Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File:                     BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier:          YgfAoMXhNUMCkK6WXifyWuD2LR4HfhVhq0dRN4+/3Fc=
Subject key identifier:   16:EF:77:9A:E7:07:B5:D0:EC:E8:0C:71:DD:40:F0:72:63:99:D9:BA
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer:       /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial:       01976C61E4631C4CC5796FFF772FB49B4B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number:          1106
Signing time:             Sat 14 Jun 2025 03:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:44 +0000
Files and hashes:         1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: uMsDGlfD0udwyykIixC3oLLy2Mac7qBus2ib1S2nlnU=)
                          2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
                          3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:61:e4:63:1c:4c:c5:79:6f:ff:77:2f:b4:9b:4b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
        Validity
            Not Before: Jun 14 03:00:44 2025 GMT
            Not After : Jun 15 03:00:44 2025 GMT
        Subject: CN=16ef779ae707b5d0ece80c71dd40f0726399d9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:34:9e:45:69:25:3f:e6:43:1b:bc:4c:9b:c3:
                    a6:56:21:d3:26:e7:46:63:f5:a3:e2:84:4b:e4:8d:
                    5c:8b:64:f7:98:0f:d0:0f:6f:63:ea:1a:87:e6:bf:
                    e6:bb:66:24:e6:cb:24:a5:3d:87:fc:53:73:b5:ef:
                    1b:bd:48:0f:fc:bd:f4:47:9d:e9:40:15:f2:8b:92:
                    2a:d9:b1:6b:ab:f0:48:1f:cb:a5:f0:dd:b2:5f:41:
                    1e:70:c6:bd:bf:56:31:e9:cf:fd:13:f0:48:cb:01:
                    4f:a1:e9:88:4a:76:99:fa:1e:e5:48:32:e9:8c:51:
                    09:a0:3f:dc:1d:1c:2c:e5:91:73:60:d0:21:97:94:
                    46:b1:77:b7:84:60:63:ae:22:70:e2:67:a5:74:e3:
                    68:8f:f4:6a:44:40:db:c3:96:cb:3a:de:f0:7c:3a:
                    63:5a:3c:e5:f6:9b:53:87:a5:b9:42:7b:95:6b:76:
                    ea:79:57:00:c0:8f:1f:73:94:44:20:40:be:5b:57:
                    0e:ef:3d:16:10:e9:01:0b:99:98:72:72:19:c9:41:
                    a5:32:8b:c5:df:dc:be:2b:c7:5a:cd:49:ac:93:6b:
                    93:c5:c5:c9:72:89:ba:95:b0:a7:a5:a8:c8:2b:da:
                    fb:6a:ac:55:75:14:6d:ec:37:36:8d:59:e3:03:c4:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:77:9A:E7:07:B5:D0:EC:E8:0C:71:DD:40:F0:72:63:99:D9:BA
            X509v3 Authority Key Identifier:
                keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:ef:a3:20:0a:7c:e4:e6:c1:5d:f7:b0:de:17:12:bd:a9:
         44:ee:9e:70:c4:d7:4d:98:c6:c7:2b:38:b1:e3:e5:5b:93:5c:
         3a:2b:80:3b:3f:a9:84:1f:ed:6a:47:6d:fe:a8:3d:77:53:ca:
         10:bf:53:e2:af:a1:3a:80:a0:e6:21:8c:9f:1d:91:d1:11:fa:
         dc:d2:f9:8b:7f:6d:48:5b:13:a8:ba:40:ab:46:bc:e4:ff:c4:
         b7:8a:b1:dc:39:9e:45:74:ab:3f:51:a3:d9:33:d4:85:f5:d8:
         b0:c4:1b:ac:fe:67:1e:42:7e:ec:bc:e3:7b:00:29:91:01:18:
         14:31:c5:c6:59:7a:09:aa:10:d7:1e:4e:13:36:9a:68:14:a5:
         e6:bc:03:ee:93:f7:27:59:3f:58:99:58:27:da:6c:45:30:ee:
         90:07:2d:68:e3:c5:d5:a0:9a:af:56:fe:db:66:b7:26:0f:76:
         63:74:64:97:6f:77:c7:ef:37:25:d2:58:8f:fa:94:b1:e8:f5:
         7a:7e:cc:a8:24:4c:55:25:f3:35:18:f6:30:db:60:e4:7c:44:
         99:9a:0a:68:fe:42:1d:90:62:4d:dd:1f:38:df:62:25:e1:a0:
         a6:3f:7f:22:d3:b1:ce:a5:ad:86:ad:43:ca:e4:76:ad:fe:e0:
         04:3c:2c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:09:36 2025 by rpki-client