Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          zxdzN4mxyGqTlp0GhOivAqs5EBEcw2Bqp068mIRudXE=
Subject key identifier:   3F:03:6C:91:ED:29:D9:BD:6D:C4:F0:48:95:93:E2:D2:F4:6C:E8:2E
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       01976E197802998556E14E056E337C29E061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          0D35
Signing time:             Sat 14 Jun 2025 11:00:52 +0000
Manifest this update:     Sat 14 Jun 2025 11:00:52 +0000
Manifest next update:     Sun 15 Jun 2025 11:00:52 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: ebG27tyVz6jKusz6dOHBZy1RDTUSg0qaciXQElBTFwA=)
                          2: Xziix3WpukeN1e5SpGgnYgqIF3I.roa (hash: IunBp4C+veP99rGSTt8SQ5POqclxS7qKVFGqTiG4pb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:19:78:02:99:85:56:e1:4e:05:6e:33:7c:29:e0:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Jun 14 11:00:52 2025 GMT
            Not After : Jun 15 11:00:52 2025 GMT
        Subject: CN=3f036c91ed29d9bd6dc4f0489593e2d2f46ce82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f0:68:f5:0c:9a:1a:dc:c6:da:ab:62:24:80:
                    27:bd:6d:05:29:44:f3:d3:28:73:f4:93:23:59:dc:
                    fa:94:be:c4:7e:2f:d9:bd:b7:4a:57:e0:46:90:23:
                    14:3d:ac:3f:ca:72:bd:4b:ca:56:26:63:9f:cf:9f:
                    ee:fb:cb:ca:4b:29:c5:6c:1a:9a:a8:8a:50:61:06:
                    49:a8:18:d2:d3:50:d2:9c:c2:ba:6e:14:61:17:be:
                    a3:e0:c9:95:df:98:c5:de:3b:fe:84:bb:f8:04:7a:
                    25:1a:ae:8e:a5:76:47:20:24:4b:11:93:26:ed:a7:
                    b7:9a:97:ba:41:93:a0:f5:ba:b8:da:be:21:4f:9a:
                    cb:aa:44:83:e7:ca:15:78:86:d7:1f:a7:76:f3:4f:
                    50:60:73:8d:5a:2b:8c:1c:88:84:3c:90:61:13:b5:
                    b0:8d:2e:c7:46:81:21:9b:41:8d:15:d5:d1:25:52:
                    e2:9f:5e:9b:1c:55:19:9d:01:63:fa:76:c3:1e:c0:
                    c6:44:49:d4:a3:03:1a:52:9f:bd:3b:ca:2f:a9:13:
                    b7:89:b3:c5:04:c0:67:45:9d:28:a9:4d:90:8d:40:
                    6e:47:ad:5c:7e:b6:8f:19:9d:e2:62:61:66:e4:0b:
                    2c:76:36:e6:63:ff:88:14:00:a5:a4:c3:f2:4f:d1:
                    56:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:03:6C:91:ED:29:D9:BD:6D:C4:F0:48:95:93:E2:D2:F4:6C:E8:2E
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9c:a4:b6:10:94:ad:05:0e:73:26:b1:f3:82:ec:47:6b:53:
         c8:1e:69:22:e4:7b:54:fa:88:45:a2:10:10:e5:48:f6:4b:bc:
         54:1d:a6:2c:87:26:61:b9:bb:17:4c:f6:2f:86:34:eb:40:60:
         a2:38:55:28:f4:32:d8:4d:5e:06:6a:07:3f:c3:3e:80:3b:77:
         07:29:65:44:b9:6e:a6:82:c8:dc:11:33:63:d3:a3:43:e6:96:
         4a:f2:06:59:08:9f:97:26:73:1d:e9:00:e6:fa:75:8f:7e:96:
         95:a8:c8:bf:db:f4:8d:f2:1c:e2:7b:b9:57:cd:0d:59:b5:28:
         6d:a3:af:cf:a9:8b:eb:1c:cf:26:ca:7b:63:e7:94:34:6f:e3:
         58:bd:d2:9b:69:cf:3a:c0:a3:71:1a:04:9a:b6:8f:e7:05:5a:
         a7:6b:33:e2:a4:82:87:30:43:c8:60:7c:62:22:50:ff:54:37:
         7b:20:9f:55:85:6b:07:2f:dc:2f:8b:a2:db:9c:5d:a1:7a:a9:
         b7:db:a5:ea:26:1d:7b:fa:77:08:50:ba:71:79:1e:91:1e:b2:
         d8:cf:71:cc:06:b9:71:18:9f:46:98:05:6b:72:7c:00:8e:7a:
         bd:26:d2:0f:f6:fb:75:a6:04:4e:d9:35:a6:ea:53:61:29:42:
         3d:de:27:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:11:57 2025 by rpki-client