Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File:                     BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier:          vZOJhNEM9fdsQaJ3llusnHMoh9zzccVQa84VNv4bpeE=
Subject key identifier:   3B:91:F9:4E:31:DD:FF:48:F9:9D:57:F4:7D:BF:4D:45:F0:03:6D:F6
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer:       /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial:       01977ED5F7605664C61F0A0627948985477F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number:          0543
Signing time:             Tue 17 Jun 2025 17:00:40 +0000
Manifest this update:     Tue 17 Jun 2025 17:00:40 +0000
Manifest next update:     Wed 18 Jun 2025 17:00:40 +0000
Files and hashes:         1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: DlDGtXeLjAhpxsZ8E/CTW4tPP1IzUmU1R0QF6Kw490w=)
                          2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 13:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7e:d5:f7:60:56:64:c6:1f:0a:06:27:94:89:85:47:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
        Validity
            Not Before: Jun 17 17:00:40 2025 GMT
            Not After : Jun 18 17:00:40 2025 GMT
        Subject: CN=3b91f94e31ddff48f99d57f47dbf4d45f0036df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:f8:67:75:30:f8:27:76:ab:a3:36:52:36:
                    d9:64:9e:cf:e8:bb:57:20:0b:fa:22:23:66:e4:97:
                    50:10:46:94:d7:b9:a4:cb:a4:7e:8a:67:9f:21:b2:
                    82:37:7c:a2:06:75:95:18:df:70:ff:da:5e:91:6c:
                    c1:c4:f0:f7:15:21:aa:42:32:11:56:7b:09:e3:47:
                    35:44:f7:1f:6b:7e:fc:c9:7b:1f:46:22:d9:e2:4c:
                    5e:e7:3e:95:a9:03:14:fb:24:90:ec:98:30:3d:fd:
                    d1:13:2b:93:9e:c1:83:60:a9:25:33:12:de:53:48:
                    41:ee:18:d8:ce:7d:65:21:f8:59:87:f3:91:72:24:
                    1b:e9:49:93:eb:c7:76:5a:d1:be:4a:d8:88:01:4a:
                    bf:2c:b5:27:a4:02:fb:d0:98:a0:0f:71:80:00:43:
                    8c:13:c6:db:3e:be:25:cb:7b:20:86:8a:ad:e9:02:
                    d7:1e:99:ac:48:31:be:8f:1b:cc:06:98:e3:7c:60:
                    7f:c3:4f:4b:77:ec:ed:b5:d3:ae:fe:95:31:19:a7:
                    f4:0a:16:26:62:dd:ba:4a:e7:85:60:62:fa:f3:87:
                    9c:5d:1a:f9:7b:ed:8d:db:3e:cf:58:87:20:0e:04:
                    5d:3a:a2:76:2d:4c:ff:4c:44:bb:07:f9:bd:3c:2d:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:91:F9:4E:31:DD:FF:48:F9:9D:57:F4:7D:BF:4D:45:F0:03:6D:F6
            X509v3 Authority Key Identifier:
                keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:66:81:b0:90:73:92:ca:a7:6b:48:40:22:cf:f5:7c:a0:7d:
         eb:da:46:85:5f:47:5b:06:17:de:7d:48:bb:7f:45:8d:93:a3:
         2c:d9:bc:ea:96:8c:01:cf:07:3d:e0:5c:d6:37:a5:3e:f5:ee:
         61:0b:64:ac:b5:04:ce:23:12:59:f7:87:22:9b:cf:0b:c2:ae:
         f1:3f:78:b3:8d:ec:5d:b3:fb:5f:d8:90:b6:d5:74:26:d5:42:
         85:fd:bf:b8:7f:76:5e:01:0d:96:65:a4:06:f5:bf:b8:2c:e9:
         07:b2:fe:9a:55:5d:a5:97:49:ef:d9:c2:c1:3c:12:12:ce:ff:
         b3:0c:7a:0c:a2:38:4d:0b:08:c0:c4:a4:51:6b:31:b1:66:ee:
         eb:55:13:52:5f:bb:e9:82:f5:bd:f3:f9:10:1b:ac:9a:41:d5:
         1c:ad:a9:61:c5:2c:bc:26:a4:75:c6:64:6c:b1:51:ed:03:38:
         39:10:92:4e:c2:52:6c:45:fe:34:0b:e0:79:6d:20:0b:5a:6f:
         eb:b7:99:5f:51:a1:de:18:d4:5f:db:c1:23:68:00:66:87:db:
         bf:f4:6f:c3:fa:f4:62:1d:2b:23:8b:6e:e3:28:f0:28:84:1b:
         67:98:56:0b:55:5f:c1:58:6e:1b:8c:92:ca:05:03:c1:83:32:
         ac:f3:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 00:08:29 2025 by rpki-client