Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          HM6AJCWU5BzJhXlx+n9ZliRB+cJ4qaZcFkz2EpleFdM=
Subject key identifier:   9E:5E:B6:1C:4A:EE:F1:ED:DA:3F:4B:DD:F9:62:8D:DF:46:D7:7D:D1
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01976C2AA4B8717D7494A086067D64A77B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 02:00:23 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:23 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:23 +0000
Files and hashes:         1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
                          2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: h4jrVX4oUuyqNRD0ij/euhwuiYAw+KZGfqmGAydVWGY=)
                          3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
                          4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
                          5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
                          6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:a4:b8:71:7d:74:94:a0:86:06:7d:64:a7:7b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Jun 14 02:00:23 2025 GMT
            Not After : Jun 15 02:00:23 2025 GMT
        Subject: CN=9e5eb61c4aeef1edda3f4bddf9628ddf46d77dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:99:3b:bc:e5:e8:42:5c:b1:29:fd:ad:e2:ea:
                    50:cc:a8:76:c4:68:7e:61:0c:3a:df:99:b3:d5:ee:
                    fd:d4:22:41:d3:29:3f:d1:7d:d0:fa:5d:37:62:88:
                    5b:48:81:30:34:ee:7d:80:84:0c:54:2f:5d:85:15:
                    ff:37:a5:f9:92:10:2f:c0:91:3d:97:f8:7c:3e:e0:
                    f6:74:e5:af:38:fc:ca:b4:9c:c0:48:d0:71:e0:21:
                    80:3e:91:2a:1d:8c:ab:b3:b1:63:e3:5c:52:d3:45:
                    da:5d:db:44:6a:98:2a:1c:12:b3:32:d0:a3:14:ef:
                    64:54:06:f9:c7:f1:c2:be:ae:1b:d2:9d:a4:2b:53:
                    ed:eb:c9:0d:5a:62:68:75:28:c0:01:0f:ac:86:1d:
                    26:73:3b:38:f1:93:84:10:57:2b:aa:55:94:3d:fd:
                    02:87:27:50:47:f4:b7:73:75:ba:be:e5:b3:9f:2e:
                    dc:f5:53:c3:8e:52:f4:d6:d3:d6:f6:80:6e:05:c5:
                    21:59:25:49:e1:df:34:7b:d9:f0:d9:80:f1:22:6f:
                    69:fd:6d:ca:1a:58:53:d3:f2:cf:16:e0:6c:6e:62:
                    48:59:8b:92:44:e4:85:bc:63:cb:77:35:f1:21:85:
                    25:fa:3e:08:41:fb:8f:09:29:da:53:64:6f:a5:33:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5E:B6:1C:4A:EE:F1:ED:DA:3F:4B:DD:F9:62:8D:DF:46:D7:7D:D1
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0f:11:d4:a7:4b:3f:29:40:24:6a:87:67:b3:39:8a:99:03:
         de:e4:65:0c:3b:76:b3:37:fb:6b:74:76:24:73:92:3c:a5:d6:
         51:43:b1:99:51:b2:3c:b8:12:60:44:b4:1f:0f:68:db:97:fe:
         7d:c6:1b:76:d8:53:b9:b6:4c:14:c3:e5:d1:b4:d3:4e:96:33:
         7f:b3:32:b2:6c:03:db:0c:8f:ff:33:c1:1d:23:e0:bc:30:d4:
         76:d0:29:66:b3:8a:11:71:0f:8d:bb:3c:81:d2:82:3a:1a:b3:
         b4:74:9b:53:c6:b1:27:73:0b:85:76:59:00:fd:c2:3d:5f:d1:
         24:d0:31:9e:52:40:c7:fb:a7:2b:52:f7:97:33:0b:2f:ff:8a:
         3a:f5:bc:80:ef:ed:71:f4:c9:3b:89:f2:cd:e4:2c:be:90:d1:
         54:26:f0:df:84:e1:20:d4:9c:b5:21:32:be:a7:4c:db:69:de:
         b0:bf:c8:67:d4:3b:2e:a8:95:1a:b0:aa:d8:ef:fb:cf:1c:8f:
         6b:f5:6d:52:1b:a1:89:4a:09:19:e3:83:69:19:82:36:49:97:
         f9:15:38:3f:c1:ac:2c:f0:5a:f3:6f:64:1f:38:a5:11:93:6a:
         62:f9:82:bf:fe:65:7b:c2:19:a3:92:1f:b8:fd:0d:d9:c3:4d:
         75:51:c5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:34:32 2025 by rpki-client