Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File:                     bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier:          vi+1ImmG0KLkWULji+Lufs/mKCRHr1jUxBejqVEcJoQ=
Subject key identifier:   61:5F:D6:10:FE:45:5C:64:0E:5D:91:F5:DE:BD:AB:C2:D7:D0:20:1E
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer:       /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial:       019769619B09042690E63CAADED34199489F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number:          0B2C
Signing time:             Fri 13 Jun 2025 13:01:33 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:33 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:33 +0000
Files and hashes:         1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: pC6yONLnSgJCR7BJLmDpjbX3yziCZHDGF4FZwslvCQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:9b:09:04:26:90:e6:3c:aa:de:d3:41:99:48:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
        Validity
            Not Before: Jun 13 13:01:33 2025 GMT
            Not After : Jun 14 13:01:33 2025 GMT
        Subject: CN=615fd610fe455c640e5d91f5debdabc2d7d0201e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:0f:c2:37:08:e2:fd:ed:fd:4c:97:6d:85:
                    b3:04:76:ab:10:f4:7e:46:0f:84:56:9c:44:ba:93:
                    c9:0b:0e:ce:13:97:1a:e1:9b:14:ae:aa:a2:3f:ea:
                    de:6d:50:91:bf:05:19:58:77:94:07:35:a9:ec:b8:
                    57:1c:0a:37:41:38:ad:fc:fa:a1:b4:53:19:6f:69:
                    c4:c9:82:00:f2:91:26:c1:f1:ce:a9:13:91:2e:b0:
                    57:38:cb:47:2b:b4:8a:9f:3e:b5:80:b5:54:f0:83:
                    83:f0:b6:66:04:46:97:32:2b:f8:8f:6a:d4:e3:89:
                    bc:bb:68:86:be:e6:5c:ca:a4:3e:a4:e8:e9:20:96:
                    dd:61:e0:0e:85:31:42:13:de:3b:d7:19:c6:80:f2:
                    5d:d1:d5:f4:a8:26:27:b4:7a:ba:56:a2:d0:2b:f7:
                    d0:3e:8c:6a:c9:e0:72:d2:0a:1d:96:52:ad:dd:17:
                    24:f9:f3:7a:ec:46:05:a8:c2:c7:fb:f8:56:7f:48:
                    00:d5:bb:0a:b3:68:6b:fb:f6:58:07:a7:99:48:33:
                    1b:04:ae:0b:13:7e:b4:e1:4e:e0:01:7a:b2:2b:29:
                    4c:49:ff:98:84:1d:61:2c:66:f3:6b:80:15:31:c9:
                    ad:32:6d:b3:7d:e4:eb:63:04:73:3e:a4:24:72:3c:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5F:D6:10:FE:45:5C:64:0E:5D:91:F5:DE:BD:AB:C2:D7:D0:20:1E
            X509v3 Authority Key Identifier:
                keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:20:44:aa:e3:02:bf:a1:d6:85:eb:b4:e4:c3:24:89:06:c2:
         dd:27:6e:25:0e:3c:fc:b2:8d:0d:05:36:8f:41:20:11:5a:83:
         06:b3:92:23:54:8d:0c:4a:f9:5c:b7:2e:1d:66:90:06:b9:d1:
         c3:f3:cb:16:3f:a9:a0:50:bc:bc:a6:dc:28:3f:50:d6:5c:cd:
         8d:6f:ff:88:d9:aa:bc:b6:33:d0:d7:50:4c:65:51:13:0e:d6:
         92:f7:2c:d7:3b:3f:1c:d9:16:30:0f:1a:b5:45:36:3d:f1:2f:
         69:9c:48:63:7e:a7:10:ed:1a:a7:d2:a0:24:b5:0f:1e:79:98:
         63:67:dc:9b:9b:e7:1b:c5:de:31:ec:70:01:71:9b:b9:21:72:
         a9:04:91:e4:fd:ea:79:7a:b6:05:96:dc:07:59:7d:f0:cd:c0:
         79:ca:01:6f:f7:ac:82:66:4a:07:00:d1:5a:1f:69:78:33:f3:
         37:18:30:c0:54:f5:66:dd:43:3c:99:2f:b1:aa:8d:40:ed:c7:
         36:15:6a:e4:50:b1:9d:15:78:b7:b5:2b:bc:fd:be:7d:fc:fd:
         01:70:60:9a:3c:98:ee:e9:0f:99:35:cf:56:4c:95:2e:7e:ef:
         0c:85:fe:1c:42:c9:6b:33:59:1f:ff:7f:ec:7e:5a:8d:be:df:
         12:03:39:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:23 2025 by rpki-client