB:B9:16
            X509v3 Authority Key Identifier:
                keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d8:32:36:a8:ca:0e:51:4f:71:a9:92:0a:3f:fd:8a:33:70:
         f3:3b:3a:31:bd:bf:15:71:e8:da:c6:f3:cf:e0:bf:38:02:57:
         5d:df:c4:53:ef:de:5f:ce:89:01:bb:d8:b2:de:f7:9f:16:a5:
         50:a4:91:03:65:06:98:61:62:7a:15:09:a1:dc:2c:2c:a6:53:
         84:3f:68:19:f8:ce:de:65:5f:cb:85:dd:a4:94:ae:e5:a5:af:
         cb:1d:d3:3d:db:76:ea:9a:58:11:ae:23:80:02:53:ee:ef:24:
         82:8b:76:a9:06:ba:08:a7:ca:4a:37:43:c7:a0:51:94:89:0c:
         6a:21:f0:f8:5f:c0:a4:c8:18:d3:69:43:66:bd:ed:24:54:a2:
         ac:39:1a:12:a8:00:e6:fb:6a:00:d4:cd:3e:e5:43:8a:05:7b:
         3b:b6:d8:9d:4f:b7:2f:45:87:e1:52:a5:05:46:b4:a4:f8:51:
         eb:8e:e8:9c:a3:f3:6a:b0:48:54:69:e0:3e:e3:ed:77:75:52:
         2e:f0:f6:1c:72:56:d3:26:57:6d:31:e0:79:af:cf:3c:a0:b5:
         08:de:19:03:d8:12:26:c5:81:b2:aa:5f:96:b8:76:49:d3:ee:
         37:c5:69:40:75:af:9d:e6:1a:c7:93:13:b5:79:2d:78:c8:98:
         89:a2:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:13:05 2025 by rpki-client