Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          bvkuPXa5pQzXM+V6Dc69unqz6Rqy0HGSl1iQM8fr7Fg=
Subject key identifier:   E9:BD:54:11:AB:B0:20:1C:79:3C:E4:F4:52:0C:D6:77:57:46:23:69
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       01977DFA914EB836875371F4AFD2F99D3B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          09E6
Signing time:             Tue 17 Jun 2025 13:01:02 +0000
Manifest this update:     Tue 17 Jun 2025 13:01:02 +0000
Manifest next update:     Wed 18 Jun 2025 13:01:02 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: cOEhjxn2gv8pBpkVHUcXC321SYm5wXF+0fi+8oJUeVg=)
                          2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:fa:91:4e:b8:36:87:53:71:f4:af:d2:f9:9d:3b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Jun 17 13:01:02 2025 GMT
            Not After : Jun 18 13:01:02 2025 GMT
        Subject: CN=e9bd5411abb0201c793ce4f4520cd67757462369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:6a:3d:bd:fd:62:54:e2:46:ac:9f:36:93:
                    a9:ab:24:54:d7:af:d8:48:cd:b7:0b:6d:b7:41:47:
                    d9:cc:79:a0:f4:d0:db:4a:a1:ab:cf:5b:f0:a7:87:
                    b7:af:51:5c:4d:ed:65:26:da:53:94:f7:ad:c3:c6:
                    db:63:f6:c6:4d:9a:cf:f1:10:9f:38:18:d4:a4:76:
                    61:5f:b0:44:b8:af:f0:e7:6e:9c:0b:86:49:dc:62:
                    79:00:05:5c:23:98:cc:37:80:32:ff:0e:5b:e4:fc:
                    db:e0:d2:51:2e:aa:1c:4c:8b:8c:ea:c2:fd:b4:06:
                    52:85:17:82:37:a2:74:51:3b:a0:75:b4:1c:52:3a:
                    a4:25:7d:40:71:3e:13:7d:2d:58:c2:bb:1b:2e:0c:
                    7f:29:a4:b4:4a:d8:ea:a2:95:4d:53:b2:f1:34:9a:
                    27:18:83:7a:20:1c:e5:0f:f4:cf:87:4f:88:f2:49:
                    c3:97:e7:a8:5f:78:5c:b8:71:ae:4e:57:de:91:b1:
                    14:2b:a2:f6:1b:7b:11:61:3a:66:aa:35:0a:f8:4e:
                    14:1a:05:f3:33:06:45:09:22:f5:5e:49:84:cb:03:
                    6d:35:27:e0:7d:b1:77:36:d3:d0:91:2c:e1:02:44:
                    8c:ff:18:34:a9:ab:e2:35:7d:fe:01:ab:52:67:c0:
                    75:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:54:11:AB:B0:20:1C:79:3C:E4:F4:52:0C:D6:77:57:46:23:69
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:3b:91:0e:4f:43:65:f7:72:d7:17:12:8a:4b:32:37:e9:b7:
         76:54:25:f7:ea:a0:6e:10:d8:54:4f:3f:57:ee:a3:f5:52:4d:
         02:03:85:37:b9:2c:34:85:38:a0:5f:05:34:b4:74:28:71:85:
         12:79:03:f2:93:60:06:3d:2a:15:5e:bb:51:4e:b3:19:36:a7:
         8e:e3:b8:bb:b8:67:01:76:9a:4b:56:fc:f4:37:d9:43:b0:a4:
         54:01:24:a1:14:a8:a7:23:12:1d:26:fb:e2:9f:5f:3f:57:16:
         b4:01:cc:13:29:96:8b:6e:4f:7b:22:8c:35:8e:c0:79:da:f8:
         60:a3:be:ea:f2:07:3c:a4:f8:97:0d:a5:43:7b:5d:65:b9:a3:
         6a:ab:c6:33:45:9e:76:17:c2:13:ac:2f:11:31:6e:13:49:33:
         60:15:5c:46:a5:9a:1b:2b:50:ae:6d:1a:55:54:24:1c:39:fa:
         b0:b1:3f:f1:86:2c:d2:fa:df:09:7b:de:ae:5b:ab:dd:ee:46:
         e4:4b:d2:af:de:03:55:c2:b3:61:59:da:26:88:fd:66:33:5e:
         de:e2:d0:f1:4c:4b:7a:44:4b:75:77:08:ba:08:fb:ae:2d:90:
         cb:7a:87:18:97:d1:9a:a6:53:41:f5:be:c6:94:24:71:25:a9:
         e7:8a:d0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 19:42:35 2025 by rpki-client