Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          KhZ5n/ww4fnLGmXQzmJ7fBPC0AfLUvCFMxrxnFj4cnA=
Subject key identifier:   27:B0:75:DD:9A:29:2F:BE:1A:65:A1:86:D4:45:F2:55:4F:CD:E8:CB
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       01976F2CC2E2ED2DDBAC84A37ED23BE1AABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          127F
Signing time:             Sat 14 Jun 2025 16:01:33 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:33 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:33 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: 0XvS5yzO+PxLzuLhufb3z15KVouSjpcfDCoPTwq7h4U=)
                          2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:c2:e2:ed:2d:db:ac:84:a3:7e:d2:3b:e1:aa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Jun 14 16:01:33 2025 GMT
            Not After : Jun 15 16:01:33 2025 GMT
        Subject: CN=27b075dd9a292fbe1a65a186d445f2554fcde8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5c:f8:7d:e0:1d:0f:b5:9d:e6:44:90:95:1e:
                    74:9b:c7:d9:78:5f:23:45:88:d9:8d:b4:d9:9c:11:
                    a2:a9:29:de:b6:cf:35:7f:c8:22:de:63:a9:d0:6e:
                    3f:87:1b:f9:9c:50:d1:45:e7:53:8f:85:eb:e4:c8:
                    7b:e4:88:58:e1:34:6b:4d:99:07:5b:12:28:27:9a:
                    27:d2:b4:84:ce:df:ae:24:db:c8:33:c5:cb:71:fe:
                    9d:51:6a:c3:1e:bd:a4:a6:4e:aa:6a:95:06:c2:48:
                    a3:6a:d4:57:48:a6:7f:4b:96:a5:b5:1a:fc:6a:bb:
                    96:89:42:29:8a:9b:27:2d:79:86:5f:5c:de:fc:e9:
                    09:9c:9b:85:06:60:1e:ec:ff:ec:03:00:03:85:d0:
                    5f:18:2e:d5:77:3e:33:d5:da:94:69:67:5b:16:97:
                    cd:17:1f:73:71:77:fb:e5:9b:cc:f2:ba:d6:c4:96:
                    11:25:f7:a6:90:4c:3c:6c:70:70:92:dc:13:2c:fd:
                    51:aa:a7:56:2a:86:4d:82:94:05:2e:ce:3b:ac:74:
                    da:5d:eb:99:06:e3:f8:aa:12:52:de:eb:ed:1a:b2:
                    5f:39:bf:2d:a4:99:84:5c:6a:59:0c:6d:d4:10:4f:
                    0e:ca:ef:72:64:d7:da:58:35:f7:a1:71:5b:8f:4f:
                    0b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B0:75:DD:9A:29:2F:BE:1A:65:A1:86:D4:45:F2:55:4F:CD:E8:CB
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:95:14:e7:d8:6d:ee:b1:52:07:ad:d6:3d:a2:47:62:4b:
         c3:59:b5:1b:37:02:56:df:35:ea:a1:aa:de:36:cd:98:07:c8:
         16:bb:cf:32:0f:5e:cb:90:a8:d5:ca:62:94:bc:fa:61:fe:94:
         aa:91:80:ca:40:39:a5:49:c3:27:f8:7e:21:d0:f6:a3:cd:60:
         2b:3e:e2:71:b4:9b:9e:be:f0:ff:0d:c5:d8:8c:46:39:ca:39:
         ea:9e:b7:e6:df:e7:fa:34:95:31:d2:34:9f:0a:a3:25:21:5c:
         5e:e5:77:c7:f7:ea:54:bb:58:73:71:e6:b3:e4:74:42:23:c2:
         59:42:48:9a:62:ec:de:9d:3c:dd:d7:b7:df:63:69:87:7e:87:
         c3:0f:73:a0:94:07:db:da:99:6c:63:11:e7:e1:08:25:8a:b0:
         2c:73:17:cb:7e:bc:e8:b6:bd:b4:dc:dc:2a:b0:fe:d0:7a:af:
         02:86:c0:24:b1:25:19:2a:cc:0d:43:4f:d5:e1:1c:f9:76:5b:
         35:c5:4d:17:e1:4f:3a:e3:92:a4:48:d1:bf:57:94:45:ba:83:
         70:20:8c:12:f8:74:a3:8a:c6:be:9f:5b:32:50:37:73:8f:bf:
         f2:9d:ab:3c:8f:96:f0:83:32:fc:83:b6:1a:65:a5:05:a7:b3:
         26:15:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:42:22 2025 by rpki-client