Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File:                     BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier:          OlHGsUQo+Ta8HwH8YCuc5bNDe/LzmLv0qu18u7hCvXs=
Subject key identifier:   48:15:A6:B3:62:AD:8C:F0:FB:44:DD:DF:F1:59:26:2A:95:7D:90:DC
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer:       /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial:       01976396A16B58988DCFCFD53E68CBFC09BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number:          1589
Signing time:             Thu 12 Jun 2025 10:01:45 +0000
Manifest this update:     Thu 12 Jun 2025 10:01:45 +0000
Manifest next update:     Fri 13 Jun 2025 10:01:45 +0000
Files and hashes:         1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: WBdwhpRmPKIv+fSZfJr87QiswtrEeYTf/omtqveAie8=)
                          2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
                          3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:63:96:a1:6b:58:98:8d:cf:cf:d5:3e:68:cb:fc:09:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
        Validity
            Not Before: Jun 12 10:01:45 2025 GMT
            Not After : Jun 13 10:01:45 2025 GMT
        Subject: CN=4815a6b362ad8cf0fb44dddff159262a957d90dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d6:9a:c1:e3:65:4a:88:ec:3d:33:5f:8b:31:
                    09:74:84:92:c2:32:03:f3:6b:fc:9f:23:f1:a2:c6:
                    4c:72:d9:61:b5:ce:fe:ca:5a:9c:06:1b:5a:a3:24:
                    3e:af:78:6a:dd:ea:57:11:ab:7f:12:63:1f:00:fc:
                    2e:07:c7:5a:db:d8:b8:ef:05:f3:01:3c:97:aa:f7:
                    6e:ee:9c:b8:11:d9:4d:49:a6:01:38:42:57:b8:51:
                    2b:1f:3e:9f:6b:c9:e3:c0:95:c1:00:fe:9b:ca:88:
                    50:e8:fb:4f:b1:8c:eb:96:9f:64:c5:16:7d:01:56:
                    20:42:38:da:09:ca:eb:25:5c:d7:c2:29:66:6e:38:
                    50:da:d9:44:96:8c:fa:af:1d:ce:73:4a:79:db:25:
                    8e:e9:a6:22:de:ed:bb:13:e5:10:ca:c4:05:99:ad:
                    6b:92:f4:3f:0f:c1:54:0d:bf:81:e9:76:6f:ed:d0:
                    12:6d:74:e9:0a:3d:76:15:02:16:cb:5e:36:c4:19:
                    71:fe:bd:a5:d3:7d:27:25:4b:fe:0e:04:fa:fc:8d:
                    70:f3:01:af:39:b6:bc:d2:81:0c:48:b7:39:04:26:
                    ac:75:24:19:7b:72:af:a3:31:69:6f:6a:af:7f:63:
                    23:41:b9:cd:6f:08:e0:39:b2:92:e2:51:7f:21:d8:
                    af:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:15:A6:B3:62:AD:8C:F0:FB:44:DD:DF:F1:59:26:2A:95:7D:90:DC
            X509v3 Authority Key Identifier:
                keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:a1:c2:61:f7:d5:db:89:0b:c9:7d:73:c4:e3:99:c6:1d:
         07:84:ad:b3:ca:d2:e0:82:14:c2:1c:f7:ac:11:1b:06:f1:5e:
         d0:1c:9c:2f:4d:98:99:97:40:1d:4a:a8:0d:3a:5e:d8:73:be:
         3d:f1:24:fc:20:ea:57:26:6a:a0:5b:ed:fb:85:c5:d7:ec:f7:
         fe:25:f4:7e:b7:b4:28:1c:96:92:27:e9:aa:9a:e0:0b:9c:04:
         66:00:d4:78:20:9d:07:c3:b7:e1:00:ed:21:ed:25:ae:b2:b4:
         93:58:4a:e3:ee:1a:98:1f:40:f3:ef:8e:b6:c3:34:db:86:22:
         0b:46:78:a6:89:08:64:b2:ad:85:b7:f5:d5:b5:07:d4:aa:eb:
         10:34:9b:68:d3:16:06:1f:31:08:91:e4:14:6e:43:f4:9d:18:
         15:9f:67:17:5b:79:05:2c:55:3e:9a:53:af:1d:cd:d7:dc:34:
         b3:2a:fb:84:48:19:7b:46:57:75:7b:2a:0a:64:00:61:2f:0f:
         db:c2:79:96:85:25:63:66:3b:56:04:af:aa:2a:77:89:74:c2:
         ff:a5:0d:6b:1e:3c:52:78:9c:e5:68:36:d0:e1:6a:5d:9a:4e:
         29:ab:57:7d:fb:ce:87:4f:74:e6:fa:69:fd:32:08:68:b4:3c:
         37:f2:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:25:43 2025 by rpki-client