Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          KqFkq02x8YjMxrekc8GZGkcIoox+MrT0FtCnT9UEBeM=
Subject key identifier:   67:DE:1A:CE:E9:E6:ED:C6:27:15:E9:05:78:9F:1C:BC:A5:B8:9E:24
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       0197493110B71DBF52673EF2F857DAAB4209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0B3F
Signing time:             Sat 07 Jun 2025 07:00:41 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:41 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:41 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: s3WRNqNTAH6uv+T5awZdJMYK96+BaXVHD6n1nae27H4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:10:b7:1d:bf:52:67:3e:f2:f8:57:da:ab:42:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Jun  7 07:00:41 2025 GMT
            Not After : Jun  8 07:00:41 2025 GMT
        Subject: CN=67de1acee9e6edc62715e905789f1cbca5b89e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:37:2e:1f:bb:e3:c2:b2:8b:7e:c8:db:c3:
                    b6:02:c8:1c:d4:90:39:8a:93:e7:ff:bc:bf:78:82:
                    fe:6c:ad:58:23:5e:a8:b2:1c:0b:c8:d6:75:78:f4:
                    12:72:ab:56:53:40:36:d0:e0:d4:74:89:31:41:b7:
                    81:da:66:a1:62:f3:42:b5:eb:34:3b:b2:b0:97:72:
                    b9:ef:0c:65:78:f3:10:1f:c1:5e:c2:2b:37:f9:17:
                    48:b8:1e:2d:95:51:c7:1e:0f:51:2b:0f:24:74:0e:
                    76:a1:29:57:a8:88:67:b2:04:03:3d:9a:c2:d8:78:
                    d7:ba:e6:dc:f9:da:d2:ad:02:c4:52:94:34:8c:df:
                    9e:e2:dd:c8:fb:29:2f:aa:e9:bb:d8:f7:37:b4:69:
                    fb:97:ad:7e:87:9c:bd:02:0f:be:83:11:6b:c1:87:
                    0e:98:63:00:31:30:86:25:17:63:40:a9:ba:26:90:
                    2a:4b:36:9f:24:04:07:ec:d7:ad:4f:58:d0:1b:d4:
                    a9:0f:00:75:b2:3f:07:d0:37:86:b1:16:ac:c9:18:
                    e5:46:80:f7:58:78:d8:85:92:b2:5b:1f:d8:9d:b5:
                    bc:b3:a5:48:96:f7:43:48:f5:86:e4:f9:00:55:e4:
                    75:ec:65:21:f4:c2:0a:fb:fb:54:7c:e1:1d:2a:92:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DE:1A:CE:E9:E6:ED:C6:27:15:E9:05:78:9F:1C:BC:A5:B8:9E:24
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:66:ab:38:66:f9:dc:97:5d:b2:9e:c2:24:c7:df:11:b6:62:
         2c:4d:e2:53:e9:b5:a5:0d:1f:4a:71:26:b7:dc:60:65:c1:54:
         32:bd:89:44:ca:80:fc:6a:74:9d:77:9c:9f:9c:fe:08:30:d8:
         5b:ea:18:1e:8d:bf:cb:be:a8:22:10:3d:87:bd:79:d5:a4:7a:
         e0:fd:2d:45:4d:3d:9e:b8:b6:ec:1e:2f:61:4d:b7:7e:96:38:
         ed:d5:7c:94:69:29:ba:73:2c:58:1d:c0:2b:14:d1:98:bd:70:
         bc:8a:bf:29:85:8b:bf:18:14:24:1c:99:84:62:07:65:9e:7f:
         6f:d4:2a:fe:9b:b4:e5:f2:00:09:ae:80:1d:71:98:fc:d4:e0:
         6c:86:14:5b:5f:6e:e8:f2:cd:49:97:56:61:d7:3f:97:f8:d6:
         2e:bd:1d:8d:12:1c:c6:ce:c3:f2:bb:92:ea:11:f9:42:af:d0:
         c2:07:34:a8:64:89:3a:ea:63:4f:5c:4b:56:f8:d7:22:b8:b7:
         a3:0f:66:02:35:8a:bd:3c:71:8d:4f:93:20:78:69:7a:46:bf:
         1a:ca:16:b9:f5:35:1d:57:2b:13:55:a0:4b:28:66:0d:1a:86:
         04:73:55:c2:a1:5e:f2:6c:f1:fe:c5:fd:14:5d:61:d8:c4:54:
         6b:43:e8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:26 2025 by rpki-client