Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
File:                     Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json)
Hash identifier:          8XyPqHigcII21W+Ip73zx71FrPfOwbWG1JplIMIu+fQ=
Subject key identifier:   99:CE:BB:5F:DA:04:F0:85:ED:81:4D:37:F4:10:AF:A1:07:E8:CC:58
Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF
Certificate issuer:       /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
Certificate serial:       0197504587768EC6CD3BE573E905503A9426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
Manifest number:          52
Signing time:             Sun 08 Jun 2025 16:00:23 +0000
Manifest this update:     Sun 08 Jun 2025 16:00:23 +0000
Manifest next update:     Mon 09 Jun 2025 16:00:23 +0000
Files and hashes:         1: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: exRgGAqA0m7Lmo8s0PpgDQ52ywRpmJKh407y0XpI6qQ=)
                          2: t_pLbPAavF67cllBm3pb39Lar-8.roa (hash: AxZybzq25d8wj7w1AsP3BEtmw0VKt4vny7mHzyR3/9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:45:87:76:8e:c6:cd:3b:e5:73:e9:05:50:3a:94:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef
        Validity
            Not Before: Jun  8 16:00:23 2025 GMT
            Not After : Jun  9 16:00:23 2025 GMT
        Subject: CN=99cebb5fda04f085ed814d37f410afa107e8cc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7a:79:a5:8a:fb:c4:94:a2:f0:e5:b5:ff:d9:
                    eb:cd:39:2a:b5:0d:60:ac:03:03:ed:a4:f6:82:c5:
                    13:5b:80:df:b8:3e:9b:e8:53:c1:81:59:c2:27:0e:
                    e5:d9:fb:5e:1a:63:b4:58:f9:cc:49:ad:cf:1a:9d:
                    54:77:6c:74:d5:0b:62:c8:d7:a0:ba:6f:2d:24:1d:
                    6c:e4:34:87:01:a5:36:1c:8c:a7:01:d8:8c:e8:68:
                    b5:88:37:2f:9e:b0:c6:2f:3d:02:54:80:f9:64:20:
                    28:61:f6:c1:12:11:0d:b5:09:b6:9a:68:fe:23:a1:
                    e9:57:32:f8:21:6b:0a:f9:99:8c:99:1c:64:a7:63:
                    47:f6:41:2c:3f:c4:2c:1d:8a:31:c8:50:e5:39:22:
                    fc:c6:d4:dd:0b:bb:39:d0:c3:96:dd:99:2f:c8:96:
                    3c:a6:6f:9f:5d:62:8d:d7:84:0c:55:42:9f:05:e0:
                    4e:72:e7:87:10:2f:a2:0b:5a:d5:33:fb:2c:99:4f:
                    40:04:6e:c1:18:3f:b4:1a:bf:5b:52:a8:05:82:98:
                    41:d3:cb:3c:5c:81:21:35:5f:b8:69:91:f8:ea:65:
                    f2:62:8d:d5:9e:8f:a9:9c:78:53:e8:dc:83:e9:63:
                    65:b7:4c:4c:60:1a:69:cf:78:65:66:dc:4f:7a:48:
                    2b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CE:BB:5F:DA:04:F0:85:ED:81:4D:37:F4:10:AF:A1:07:E8:CC:58
            X509v3 Authority Key Identifier:
                keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:24:a3:78:bb:51:23:6a:3d:11:ba:31:c6:45:ae:95:ab:c0:
         6d:52:83:d0:8b:13:38:82:89:c2:cb:4a:7f:c9:68:5f:4f:73:
         12:68:5d:3c:cf:4c:82:c8:ab:e6:04:5a:a1:e4:8b:4f:53:ce:
         d4:14:47:1f:cc:79:18:77:0d:ca:dc:93:88:2d:cd:8b:fb:64:
         0f:86:10:d0:14:12:25:f8:93:b5:b4:aa:5e:ba:47:22:85:b9:
         6f:1c:56:51:a5:2c:3a:2b:4a:18:65:5f:73:2a:a6:0b:79:e6:
         53:67:e8:5c:f0:2c:d7:55:2c:95:c8:b7:77:d4:c0:c3:1e:0c:
         67:1a:29:5c:3c:91:4c:a5:c4:41:07:d2:40:5b:37:8f:60:ea:
         aa:15:9e:f6:f4:9b:e5:46:ba:b6:4f:52:77:20:72:e5:8f:e0:
         e4:29:ce:af:18:71:06:58:b6:60:d3:df:72:93:1d:04:94:4a:
         98:b7:35:bb:b3:0e:4a:0a:61:2e:f9:84:4a:5b:fe:70:dd:4f:
         ab:35:63:84:fb:dc:91:25:56:7b:4d:5f:f8:ff:ea:d5:dd:d8:
         32:63:2f:da:25:62:7f:76:a7:21:ce:4f:3e:b8:fc:52:f7:f6:
         b1:ee:6e:83:ff:0f:c3:4c:9b:92:d7:ea:64:93:93:31:ad:de:
         48:42:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:26:20 2025 by rpki-client