Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
File:                     BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft (raw, json)
Hash identifier:          DkQPxu70OFcAk3wMpUhRlVAJLbH1pqgA4Jr6hyUDYFY=
Subject key identifier:   3E:E7:85:B9:D9:2F:48:82:95:54:AD:5D:7B:96:9B:57:F6:D8:67:C7
Authority key identifier: 05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D
Certificate issuer:       /CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
Certificate serial:       0196808FE72E8D3DD477B3583C1FB5B8E3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
Manifest number:          0517
Signing time:             Tue 29 Apr 2025 08:00:36 +0000
Manifest this update:     Tue 29 Apr 2025 08:00:36 +0000
Manifest next update:     Wed 30 Apr 2025 08:00:36 +0000
Files and hashes:         1: BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl (hash: 3arOhdXqToADAcYcIebSOSero6ag38qzPB2nq42P2rQ=)
                          2: PU3RtVE8bUTLDau3UULyJxnwYvk.roa (hash: rurDzg32C4cm1zQE6cZCxEDJG3aKAFEXLx56a9lYAvQ=)
                          3: TPqMfRSK5sIipm7-2Mw_-o6t_pE.roa (hash: DbvKLEpzC4KlaBAFfc8W2Orz87Jz73d6hIvvLvcnSeI=)
                          4: aFnhQawEO18IQ3GTJ01kkL1iiO8.roa (hash: lmQ4l6Xz/ufxEDRo15j0d1wdcSctSZ/L1+X4hlqiZ0E=)
                          5: i5Cva7AkVQeMjYySCI1cSGulBFU.roa (hash: OqdQgQr223XTYw+nW6EEK96kWz2kctHBvYApbJ8V5SM=)
                          6: orwBdnVfFaxWFzZXqCDe7xYVF-0.roa (hash: s5h3MlDKvwqoRseQHdYHw8t3JkEhjpPj+FNdQWzBxyg=)
                          7: zfGaREwozQlPDznadYm5iZBdTbo.roa (hash: BQ/Qo3WVP+Q/nW3nNfYM3evPzNFHtG1U5B77mp2vN9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:80:8f:e7:2e:8d:3d:d4:77:b3:58:3c:1f:b5:b8:e3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0563cb263df50d2d4d073c0f7db6cd2776302c9d
        Validity
            Not Before: Apr 29 08:00:36 2025 GMT
            Not After : Apr 30 08:00:36 2025 GMT
        Subject: CN=3ee785b9d92f48829554ad5d7b969b57f6d867c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fa:8c:f2:95:05:42:d9:36:29:fb:d6:39:f7:
                    33:34:2b:62:3e:a5:8b:e1:af:ea:6e:14:e1:72:2d:
                    ab:89:4e:d0:85:d4:ef:fc:9c:48:82:95:19:c8:70:
                    be:9a:d0:32:91:a2:81:97:2f:8a:d2:71:3b:80:46:
                    27:08:f3:8c:4f:2a:9e:27:6c:83:8e:48:09:a3:59:
                    aa:d6:1d:32:54:47:b6:16:19:85:4c:9d:aa:6d:bb:
                    44:fe:31:d2:1a:d7:31:f5:c1:14:29:20:69:38:0e:
                    fe:c3:66:76:da:4b:96:40:9c:e4:bd:de:a6:3f:a9:
                    ef:2e:7d:02:ad:6e:7e:7e:79:c6:ea:2f:c8:6e:e1:
                    19:82:a7:cf:78:c6:6f:67:e7:9c:a1:ad:71:fb:3e:
                    1a:32:a1:12:31:a7:20:30:5f:a4:d2:cb:eb:42:90:
                    c5:38:7c:b0:42:9e:4e:b3:df:eb:b6:97:d8:70:76:
                    21:3a:5f:90:2a:f6:a5:5e:4a:6c:bd:51:cb:0d:cf:
                    70:b4:54:4c:dc:04:2e:ec:4f:c9:c3:30:e5:16:94:
                    06:10:84:a1:d4:f2:1f:52:47:d5:02:71:62:12:c8:
                    94:31:f2:e6:e0:e2:c9:34:c1:13:18:0e:66:ea:46:
                    21:17:58:08:ca:08:35:a0:ea:50:99:69:74:ba:55:
                    97:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:85:B9:D9:2F:48:82:95:54:AD:5D:7B:96:9B:57:F6:D8:67:C7
            X509v3 Authority Key Identifier:
                keyid:05:63:CB:26:3D:F5:0D:2D:4D:07:3C:0F:7D:B6:CD:27:76:30:2C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/62e5f2-25b3-4557-aa94-150354b00e55/1/BWPLJj31DS1NBzwPfbbNJ3YwLJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:43:c8:a6:ce:7e:03:94:18:43:80:6b:ca:11:31:8c:9d:26:
         33:3e:d7:c3:c0:c3:e9:14:cd:9b:8d:58:d4:e1:c7:fc:a6:aa:
         58:c1:f7:5e:cc:52:59:50:91:78:2d:84:99:f7:47:8f:05:0a:
         57:e3:6b:7a:05:61:14:d3:1e:31:90:fe:9f:ca:d9:ad:b4:82:
         0e:e6:86:f0:10:2e:cb:14:e5:f6:04:f1:56:e2:00:7a:43:bb:
         3c:d1:67:58:69:1b:ca:89:94:41:7d:6e:89:7c:a9:48:19:88:
         bf:e5:b1:05:a7:2c:37:ce:2c:91:df:5e:a9:04:4e:d9:a9:43:
         e7:6c:15:34:0f:a6:55:d1:23:54:87:31:66:56:b4:d7:2f:8c:
         35:55:5e:e2:b7:58:e2:e4:ef:aa:39:54:11:4a:75:34:db:92:
         9f:bb:52:48:58:5c:63:67:ad:08:90:df:b3:72:12:7b:4d:0a:
         30:a1:17:e1:23:08:35:b3:9d:34:62:10:ed:ce:c0:08:1c:10:
         5d:05:e5:90:b1:86:37:15:ab:18:54:4d:4e:d9:35:38:e2:b1:
         3d:bb:b0:d6:60:e4:13:70:86:07:ba:ef:3b:20:55:1e:94:e8:
         9c:1a:a5:d1:d9:04:de:88:e3:b2:ca:20:a6:35:c1:b4:72:db:
         46:4e:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:20:26 2025 by rpki-client