Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File:                     BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier:          b2wCo7VyPmSTwO+8tQwY8gMajQ9c7h/gqY7c4x+0m1Y=
Subject key identifier:   C6:DF:29:89:BC:49:66:9A:65:FA:34:C4:3B:30:71:A5:20:80:AE:54
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer:       /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial:       01968DA69F49F4BA4E61F7AFE02FC011DB07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number:          151E
Signing time:             Thu 01 May 2025 21:00:29 +0000
Manifest this update:     Thu 01 May 2025 21:00:29 +0000
Manifest next update:     Fri 02 May 2025 21:00:29 +0000
Files and hashes:         1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 8zbJ6evimYv2bMZFKTMYO6ybXH061xLofSHg7NeBldU=)
                          2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 21:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8d:a6:9f:49:f4:ba:4e:61:f7:af:e0:2f:c0:11:db:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
        Validity
            Not Before: May  1 21:00:29 2025 GMT
            Not After : May  2 21:00:29 2025 GMT
        Subject: CN=c6df2989bc49669a65fa34c43b3071a52080ae54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:2c:7e:d4:d2:54:65:b6:3b:4a:54:05:55:
                    a4:16:05:5c:31:ce:67:21:66:bb:59:36:91:00:34:
                    22:23:3c:36:ab:1f:b4:6f:14:52:32:fe:60:67:d3:
                    43:c7:2f:2e:89:14:c1:1b:79:f8:58:42:f8:fe:1c:
                    54:7a:17:5e:db:a5:ee:e5:68:d4:25:ef:70:ce:63:
                    2d:b9:56:bc:61:10:92:c5:76:f9:78:9d:7d:51:7f:
                    40:fc:b7:df:1d:4a:9d:8a:a5:df:d5:04:d4:6d:85:
                    3f:e9:6d:b1:c3:bb:56:bb:94:43:7a:23:98:18:04:
                    47:38:80:6b:ba:bf:d5:0c:87:dd:40:c4:35:65:5a:
                    0e:36:17:be:c2:20:75:ef:a4:13:23:21:86:3b:f0:
                    24:a6:1b:f5:30:05:48:be:ad:e7:e9:8f:a9:95:e7:
                    53:12:78:93:1d:b9:cd:53:20:12:2a:d7:54:d1:38:
                    0f:31:77:42:35:fa:01:1f:72:fb:e7:57:b8:e6:05:
                    cb:30:13:c6:a2:a5:60:ef:ce:46:3c:15:e3:61:53:
                    d2:78:5f:e5:cd:d9:94:9a:7d:ab:ec:2f:4c:df:04:
                    87:8d:f3:8e:a5:d7:89:46:8f:24:9a:52:d6:72:23:
                    3c:5f:83:67:62:b9:69:8c:60:bc:b4:72:c6:15:e9:
                    2a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:29:89:BC:49:66:9A:65:FA:34:C4:3B:30:71:A5:20:80:AE:54
            X509v3 Authority Key Identifier:
                keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:41:5f:c7:76:fb:8f:37:e1:c8:bf:32:fa:8b:21:64:f4:7f:
         76:5d:11:01:94:2c:62:c8:bf:9d:50:87:8b:e8:54:21:8a:75:
         fd:f7:99:90:f4:31:a7:c2:77:97:c8:ee:28:b9:85:1f:34:b1:
         bd:06:2e:fd:f5:88:f1:ea:8e:3b:30:d3:a6:17:25:76:03:3d:
         a7:2c:51:c5:2c:7d:49:a4:bf:c0:65:7d:15:85:1e:c1:1b:75:
         07:8f:e5:24:3e:d3:94:d5:03:84:dc:0c:69:87:2a:8a:ce:df:
         11:af:47:d1:6e:a9:aa:2a:c4:9d:26:26:fe:9c:1e:3b:3f:55:
         46:d2:7f:a8:59:27:ce:64:ca:b5:20:08:d2:08:3b:91:a1:64:
         67:0a:37:24:04:5f:10:ce:17:0a:d4:e1:c0:4e:b7:c1:10:4f:
         1f:04:16:d5:8d:30:1f:0a:7f:4b:f4:51:8f:33:88:f7:98:7f:
         d8:1d:98:96:d9:58:c8:41:77:cf:1a:3e:c8:b4:7f:8b:fc:a6:
         52:8b:50:61:ea:53:5b:4a:6e:14:e6:7f:5c:23:56:f4:ed:98:
         90:62:ca:3e:4b:94:6f:5d:7c:e5:b0:e8:ab:70:4d:ea:22:df:
         e3:10:a6:8a:0b:1d:dd:21:7e:f7:27:7d:29:1c:23:5e:05:dc:
         0b:12:3a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:19:44 2025 by rpki-client