Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          kuLgKTxOtfPvWfrGtIZCrLtc3UFcm8WYmVTUEOkurmk=
Subject key identifier:   10:72:FF:4B:98:7F:C5:3D:A0:0A:61:E4:AD:DA:1F:1A:0B:21:AA:14
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       0197499EDC315512B49BB21D7220D0EA273F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          0FB0
Signing time:             Sat 07 Jun 2025 09:00:37 +0000
Manifest this update:     Sat 07 Jun 2025 09:00:37 +0000
Manifest next update:     Sun 08 Jun 2025 09:00:37 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: LhT4YGhzsHdpGwBp95K4bjcZSaHFwfW0j8U5HG8qfBI=)
                          3: XN_B3DWfBoiPOokFjbBN7WpWUJI.roa (hash: a6a3vckoKglRgJ10cyCX/u7htKkSn4XXsBvj/+qxYDM=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9e:dc:31:55:12:b4:9b:b2:1d:72:20:d0:ea:27:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Jun  7 09:00:37 2025 GMT
            Not After : Jun  8 09:00:37 2025 GMT
        Subject: CN=1072ff4b987fc53da00a61e4adda1f1a0b21aa14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f6:9c:c1:08:34:aa:c0:db:c5:5d:46:71:5f:
                    16:d2:9d:ec:a1:68:e7:0e:4d:40:1e:27:2e:15:e7:
                    3e:30:3e:e1:90:db:b6:1c:f8:22:d1:01:ec:c4:d9:
                    46:98:c8:56:6f:00:fa:0c:32:60:79:e0:06:1e:2c:
                    b9:28:ba:25:10:f2:33:46:4a:49:82:2c:19:64:fa:
                    c5:fd:71:6a:ba:83:b0:ad:11:77:50:5d:a9:5b:ae:
                    69:8f:2d:2b:5a:a6:d6:d8:15:7d:1a:91:12:d7:6e:
                    01:52:dc:53:7c:1d:bb:48:dc:4b:e2:f8:4e:cd:12:
                    b5:0d:59:65:3d:47:61:d1:04:36:03:5f:47:a5:80:
                    66:d6:ce:aa:56:b4:f2:7a:ad:37:2c:6d:24:e6:ca:
                    49:c5:d3:3a:5f:a1:8e:63:21:0e:d1:cd:5b:77:b1:
                    43:9f:4b:d5:b7:2a:88:b7:05:87:3c:f8:c9:6d:97:
                    5c:fe:fa:5e:dc:bd:bd:c0:76:0b:4d:c7:22:aa:fa:
                    8b:14:a2:78:d4:da:ed:00:cd:03:c1:49:ab:9a:ef:
                    6b:f1:26:bb:e3:37:30:15:14:c5:a2:c2:ac:7b:24:
                    13:7d:46:f8:57:ea:76:5b:d4:05:d5:b0:cf:04:c5:
                    2a:46:e1:99:f7:2e:01:e1:c6:f5:d2:56:61:61:b4:
                    6c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:72:FF:4B:98:7F:C5:3D:A0:0A:61:E4:AD:DA:1F:1A:0B:21:AA:14
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ad:a0:cd:1e:40:b8:7b:e2:8d:cf:3b:da:0d:fc:b5:40:e7:
         77:7e:e3:04:83:c8:98:fb:6f:c9:1c:44:ec:f6:48:93:e6:43:
         8f:db:fd:21:2c:0e:36:cc:e8:91:62:a0:49:5c:69:e6:35:60:
         19:21:8f:9c:ed:85:04:5d:bf:f8:9e:e3:3a:73:f6:23:d7:40:
         f1:85:a1:dd:c4:9b:ba:f9:da:b1:e4:98:82:45:04:d0:88:f9:
         e7:09:1a:63:f4:82:a2:5d:08:33:de:f6:30:9c:aa:d0:41:89:
         a8:38:3e:84:fe:d9:82:99:e7:7f:69:82:03:13:f7:8f:d6:a0:
         eb:dc:a1:0f:71:eb:d9:01:c4:12:02:f9:10:fb:b6:a2:e2:9e:
         db:27:f4:fb:67:a3:34:cb:1a:6d:ae:29:53:1e:83:8b:91:83:
         13:d5:6e:50:fb:ef:95:ba:61:c7:62:0e:42:98:ad:d3:d9:f2:
         ab:83:12:bc:20:83:a1:c0:96:44:6b:22:a6:43:69:05:c4:96:
         52:fd:67:f4:ed:2a:df:e3:b8:69:c4:07:88:f9:19:3e:76:33:
         54:9e:93:47:0f:7d:6c:8c:32:bb:3f:44:ce:42:b6:a0:f4:69:
         85:17:fc:0e:89:7c:0b:5d:8d:b2:00:ab:59:73:2c:3b:4f:a2:
         a6:da:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:40:30 2025 by rpki-client