Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File:                     BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier:          xBst/sMWRO21f+KuXIgVgE2RCUY/O/rGDk8qeJSr+5I=
Subject key identifier:   2D:2A:63:D6:A6:EC:DE:19:E6:5C:21:DE:44:B9:B0:A2:3B:43:BD:B4
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       01974C9FD0D02890F562F1745FBF27FDFEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 23:00:31 +0000
Manifest this update:     Sat 07 Jun 2025 23:00:31 +0000
Manifest next update:     Sun 08 Jun 2025 23:00:31 +0000
Files and hashes:         1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: OG0M65DkJus+fEpJeA0fNoCFOPMaXNshhBesxEDitmk=)
                          2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:9f:d0:d0:28:90:f5:62:f1:74:5f:bf:27:fd:fe:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: Jun  7 23:00:31 2025 GMT
            Not After : Jun  8 23:00:31 2025 GMT
        Subject: CN=2d2a63d6a6ecde19e65c21de44b9b0a23b43bdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1a:81:c1:29:3e:1f:12:9f:cf:b3:72:73:05:
                    a6:c0:98:c3:47:d7:67:59:74:bd:9c:42:d3:54:d8:
                    ae:05:7c:56:79:d0:b8:14:bb:9a:1e:d5:00:13:cb:
                    d2:06:dd:9e:27:24:cb:8b:40:f7:9c:ec:65:4c:c0:
                    43:d7:8a:09:2d:25:d5:85:50:5b:90:5d:4a:f2:a6:
                    1d:a6:d0:4f:96:88:27:99:a6:25:e6:4c:40:97:fb:
                    c8:c1:05:ed:9e:ba:62:c6:9b:8e:30:f6:a5:97:df:
                    03:9c:77:1d:a2:dc:0e:34:3f:6a:d0:a7:03:84:11:
                    97:93:b8:8e:3b:d3:f0:9d:f9:1a:c6:97:60:2b:4c:
                    cf:e0:cf:95:f3:25:a5:70:cc:96:3c:6d:86:5b:ea:
                    18:08:c2:e7:45:73:ff:21:ec:50:bd:93:8d:d1:4d:
                    f1:cc:49:e8:d6:e8:7d:c3:62:bd:61:3c:64:1f:08:
                    e6:7c:80:51:1e:28:fd:04:dc:7d:3f:65:49:e8:3b:
                    c3:58:34:da:16:9a:29:08:09:db:b2:a1:61:2e:34:
                    2f:86:2e:b6:7c:0f:5d:cc:f3:fd:b4:ba:63:a2:15:
                    94:c2:1c:f6:72:bd:64:77:59:54:77:04:b9:f5:1a:
                    b1:aa:3e:c6:a3:37:f4:90:08:0a:24:00:86:ec:c2:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2A:63:D6:A6:EC:DE:19:E6:5C:21:DE:44:B9:B0:A2:3B:43:BD:B4
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:46:94:ba:31:f8:13:2e:f9:a5:63:94:d7:53:47:e5:83:11:
         17:39:a2:74:be:a2:cb:70:6d:cd:61:8d:c2:6f:3f:20:fb:db:
         8d:41:14:ee:cb:94:a9:4b:50:ab:31:e0:3c:23:c9:db:e3:5b:
         95:9a:b1:1f:46:ee:c2:98:99:b4:93:b6:74:a5:68:24:a3:b3:
         f7:84:26:66:07:39:66:1e:58:36:ec:32:14:d2:eb:0a:b5:96:
         8b:fd:69:66:66:0f:e6:25:b3:8c:a3:57:6b:c7:22:f5:93:57:
         e1:9a:04:bb:e0:0d:61:7d:87:2b:75:96:5e:07:dc:78:41:6c:
         c6:3b:56:1c:48:7d:05:11:44:2e:5a:83:f0:6e:5a:78:8e:6f:
         8e:c8:31:fd:00:18:20:2f:c5:e8:8c:1d:84:fb:d4:88:c5:34:
         a1:97:ca:6d:be:f2:c6:54:67:82:09:fd:6e:c8:6a:4d:f1:71:
         93:d1:45:a7:63:71:e3:17:63:43:bc:cf:68:2a:8f:d4:da:53:
         3c:01:22:8c:32:f0:16:2d:a6:58:12:36:6b:a4:ce:a1:92:08:
         c1:f9:ab:42:80:86:f1:9a:c4:9c:70:be:44:06:48:7c:90:92:
         2c:e9:60:0f:e3:8f:7e:68:f8:03:9b:7a:3b:33:eb:44:94:77:
         de:3d:40:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:13:59 2025 by rpki-client