Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File:                     ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier:          DE45H0W9O6InTFxOaLsReZWtdNMpo6kK815svb2Mvds=
Subject key identifier:   4F:17:F0:90:DF:17:8C:07:A9:F8:C2:0A:D1:D5:EA:F2:52:45:57:46
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer:       /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial:       01976C621228FBE7AC64CCF30F0D234A9332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number:          0B48
Signing time:             Sat 14 Jun 2025 03:00:55 +0000
Manifest this update:     Sat 14 Jun 2025 03:00:55 +0000
Manifest next update:     Sun 15 Jun 2025 03:00:55 +0000
Files and hashes:         1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: GEjx7ot/Ckw+zlEsdJI63zvc/OKnQ7tm5873H+k0kbs=)
                          2: wPxYgx2sDbu7_SNmfHiYz4v9hsk.roa (hash: f4HzR7oYG7fd8e6V0L4X7gl2jzshj4xdJvyeqOJq5mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:12:28:fb:e7:ac:64:cc:f3:0f:0d:23:4a:93:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
        Validity
            Not Before: Jun 14 03:00:55 2025 GMT
            Not After : Jun 15 03:00:55 2025 GMT
        Subject: CN=4f17f090df178c07a9f8c20ad1d5eaf252455746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:99:8c:8a:81:cb:50:de:62:43:4a:5d:63:1d:
                    26:88:5f:1e:09:a0:cf:4a:e0:8d:b7:48:50:f3:60:
                    6f:7a:e2:38:bf:f6:8b:cb:8c:57:37:90:04:5e:41:
                    e0:74:a3:d7:f6:47:af:2f:fa:a1:4e:f2:8f:9a:3d:
                    cf:4d:f2:40:8b:72:6e:e3:6b:dc:af:61:16:b8:4b:
                    08:26:df:8d:86:8d:6e:92:a1:45:86:b2:60:68:c2:
                    24:97:07:9b:f4:1e:46:16:54:e2:98:35:2d:38:d5:
                    e8:93:a5:8d:16:a0:7b:df:e5:12:20:ac:0e:ab:c4:
                    a2:31:e2:a6:d0:3e:b9:bf:f0:41:ae:30:73:d5:02:
                    d2:7d:2c:17:27:48:a0:95:f9:53:2d:56:ed:20:74:
                    ba:f3:08:9d:52:22:3e:a5:ca:23:2d:29:1b:4e:ff:
                    21:c4:57:96:dc:5e:55:29:a2:bd:5e:75:cd:3f:77:
                    5c:4b:87:6f:87:46:a2:88:25:08:bc:8a:34:8b:79:
                    3a:c3:48:0d:30:ab:93:9e:54:bf:ea:9e:33:91:30:
                    3f:48:b1:93:28:26:ed:f1:55:d2:38:92:9a:f9:98:
                    c0:66:cd:eb:c6:ce:4e:0f:fd:fb:37:91:30:b4:5c:
                    33:33:c8:74:f8:97:67:a5:b4:5d:a2:76:87:46:e9:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:17:F0:90:DF:17:8C:07:A9:F8:C2:0A:D1:D5:EA:F2:52:45:57:46
            X509v3 Authority Key Identifier:
                keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:cc:e8:e7:ac:b0:ca:72:7f:a5:7b:69:ae:3f:4b:63:77:06:
         3a:d4:5a:3c:ea:af:69:8a:3a:20:10:77:fd:b9:9d:91:8c:64:
         61:83:32:f4:86:6b:ad:fd:cb:2e:2b:a7:1a:82:6d:5a:44:89:
         12:89:ea:8a:e3:42:dd:06:7f:4a:dd:ec:d7:19:5a:f2:7c:19:
         da:9f:e4:95:36:13:95:e8:4f:41:2f:ef:aa:92:3d:7f:ec:9f:
         9d:22:57:ee:57:6f:e0:b3:b3:2e:d4:db:89:f7:d7:38:e4:a6:
         46:c6:99:07:38:ef:c2:28:e9:4e:04:d0:4e:0f:cb:73:95:38:
         52:09:b3:7a:6c:f7:5f:57:92:ea:23:c5:d9:6f:7c:86:5f:c2:
         78:2d:ca:9f:ba:cd:f6:6f:c7:59:1a:ca:b4:60:a5:01:a6:49:
         72:4e:b3:41:b3:64:df:49:33:29:2e:c7:48:a3:19:ed:6f:67:
         32:06:bb:fc:1d:e7:4d:20:1d:b0:bb:12:87:48:75:cb:23:e6:
         bf:96:20:7b:50:9b:52:ba:4b:c8:b1:61:00:b7:fd:20:dd:3a:
         8f:b7:51:c3:44:de:2a:32:79:ad:ed:9c:f8:74:e6:fe:d8:22:
         c2:07:aa:76:be:41:03:c7:e3:6a:e8:c2:74:4f:70:32:d3:16:
         73:02:5a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:35:53 2025 by rpki-client