Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          hy/ickYM3oyXS4LXi7YSmawAXW2tHObGYtmwPIezxII=
Subject key identifier:   B1:89:74:16:5B:DA:AF:14:24:3C:4B:0E:9C:C8:AA:12:C7:89:74:EE
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       0197458AECE67D5799D35394229AE62EC95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          0490
Signing time:             Fri 06 Jun 2025 14:00:21 +0000
Manifest this update:     Fri 06 Jun 2025 14:00:21 +0000
Manifest next update:     Sat 07 Jun 2025 14:00:21 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: q9X+bJ68bWqYI0Aozq8jbfIKrTMpLj+ek9L8j4vmwwI=)
                          2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:8a:ec:e6:7d:57:99:d3:53:94:22:9a:e6:2e:c9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Jun  6 14:00:21 2025 GMT
            Not After : Jun  7 14:00:21 2025 GMT
        Subject: CN=b18974165bdaaf14243c4b0e9cc8aa12c78974ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:c1:d4:04:fd:9b:a1:4d:1a:54:96:8e:17:
                    3a:10:5c:56:b9:0d:4d:d4:3b:f6:9c:0f:8e:89:9a:
                    f9:30:0b:02:28:79:f2:92:36:5d:85:ef:42:6f:db:
                    f2:da:1e:fe:9c:27:39:c7:c7:a0:8a:c4:48:b9:05:
                    6d:a0:81:89:48:db:7d:a1:53:30:3e:af:ef:0b:af:
                    ae:49:25:a0:86:ba:91:0f:7b:ff:e3:b9:65:80:41:
                    6a:d1:ff:7d:18:e3:ec:3d:b7:dc:4d:37:6b:47:52:
                    41:be:89:8b:27:b6:05:1c:3c:8e:d3:e3:41:9e:c5:
                    a8:2d:3f:2b:84:fb:fc:80:63:68:55:34:e0:a4:e9:
                    7a:55:82:01:70:8f:53:9a:70:6b:9b:2a:b0:6f:d5:
                    cf:7d:66:bf:7c:18:fc:3e:19:e1:f1:85:99:e7:d7:
                    2d:c9:b1:e7:e7:6e:ee:89:5b:49:4e:3b:8a:f5:89:
                    a8:d5:d2:29:29:75:ff:4f:88:48:7e:3a:af:40:ee:
                    dc:11:6f:a8:89:e4:f0:7a:10:ba:5b:c2:fc:32:75:
                    bc:d9:97:d2:38:72:b4:f3:85:c8:93:16:72:03:fb:
                    84:35:a0:77:d0:71:c0:fa:52:48:80:a7:4a:10:f7:
                    d0:30:18:52:b3:cf:53:76:5f:7b:5b:27:e8:5b:58:
                    cb:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:89:74:16:5B:DA:AF:14:24:3C:4B:0E:9C:C8:AA:12:C7:89:74:EE
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:57:da:76:f8:1a:50:3b:c6:33:82:bd:f4:11:e8:c0:e3:
         1c:c1:c9:50:60:06:84:17:cc:34:55:01:80:78:e9:f3:ee:6e:
         38:c9:bb:71:5b:65:15:c2:a1:7a:a4:df:22:9a:50:e9:b7:6b:
         70:90:55:e4:28:30:25:cf:b7:e6:97:f4:88:ad:bc:a0:56:10:
         c0:95:bf:93:b3:3f:57:b6:da:cb:55:ca:45:42:71:2d:fb:fe:
         11:23:d7:e2:2b:c7:61:3f:82:53:0e:01:46:6d:2b:05:2a:61:
         03:bf:b1:af:00:6b:e5:0f:4f:c6:2c:33:5c:95:6e:a7:83:21:
         be:6d:0a:21:d2:24:16:6b:c4:fc:7a:2e:8c:c5:fb:9a:80:d2:
         58:24:63:0d:6e:b3:45:11:03:98:49:0d:70:d1:80:e9:40:3b:
         78:05:7c:f4:97:54:b4:dd:c0:b1:e5:72:3c:c2:ba:3b:79:22:
         9b:2f:08:b6:4a:22:6b:f0:45:94:6d:76:05:f4:d1:7d:95:84:
         e1:85:2f:e6:7f:89:1f:e4:08:95:32:8b:d4:41:72:a2:67:8a:
         24:96:b4:3d:a4:c6:75:7f:e6:8d:59:bc:1c:db:6e:e9:b8:b0:
         6c:5c:84:1b:c1:9c:90:ff:d3:1b:2c:85:39:0a:03:f1:10:09:
         68:0d:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:50 2025 by rpki-client