Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          qeEoXInrmxLE5qm9kpH7IKf4vYRAE00FGlfEoduUoWM=
Subject key identifier:   98:CA:E8:B6:92:E3:05:59:8B:22:97:0E:4E:42:47:88:A8:78:1A:B9
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       01976E872ECFBBC60DDEE144A076B4E8217C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          1425
Signing time:             Sat 14 Jun 2025 13:00:42 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:42 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:42 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: NtvGsahczR7fPC1+TLFN1XLG9cJd89/Y2PsteGelKFg=)
                          2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:87:2e:cf:bb:c6:0d:de:e1:44:a0:76:b4:e8:21:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Jun 14 13:00:42 2025 GMT
            Not After : Jun 15 13:00:42 2025 GMT
        Subject: CN=98cae8b692e305598b22970e4e424788a8781ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4e:d0:ed:1d:58:7f:cd:29:51:69:ca:f8:f7:
                    fd:c0:7e:37:94:c2:e0:91:21:0f:75:28:80:d4:60:
                    0e:21:11:00:2f:c1:93:84:6a:05:fc:a4:d7:0a:15:
                    b1:1b:4c:31:19:d8:a7:0a:48:f0:d3:85:a3:bb:fc:
                    99:20:b6:02:a7:10:ef:0b:66:93:0a:53:4c:f8:e1:
                    a7:c5:ab:73:ed:a6:de:42:ba:08:40:1a:4c:41:d9:
                    40:4e:fc:de:6b:0f:26:6b:a2:29:03:1c:38:ed:39:
                    37:f7:a0:d2:05:29:7e:d9:26:ad:01:09:7e:20:9f:
                    e0:8d:29:8e:c1:82:a7:be:5d:48:61:1a:b3:49:da:
                    7d:e3:bd:ab:f3:65:a9:6e:e7:ea:5b:be:89:34:0a:
                    0b:ac:db:a9:c7:7b:21:b8:93:ed:72:8e:a6:12:36:
                    fa:ad:75:af:7c:10:47:fe:26:5f:b6:65:bb:8e:41:
                    8c:17:89:04:ff:6d:92:6f:55:a6:e4:37:36:8b:e3:
                    c9:84:b5:d1:3f:58:a2:b8:a1:bb:4d:ba:4d:47:04:
                    7d:21:5c:08:51:a2:20:54:d7:a8:5a:55:21:fa:94:
                    e9:76:b1:b8:5c:f3:bc:0c:fd:7f:d6:8b:de:c3:f2:
                    11:fb:2b:24:0c:f8:07:07:c9:05:42:3b:cd:d5:40:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:CA:E8:B6:92:E3:05:59:8B:22:97:0E:4E:42:47:88:A8:78:1A:B9
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:68:bf:f6:83:7a:0e:75:4b:3e:10:a9:0b:85:68:47:9a:
         88:fe:38:a4:37:b4:04:f9:7e:90:1c:6f:b3:f2:e5:4b:1e:ad:
         3c:b3:b0:0f:f7:3d:9a:99:5b:b1:3a:c5:26:ba:30:48:8c:d0:
         7f:c4:47:d1:33:0e:81:28:e3:83:ba:9b:3f:1a:68:87:e6:55:
         09:be:cf:c8:b1:1a:f3:a6:bc:e3:f1:0f:a9:a1:10:a1:15:f4:
         dc:48:c7:49:f6:22:95:eb:19:19:3d:99:b9:35:8e:be:97:62:
         d4:fb:20:d5:4e:95:fd:dc:f6:e2:32:8e:e2:8b:f7:eb:eb:89:
         fd:82:67:11:f5:7e:b7:59:61:9d:45:b0:31:d2:0f:81:73:14:
         ec:b7:75:5a:9d:45:fb:5d:54:ec:60:bf:49:30:9e:61:43:3a:
         ad:7e:ba:0c:d1:82:76:e1:a5:b2:86:97:88:94:a1:3f:86:c1:
         cb:46:98:1e:3f:45:4d:94:55:f4:42:c5:90:5e:c8:4f:0d:c7:
         8a:b0:40:86:e3:11:ee:a6:a1:d5:39:2f:11:b8:29:e5:cd:58:
         c2:a5:be:3a:0a:90:3e:d4:ec:5d:4e:ba:fe:90:ed:22:fb:80:
         6c:e6:a0:a6:84:b3:14:26:9f:fd:cb:ee:3e:29:65:af:a6:ba:
         e4:27:da:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:30 2025 by rpki-client