Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          G+PSRMjiiXbtVeY+R9tlM4f21HDtOl86hVY4VIFoCms=
Subject key identifier:   10:BB:F8:50:8C:FD:45:5C:48:7F:2D:11:93:2D:4D:A0:8C:7A:93:76
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       019748FA66ABECA0A82862401A04BB263D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          79
Signing time:             Sat 07 Jun 2025 06:00:59 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:59 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:59 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: kBRA7v+2AP8zCoLcU4D1YSIdVzZru58I/VCoxt6+2GA=)
                          2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:66:ab:ec:a0:a8:28:62:40:1a:04:bb:26:3d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Jun  7 06:00:59 2025 GMT
            Not After : Jun  8 06:00:59 2025 GMT
        Subject: CN=10bbf8508cfd455c487f2d11932d4da08c7a9376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e3:6e:5f:79:2d:50:18:62:3b:32:36:f1:f3:
                    9b:27:d8:ee:d7:bb:d8:d1:4a:e3:b8:ca:1e:e9:fc:
                    60:48:97:2c:19:41:5c:35:7d:99:ea:37:90:bc:97:
                    13:c7:bc:49:ba:d0:e0:03:e9:dc:5f:e5:81:b7:35:
                    8e:8e:90:f3:f9:9e:d9:0b:e7:81:b3:0c:92:77:77:
                    b9:ea:3d:bd:3c:f9:38:d7:ae:67:2c:e3:f2:3f:d7:
                    b6:0f:f2:62:ca:e0:39:9e:4a:41:10:10:aa:f7:36:
                    eb:89:5d:99:ce:8a:3d:8b:bf:14:70:ee:a6:05:db:
                    f4:5c:21:86:ea:99:e4:6f:23:83:98:51:83:22:e5:
                    09:b2:10:c4:64:1d:da:21:a9:79:64:96:d1:b8:91:
                    17:6b:ec:bc:0f:01:0c:93:ed:ac:9b:38:a4:da:37:
                    ef:cc:8d:e5:47:c8:84:2e:4b:59:6f:d9:6f:90:19:
                    3b:1a:36:3b:53:3c:03:2e:5d:ab:8d:53:1c:03:08:
                    2e:75:de:78:f6:85:3b:08:be:fc:94:35:c0:86:38:
                    fa:81:6b:14:f4:5a:64:29:ba:f9:79:f3:19:c1:21:
                    c3:be:c8:02:ba:39:61:4b:cf:61:64:5b:ca:bb:f4:
                    86:5a:54:f5:23:b9:6f:9c:d8:34:aa:d1:05:f1:ea:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BB:F8:50:8C:FD:45:5C:48:7F:2D:11:93:2D:4D:A0:8C:7A:93:76
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:95:9d:24:ae:e1:cf:78:91:f3:4e:4c:fb:b8:69:6a:cf:52:
         b4:98:c6:f3:94:df:18:22:d1:94:32:91:58:51:2a:a2:70:d0:
         38:88:85:c3:ad:ac:aa:07:93:7b:18:aa:96:59:73:b4:d7:b4:
         5a:a6:a2:97:ae:32:da:33:2a:e6:2b:85:89:df:48:c6:48:85:
         f5:ec:c3:69:ce:e4:66:2c:37:a1:ed:76:33:9f:41:23:c6:aa:
         ea:d4:ca:2a:91:11:a8:c2:e7:cf:48:ca:51:80:19:68:11:e8:
         1b:0b:a9:1b:7a:0c:a6:5a:77:25:65:0c:94:23:a1:f7:08:a5:
         a9:95:a7:33:58:bd:76:7d:93:3d:12:8e:bf:b2:8b:6b:7b:c9:
         67:36:21:8f:37:c0:47:2c:2c:10:97:58:09:a3:d2:9e:6e:cf:
         1d:54:38:d8:b8:5e:00:1f:ea:dc:eb:3d:2a:79:39:15:8a:83:
         68:0e:89:35:c6:0a:f4:a6:f3:29:b4:9c:5a:84:ac:68:ac:67:
         9c:84:53:0b:be:5c:4e:aa:db:ca:01:f9:04:27:fe:12:da:33:
         14:1f:ef:b5:06:1f:c0:33:65:24:26:8e:82:83:6c:3e:b4:4b:
         0f:b5:0e:ec:e4:5a:56:72:7a:fc:da:f8:b5:df:d2:21:e5:2e:
         dd:c4:2f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:15 2025 by rpki-client