Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File:                     BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier:          qLDPBf7ZigjIZCpWmCyU9UI8Ieh4Ac9iGKEJOV2CfsE=
Subject key identifier:   45:B7:F7:E0:09:C9:22:B7:D1:20:B6:E9:E0:85:91:69:65:3E:1B:3E
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer:       /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial:       0197711B646A8610473C6B908ECB8D9F1882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number:          0660
Signing time:             Sun 15 Jun 2025 01:01:49 +0000
Manifest this update:     Sun 15 Jun 2025 01:01:49 +0000
Manifest next update:     Mon 16 Jun 2025 01:01:49 +0000
Files and hashes:         1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: YEoiz1fONTel9zPJogifFTOjiJ2X1bYGnsWd0UdnQDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1b:64:6a:86:10:47:3c:6b:90:8e:cb:8d:9f:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
        Validity
            Not Before: Jun 15 01:01:49 2025 GMT
            Not After : Jun 16 01:01:49 2025 GMT
        Subject: CN=45b7f7e009c922b7d120b6e9e0859169653e1b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:07:3f:65:de:af:15:6d:60:06:fa:0d:6a:
                    aa:79:67:99:e0:6a:29:03:41:28:93:00:14:0f:45:
                    ae:c6:4a:2c:ef:12:62:a9:78:9b:26:72:cf:2a:82:
                    7b:5e:24:23:eb:e1:78:49:ed:17:e4:0d:b1:dd:39:
                    d4:19:5b:cd:4c:29:c7:93:59:10:4f:70:2c:ff:d8:
                    76:16:58:40:0c:45:1f:40:e9:48:62:05:24:02:3d:
                    7e:f9:06:42:a4:f7:a9:f2:94:de:ca:1a:e3:5a:29:
                    2a:a5:70:16:85:58:0b:f9:e9:94:2e:94:38:e1:30:
                    b5:6f:bb:e6:51:00:b4:1e:49:f7:be:1b:42:91:09:
                    b9:af:85:47:c1:bc:6e:af:ad:82:9c:5f:98:bc:11:
                    fd:2a:28:26:7e:89:97:36:29:45:1a:53:d5:a2:51:
                    81:18:0b:d8:76:cb:96:41:8c:fe:b1:cb:ed:e5:3c:
                    e3:ef:82:53:02:d2:9e:93:3a:2f:8e:86:aa:a4:4c:
                    91:45:4c:34:1b:64:9d:fd:73:b2:42:f7:8b:42:e0:
                    1d:ff:39:79:fa:c8:64:aa:ec:19:02:f2:ef:9e:67:
                    26:05:a8:3b:6e:1b:b7:14:c6:77:f5:07:d8:28:37:
                    67:79:33:67:ed:eb:10:6a:fd:15:48:0a:5b:db:b3:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B7:F7:E0:09:C9:22:B7:D1:20:B6:E9:E0:85:91:69:65:3E:1B:3E
            X509v3 Authority Key Identifier:
                keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:e7:ea:f5:56:ab:e4:6d:6e:6e:49:c4:f4:26:4c:f5:e3:
         0f:b8:8f:7a:fc:ba:be:68:96:73:e0:e5:de:77:40:57:8a:99:
         4e:47:3d:85:3e:11:92:06:b6:4b:80:99:63:cc:d0:98:7c:a1:
         24:04:21:4e:7b:53:98:00:bb:60:69:c1:46:6e:b4:55:f3:ad:
         cd:f4:53:87:92:5f:7d:ac:e0:1c:02:e7:55:a3:f9:be:4c:34:
         c8:6d:6e:cf:35:df:25:45:0b:4e:43:e1:6e:58:b2:36:ad:ed:
         0a:11:f0:53:46:b4:9c:42:e8:c9:5e:1e:a5:7d:cb:e4:02:4d:
         33:4b:5b:ae:91:d0:03:9f:6a:19:e3:a7:90:f9:80:97:82:19:
         a0:13:c7:10:55:eb:07:fe:48:28:a3:c6:d4:f8:08:96:b5:d0:
         9f:0e:6c:76:f6:0d:6c:c3:48:f6:50:e7:1a:8e:66:ac:11:08:
         5e:3e:fa:71:d3:90:f9:9d:0c:ee:1f:d2:dd:d8:71:d8:c5:6b:
         b4:e3:62:4e:e5:1d:9a:d4:94:e3:26:41:b6:97:97:41:02:6c:
         20:ff:40:ae:14:54:f5:3e:26:73:1b:39:d5:56:ba:21:83:e0:
         0e:7e:32:a7:f5:3b:96:f5:8a:15:9d:4f:04:15:1f:a3:d4:58:
         80:90:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:11:27 2025 by rpki-client