Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File:                     BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier:          he1plEPlZAeTaAjzymYnre3hbV9lL728rLKeHvQBXqA=
Subject key identifier:   DF:11:80:E4:54:44:05:34:4D:4D:A3:BE:9E:86:65:83:CC:3C:2B:79
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer:       /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial:       01976C98926FD7F1374B0E6BF84A0BE070A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number:          06FF
Signing time:             Sat 14 Jun 2025 04:00:27 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:27 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:27 +0000
Files and hashes:         1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
                          2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: kiVHFEWVr7FKE5yt09HEyjHj05xP2hpwMmaEMVhqtKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:92:6f:d7:f1:37:4b:0e:6b:f8:4a:0b:e0:70:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
        Validity
            Not Before: Jun 14 04:00:27 2025 GMT
            Not After : Jun 15 04:00:27 2025 GMT
        Subject: CN=df1180e4544405344d4da3be9e866583cc3c2b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a0:d9:3a:de:59:53:9c:53:02:b1:b4:47:6a:
                    ca:95:eb:09:1c:7c:3b:3a:14:02:64:f6:b4:d4:9f:
                    64:95:80:fb:fb:4f:db:50:cb:57:78:a4:82:6e:ea:
                    f4:03:f1:f9:68:cf:d2:64:dc:6a:8b:7e:ad:a9:db:
                    2f:0b:2d:78:6d:8b:55:11:2d:24:f4:d2:fb:ea:01:
                    7b:60:b5:9d:91:f6:8f:52:48:47:1d:dc:7d:2d:24:
                    6c:67:32:df:c5:16:e3:c6:31:0e:3e:48:ee:b6:1f:
                    68:0b:f3:65:2f:9c:f3:74:54:4c:93:91:58:50:81:
                    39:2b:4c:fa:42:d3:da:e6:ad:03:13:78:e3:f3:82:
                    a9:08:d6:9e:41:95:ab:e6:23:fe:3d:9e:dd:a6:f2:
                    14:d3:3e:4e:95:50:92:53:7c:c4:15:95:83:e1:7e:
                    b7:94:e8:63:c0:60:7a:96:e1:86:3a:bc:e6:7f:47:
                    9f:a1:3c:fe:a9:fc:14:6e:37:f7:9a:57:22:62:99:
                    3b:20:27:ab:0f:94:f3:ea:54:0a:66:35:be:62:5f:
                    28:67:3b:83:11:d8:54:ea:a4:e2:b8:66:02:84:75:
                    2f:cf:b8:d2:be:53:5e:3d:18:9b:35:c1:98:73:33:
                    ab:b5:90:50:be:38:21:9d:65:0a:7a:52:32:8d:d1:
                    9f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:11:80:E4:54:44:05:34:4D:4D:A3:BE:9E:86:65:83:CC:3C:2B:79
            X509v3 Authority Key Identifier:
                keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:39:ac:2e:e2:c6:9f:ef:2a:49:d7:aa:73:85:4d:6a:65:a9:
         d7:b2:d8:a0:62:00:76:8f:7c:18:a6:35:80:04:78:90:97:05:
         70:aa:a0:28:3a:ad:1e:1c:ac:b6:62:0b:38:71:60:44:56:a7:
         59:d1:1a:5a:a7:92:d5:57:05:af:ee:56:b4:13:fe:b5:95:72:
         cd:c0:b3:5f:9c:e7:fb:c2:5f:3f:10:42:ae:6e:8d:6c:39:22:
         6c:3c:6a:ea:af:84:ec:f1:c7:23:e6:82:2e:ed:7f:3e:e7:a8:
         f5:6d:32:96:e5:4c:66:72:2c:10:79:d0:07:52:27:f8:fd:2a:
         67:96:ec:41:6d:08:98:18:b3:c5:cd:20:ef:c9:77:8b:e5:7e:
         7f:4c:4e:0c:8c:98:58:9c:96:61:14:3c:51:56:26:a2:a1:80:
         23:bd:c3:48:fd:5f:09:82:3e:50:87:19:ab:71:e5:2b:38:33:
         50:3f:f1:b1:07:c4:52:20:4c:aa:0c:bd:a6:e2:ce:47:d1:c7:
         83:00:66:8b:0a:26:d3:e0:64:ad:95:b7:81:d3:0b:c8:dd:3e:
         15:f0:7f:bb:f0:f8:e0:9b:3a:88:94:17:d9:79:d9:84:6f:6b:
         2a:8e:b1:c0:33:b6:8a:f4:87:16:f4:23:49:3d:d8:42:10:f9:
         09:3a:d5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:09:14 2025 by rpki-client