Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File:                     BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier:          nIOyzM1DB1Dxpsoh6PWRuY96tjX4LCERkrIuZct0CZM=
Subject key identifier:   30:6F:25:80:D1:43:E4:D6:9C:C9:DC:B0:22:37:DB:75:C9:4B:9E:55
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer:       /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial:       01988F59F0DE48AD9A691C5529AD0B2790B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number:          1624
Signing time:             Sat 09 Aug 2025 15:01:32 +0000
Manifest this update:     Sat 09 Aug 2025 15:01:32 +0000
Manifest next update:     Sun 10 Aug 2025 15:01:32 +0000
Files and hashes:         1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: rcuEOvLvMYEXD2AnUDYA+D8YpSuu4GAPx71oPQwoY84=)
                          2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:59:f0:de:48:ad:9a:69:1c:55:29:ad:0b:27:90:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
        Validity
            Not Before: Aug  9 15:01:32 2025 GMT
            Not After : Aug 10 15:01:32 2025 GMT
        Subject: CN=306f2580d143e4d69cc9dcb02237db75c94b9e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:71:09:11:e9:f0:3c:24:81:a1:b7:68:69:d8:
                    db:9c:62:64:c1:20:34:23:46:f0:29:53:c0:c2:92:
                    fd:72:9c:a4:5a:db:8b:8d:f8:e4:8f:87:7c:2c:74:
                    94:d0:47:fb:bb:cd:e5:f7:62:8b:8d:d8:7f:26:e6:
                    a0:b0:b7:8d:af:61:ed:94:cd:15:55:f9:fc:4d:0d:
                    b7:3d:7d:f2:6d:e0:46:1d:fb:aa:5f:49:af:2b:2f:
                    48:07:2f:35:94:d7:95:5a:1a:a1:23:22:15:f8:22:
                    2a:91:3d:ed:f3:5d:1c:5e:55:c4:c5:5a:2f:68:28:
                    5a:ec:40:54:83:db:7b:97:ed:ea:20:b4:e6:37:d4:
                    64:15:33:09:8d:d1:1e:46:ba:d3:09:f1:58:8a:80:
                    f9:9b:f1:de:d5:f4:c3:4c:7a:8a:79:5b:e1:42:a1:
                    90:4a:02:3d:34:00:78:0f:6b:03:64:e7:d7:41:7f:
                    2c:45:98:84:7e:98:1f:69:29:0f:93:51:c9:48:77:
                    9e:f2:c1:99:3e:84:ff:4d:53:2e:a4:8e:0d:0c:85:
                    19:9b:1c:4d:fa:e7:a8:86:ef:78:2a:dd:b4:58:ed:
                    7f:21:7c:47:54:46:c5:02:2a:47:57:b7:98:f5:d4:
                    e0:08:8e:85:7e:12:db:c3:d1:7e:d3:52:49:69:75:
                    9b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:6F:25:80:D1:43:E4:D6:9C:C9:DC:B0:22:37:DB:75:C9:4B:9E:55
            X509v3 Authority Key Identifier:
                keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:da:fa:bb:b2:68:b9:0a:01:90:10:00:86:49:e1:ce:b9:65:
         c1:ec:38:34:96:37:c2:5a:50:13:aa:68:db:00:ce:ed:f6:03:
         75:3f:23:9a:27:1d:34:fb:c8:5b:3b:5b:e0:30:8c:dd:50:c2:
         f6:6f:9c:ea:62:5c:88:ed:41:63:2c:96:54:6d:a5:14:28:de:
         f0:26:37:0b:d3:75:be:89:17:25:f4:41:b9:6d:54:30:4d:5e:
         4d:22:d2:0a:74:d8:77:9c:50:36:15:60:ae:06:8e:2a:c1:0d:
         1f:61:e7:f4:83:84:b8:6e:41:1d:4b:f4:75:e4:20:a5:2e:4c:
         c8:1c:34:22:d4:27:91:58:b3:bf:78:95:6c:b0:83:f9:ea:f4:
         e5:bf:54:94:0c:4e:9a:67:a5:9f:9b:5c:cc:4f:ac:fc:45:b5:
         02:9d:9c:7d:13:2c:ce:da:5e:44:a9:16:a0:f3:b4:34:13:34:
         81:84:9e:7a:5e:98:91:ab:85:b3:9b:71:be:7f:df:e2:45:d4:
         03:54:ec:07:c0:66:1f:40:eb:da:65:60:2a:38:29:aa:4c:ee:
         89:99:17:c9:25:28:86:8d:cc:6b:b1:b9:26:4b:4f:34:77:ba:
         ce:63:3d:4a:c1:06:bb:f0:a0:77:5c:d7:1d:87:50:44:fa:80:
         02:0d:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:12:31 2025 by rpki-client