Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          dS3MJrqSm9rPx2sD7RJA0lJ5+S4jRG1hBpL4ktIe6dQ=
Subject key identifier:   03:F1:B4:DF:0B:F6:64:63:3E:FE:FD:23:A5:92:A6:1D:56:40:F2:61
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       019787D888A3E1058A5CAEB0D34FA474D535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          12B2
Signing time:             Thu 19 Jun 2025 11:00:04 +0000
Manifest this update:     Thu 19 Jun 2025 11:00:04 +0000
Manifest next update:     Fri 20 Jun 2025 11:00:04 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: +tb/SxcnrbFyTVI3igUiq57IbbBlgPkkKsY0DrbkjZA=)
                          2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=)
                          3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=)
                          4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=)
                          5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=)
                          6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=)
                          7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 10:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:87:d8:88:a3:e1:05:8a:5c:ae:b0:d3:4f:a4:74:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jun 19 11:00:04 2025 GMT
            Not After : Jun 20 11:00:04 2025 GMT
        Subject: CN=03f1b4df0bf664633efefd23a592a61d5640f261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:00:b2:a0:b3:4c:f3:15:56:3f:44:0b:55:37:
                    5b:c0:ae:5d:5b:97:cc:3b:74:be:8d:17:a9:24:89:
                    7d:9b:38:70:2b:13:d8:fe:61:11:db:04:49:c2:e9:
                    9c:64:7a:69:6e:cb:27:3e:0f:b4:d2:ce:ca:92:da:
                    d7:6e:2b:24:bc:09:92:2d:57:5c:8b:b2:37:c4:ac:
                    c0:37:2f:81:76:b6:41:bc:2a:60:01:89:0d:58:05:
                    dd:ee:59:2e:ed:df:8a:49:c5:c9:3a:c7:18:10:d2:
                    f5:2d:3c:b9:42:83:fa:6c:68:88:dc:d0:61:fa:5d:
                    0e:80:fe:ff:ca:89:1e:3a:39:51:4b:99:73:98:fe:
                    51:f4:a6:34:65:99:09:a3:48:26:b4:f8:30:e7:10:
                    ca:23:59:17:d3:a3:fe:15:51:13:82:ed:b9:8b:cc:
                    43:b3:c2:96:a0:b7:61:65:89:71:b6:c6:bf:3d:21:
                    2f:52:09:cf:3a:3e:ea:a2:86:0f:cd:cf:d7:b8:fd:
                    ed:a9:5c:17:02:5a:26:d8:98:d7:37:6b:d6:94:e1:
                    21:be:bd:6f:7f:32:78:2d:04:c5:ca:16:33:2d:5e:
                    e3:5b:cf:a0:82:01:e1:3b:ee:55:5e:f6:68:45:1b:
                    65:81:34:21:45:30:ff:ba:3c:46:13:b2:c1:fc:01:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F1:B4:DF:0B:F6:64:63:3E:FE:FD:23:A5:92:A6:1D:56:40:F2:61
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:61:80:f5:88:f0:a3:df:d7:15:87:c3:a2:80:6a:57:80:3f:
         38:db:b5:60:52:78:79:83:b4:98:75:57:91:77:96:42:b6:be:
         31:93:58:d2:a6:10:dc:0d:68:23:01:22:da:c3:0c:66:00:cb:
         87:be:a1:fd:68:fe:d2:30:55:55:7a:3d:b3:1f:f0:dd:6c:43:
         56:59:ff:8b:fb:b3:89:59:07:ab:d6:e7:48:2a:85:9d:a6:e1:
         ec:c9:5e:f1:12:73:e9:d6:7c:98:28:30:56:1d:64:06:85:d3:
         e5:c1:0e:dc:38:00:a5:5c:e5:78:97:f7:84:37:79:8a:48:be:
         f5:a1:de:31:2a:39:d6:d1:ca:c5:25:c0:d1:56:eb:3b:9c:45:
         b8:c3:1b:4b:52:04:16:6e:98:ac:ae:e1:09:2d:33:7d:c0:22:
         90:23:14:48:d5:a2:6c:bd:fb:14:25:c6:f4:da:85:84:b1:e5:
         a0:f9:b2:29:c0:3f:c4:2c:d2:b4:e6:8d:99:b9:63:eb:4a:88:
         2a:c3:a5:56:0f:6f:ec:04:66:12:02:69:d5:40:84:84:53:c3:
         f4:bd:4c:4b:85:84:d2:1b:60:21:a6:69:95:8f:67:2b:3a:fc:
         e9:fc:9b:dd:c8:42:2e:c5:2d:5b:41:5d:ee:2a:ac:4f:4a:04:
         8d:78:70:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:02:05 2025 by rpki-client