Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          93v/G/DrVBieJRMzFSOje1OPg5u780wM7QnOxzmPwQo=
Subject key identifier:   3C:39:21:89:4D:A3:1D:70:1E:CA:F4:56:14:5F:37:75:EF:FE:E5:FE
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       0197469DC5685807279B468C5156C9C33CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 19:00:34 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:34 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:34 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: mxoqQ4S1jhNwDUef56Z2S4+K6tIythBxz9dAV1xE7OU=)
                          2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:c5:68:58:07:27:9b:46:8c:51:56:c9:c3:3c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Jun  6 19:00:34 2025 GMT
            Not After : Jun  7 19:00:34 2025 GMT
        Subject: CN=3c3921894da31d701ecaf456145f3775effee5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:d0:dd:e4:b9:3d:bb:8f:5d:c5:a6:7b:1d:
                    ea:0b:70:70:06:bf:ee:37:b8:55:d0:36:8b:f0:ed:
                    6b:d0:78:b1:e4:14:87:2d:de:6d:d7:63:a0:c9:30:
                    8c:bd:f6:5b:f5:fb:9c:af:8d:34:90:91:f3:bc:31:
                    b1:74:db:17:13:a1:86:5a:7a:6b:da:e4:87:70:a8:
                    ce:62:a7:ef:2a:96:25:37:0d:33:bb:77:87:cb:1d:
                    fa:16:c6:89:4f:42:35:e4:97:6f:9b:e9:1a:ea:87:
                    e8:6f:68:8f:42:cb:7f:da:c5:b0:6a:b7:a5:83:2d:
                    3e:a1:64:a6:80:7f:4d:f9:ce:2d:a7:4b:27:49:71:
                    3a:46:b3:a9:81:db:2a:b9:0e:60:0a:f2:66:37:ce:
                    54:67:ea:8a:da:f0:17:89:52:6e:ad:e8:27:13:39:
                    b0:f5:da:9e:56:d8:38:9d:da:97:5c:42:03:8c:cf:
                    89:10:00:1e:d6:ec:89:29:b7:02:f1:e4:14:c6:b6:
                    3c:26:77:2e:a3:6d:af:93:64:02:3c:60:4e:13:43:
                    9c:dd:82:d9:c3:d0:0c:dd:46:1f:e6:f0:75:a3:29:
                    d7:72:50:7f:e3:35:ea:68:e4:38:e9:8e:d4:0e:81:
                    d6:60:d1:b5:f2:60:7c:30:7d:5f:12:1b:50:6d:db:
                    c0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:39:21:89:4D:A3:1D:70:1E:CA:F4:56:14:5F:37:75:EF:FE:E5:FE
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:33:bd:b5:b8:e6:86:94:1e:8f:13:d6:0a:7a:1f:4e:a4:84:
         c6:2c:b5:fa:90:91:ab:b9:9e:34:76:c1:22:db:45:0a:64:e4:
         32:23:34:98:b2:0a:a4:85:b6:50:6f:86:0c:c1:b7:f0:27:e9:
         f2:49:5d:21:b5:5c:09:27:21:88:31:9f:43:8d:b1:46:2c:b5:
         e3:f2:68:27:c8:2b:4e:f0:ab:d2:c4:f5:85:fc:4b:c8:12:4e:
         cb:cc:ec:52:81:c7:d6:1d:4c:79:75:78:72:33:24:1f:7b:45:
         6b:f2:5f:15:46:bd:fe:d7:e0:db:c8:7e:46:5a:90:46:b9:4b:
         a6:e7:5a:12:fc:43:a9:2a:0e:ed:e3:7d:db:3c:d1:74:75:bf:
         93:14:e7:47:69:92:24:e3:16:d2:49:dd:3a:a6:f6:24:38:d9:
         02:cd:5a:f7:dd:55:00:25:3d:be:5c:be:42:ba:fa:eb:b9:25:
         90:60:f4:e6:a1:6f:11:fe:25:8b:69:6e:af:45:31:2a:b8:b5:
         cf:4a:51:fe:d2:c0:5b:ab:2e:ee:93:19:d4:5e:d7:6a:de:f4:
         d1:4c:1e:77:f4:4a:1f:da:8d:7d:4f:32:91:2a:32:f0:d0:f7:
         fd:c9:c5:64:6a:49:02:2b:22:05:6d:24:b3:3a:ef:2c:bf:b8:
         44:f7:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:13 2025 by rpki-client