Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          Tq/1sApy75qUF7ut/6lygi4q+74EN0qwde2yk2580Xg=
Subject key identifier:   CB:06:69:E9:99:F7:00:30:F8:E6:0F:8A:3E:E8:23:15:AB:BD:90:96
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       01974A7B787D389BEF6957C930B7F70E79CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          126C
Signing time:             Sat 07 Jun 2025 13:01:34 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:34 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:34 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: YDnFBEdiIDU5R+3qVNDSuqxQQUUBRPwZ7v2F3XKgaFU=)
                          2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:78:7d:38:9b:ef:69:57:c9:30:b7:f7:0e:79:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Jun  7 13:01:34 2025 GMT
            Not After : Jun  8 13:01:34 2025 GMT
        Subject: CN=cb0669e999f70030f8e60f8a3ee82315abbd9096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:e5:c8:b5:dc:8a:03:61:0b:5d:48:7d:87:bf:
                    b5:58:e7:f6:78:a5:d6:5b:83:e1:25:12:60:00:cb:
                    e4:3a:a5:c4:55:3f:5e:82:bf:3d:03:67:14:a1:06:
                    38:71:b4:45:2a:3e:e2:0f:ff:9d:45:86:07:a4:d9:
                    08:93:51:a5:01:67:4f:aa:f6:19:17:10:01:bd:94:
                    d5:3b:39:31:9a:be:16:1d:c4:81:82:2c:4c:04:f4:
                    9c:03:36:e6:5b:dd:d4:5f:6d:aa:1f:e7:20:41:f8:
                    b1:fe:b8:a7:b2:6f:b8:83:4f:f5:5a:b9:ac:e0:4b:
                    c5:95:2a:6f:7d:85:ca:55:ce:70:99:55:f0:25:36:
                    19:a3:e4:d5:a2:1c:8b:4d:7a:13:b2:91:9b:7b:f1:
                    02:2d:d4:ed:51:b5:61:c0:ae:78:c8:0b:2e:ec:b6:
                    44:2e:e7:28:4f:be:0b:c2:f9:15:76:1f:5c:df:2d:
                    70:e7:b5:21:7e:31:3b:90:59:ab:15:41:79:21:f5:
                    f8:58:b0:51:a8:a9:de:80:50:3b:e1:e1:ee:4e:25:
                    13:0f:0d:e4:a8:36:1a:5e:e4:bf:0d:2a:e3:3c:72:
                    1c:0c:4f:b7:6b:b8:eb:b3:7f:8a:3d:4c:bc:9e:d6:
                    15:6f:26:dd:a3:82:76:5d:d5:e8:f3:a9:04:c1:d9:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:06:69:E9:99:F7:00:30:F8:E6:0F:8A:3E:E8:23:15:AB:BD:90:96
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3b:18:2c:23:9e:87:e7:bd:30:f6:bf:05:ee:20:3d:b0:da:
         10:8a:42:52:e7:31:8f:d5:30:e4:fe:37:a4:d2:3a:cf:85:91:
         ab:ba:07:59:f2:2e:45:89:df:6b:44:92:4c:09:e3:fa:f2:d7:
         58:5d:1a:8f:8f:46:88:71:ed:d8:ea:ae:ce:f1:26:de:7a:4f:
         02:24:fd:9d:8b:65:70:7a:1f:e1:22:6a:17:03:b1:ba:80:72:
         1a:c4:ff:25:22:cf:88:26:12:7f:6f:46:2d:a3:90:f0:f0:fa:
         47:51:7e:9f:cb:73:74:1c:9d:e7:5c:66:27:df:b9:4b:b9:0e:
         6e:b8:ef:38:a7:85:27:53:00:c9:84:ea:d7:68:35:61:cd:0d:
         7c:bb:43:8f:bf:b4:67:00:d1:77:7d:ea:5c:ec:17:96:9d:36:
         61:15:69:84:ef:7c:c8:30:ab:1c:45:76:f3:86:a1:c4:10:41:
         b5:f9:41:da:ae:e8:fd:64:be:f8:59:04:2b:0a:16:3e:d5:a3:
         9f:16:64:a8:71:3a:76:54:ac:14:25:33:0e:8d:30:1d:53:b5:
         db:e7:1a:e1:a4:95:5e:40:52:d0:34:dc:33:0e:d1:9c:d9:96:
         cb:a3:90:c2:9b:ce:0f:ab:97:65:3d:b7:6b:35:c5:39:0c:98:
         dc:d3:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:10:45 2025 by rpki-client