Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          OwP5YKARp+e9U57Iqs9BZeREBieBJKLadv5ALg2jVwk=
Subject key identifier:   F8:37:5E:F5:2C:1A:B3:9C:F1:67:29:23:95:FB:F0:67:F0:23:C2:AD
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       01964D7DDD3CB8C570A1DCA2953E03885A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          082C
Signing time:             Sat 19 Apr 2025 10:00:16 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:16 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:16 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: acp5NSJ3deDTEkV+7RuGva/g7CLUHgWrgme+PbrZGg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 10:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7d:dd:3c:b8:c5:70:a1:dc:a2:95:3e:03:88:5a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Apr 19 10:00:16 2025 GMT
            Not After : Apr 20 10:00:16 2025 GMT
        Subject: CN=f8375ef52c1ab39cf167292395fbf067f023c2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3b:db:ab:56:2d:5d:c1:53:de:83:d3:3a:2e:
                    55:1d:ab:ee:dc:85:a2:25:f3:7c:95:90:00:9b:54:
                    94:73:e4:68:7b:79:5d:6b:02:b4:10:52:0c:e8:77:
                    72:66:aa:49:cd:74:ad:bf:f5:cd:86:30:b8:3a:00:
                    84:10:41:03:b3:25:76:6b:be:9a:be:10:e4:11:45:
                    6f:bc:2d:d9:db:ea:3f:ca:ae:31:91:f5:fa:27:e4:
                    07:cc:7b:c6:b1:74:a1:c0:b9:a8:f6:d4:ad:22:50:
                    fe:8a:cc:5d:40:34:be:ed:92:cd:5d:e5:cb:41:e8:
                    9c:a6:d5:be:0b:16:6b:71:19:5c:14:47:5b:49:10:
                    e6:f1:a0:a4:67:6b:80:62:04:37:ee:f1:46:c5:41:
                    81:77:3a:9d:c5:32:e3:8d:bb:3d:c9:59:a4:de:b6:
                    11:55:9e:db:dd:6d:8e:16:7c:6a:ab:54:52:8b:3b:
                    04:5a:9a:27:01:d9:56:c9:25:e8:18:b9:18:58:98:
                    67:1b:91:ab:d1:6e:b3:69:9a:7e:f0:d9:7e:92:9d:
                    7f:62:63:2f:5d:c4:dd:2c:34:8f:3d:cb:0a:6e:28:
                    a2:e6:f4:c5:09:04:6d:7c:40:78:58:4c:56:bf:ad:
                    68:51:97:9a:6f:d0:8d:b7:38:d1:86:04:12:73:24:
                    a7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:5E:F5:2C:1A:B3:9C:F1:67:29:23:95:FB:F0:67:F0:23:C2:AD
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f0:0c:ee:fe:45:f8:f2:cc:24:7a:b3:e5:9e:08:a3:11:49:
         e7:07:df:ce:f1:36:14:40:6c:c8:59:88:70:36:dd:24:6f:8e:
         d7:63:e2:35:7d:a1:a8:7c:d4:5e:1b:c5:61:88:ca:73:91:5d:
         d3:7e:8c:b4:c7:1e:a1:84:a5:b4:3d:cd:40:d2:b0:b0:1f:44:
         51:ff:a9:4b:f0:f0:c9:a9:f0:ed:04:e4:93:be:56:67:67:14:
         cc:ef:a6:3a:9d:ee:b9:1a:9d:f6:a7:ce:87:b8:31:7e:cd:41:
         c1:28:3a:e1:72:41:58:ba:0c:5b:69:db:51:5d:01:81:f1:6a:
         ca:da:64:dd:c7:9d:40:f5:30:9e:53:48:30:86:8a:20:d8:f4:
         02:a9:61:41:fb:ab:96:ba:f1:26:aa:d3:ee:8c:74:8a:82:4a:
         dd:cf:7c:ca:d4:18:25:fe:e5:80:37:a8:e9:2f:db:2a:73:ba:
         27:2f:b9:75:58:74:df:21:3b:77:64:07:93:e8:7c:fb:07:99:
         eb:42:b4:19:8f:69:cc:03:5b:fb:dd:bb:61:f8:39:93:a3:13:
         ec:71:90:9d:29:d4:30:40:1c:c7:f9:60:f3:44:ac:41:fa:e9:
         15:59:9e:31:61:88:aa:65:cb:3e:09:b7:d6:87:d6:a6:29:b9:
         63:82:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:00:02 2025 by rpki-client