Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          IORbD1Yo1F+4iovVHSat/aQoFxW5/dozTvKvNcR0PZc=
Subject key identifier:   75:79:28:81:5E:3D:45:12:89:90:A2:E2:39:70:C6:F2:8E:08:C7:C5
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       01977CB19689D5B21569695746C68284ED9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0B86
Signing time:             Tue 17 Jun 2025 07:01:42 +0000
Manifest this update:     Tue 17 Jun 2025 07:01:42 +0000
Manifest next update:     Wed 18 Jun 2025 07:01:42 +0000
Files and hashes:         1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: tKK832mkNgIZtxr3vwbUa0pDH9JergfPb+QdWQHGo8k=)
                          2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 07:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b1:96:89:d5:b2:15:69:69:57:46:c6:82:84:ed:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Jun 17 07:01:42 2025 GMT
            Not After : Jun 18 07:01:42 2025 GMT
        Subject: CN=757928815e3d45128990a2e23970c6f28e08c7c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:23:5a:a7:1f:ef:6b:40:5c:9c:8d:7e:c7:aa:
                    74:71:a4:48:c5:9b:96:c5:ec:6e:86:1d:5c:99:ef:
                    33:fd:d2:f6:ee:da:be:71:75:67:5a:5c:03:4f:4d:
                    a2:1d:2c:07:de:85:e2:42:27:c4:cc:91:d9:4c:db:
                    90:81:b3:33:1b:98:77:ea:6b:e6:79:ed:c1:ac:70:
                    20:7f:a0:92:c5:38:d6:09:79:1a:38:3a:83:14:33:
                    a8:12:53:58:70:7f:6d:7b:e8:4c:d8:84:79:7e:28:
                    01:7f:f9:59:5a:aa:f5:41:c6:ae:cb:7e:a0:93:14:
                    97:86:5f:34:64:80:2f:5a:0e:a5:12:4a:0b:75:c1:
                    a7:0a:e8:07:91:21:3d:b7:a8:78:e1:7f:01:c6:30:
                    b4:8a:3f:6b:37:92:11:ad:a7:16:77:8c:1c:2e:8d:
                    e9:a8:a5:d5:04:b8:af:5b:c1:89:72:8a:1f:72:92:
                    28:06:9c:e6:fc:77:c7:9e:cc:fc:61:5a:93:41:8e:
                    8f:46:d8:e0:13:7e:04:64:c1:20:1d:02:d7:f9:40:
                    fe:b9:5c:c3:bb:d4:56:16:f8:f2:5e:da:11:03:60:
                    67:f9:4e:78:a6:1f:8a:38:ec:e4:99:99:a4:a2:c9:
                    97:4c:4a:74:be:a5:f7:cb:e3:28:30:52:8d:27:9d:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:79:28:81:5E:3D:45:12:89:90:A2:E2:39:70:C6:F2:8E:08:C7:C5
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:6e:36:cb:74:de:25:21:ff:6d:38:6e:8a:20:d8:88:39:fa:
         8c:a5:4f:7d:11:1d:c1:c7:51:72:97:f4:85:1a:cc:df:62:d8:
         a2:52:e1:73:6a:6a:73:78:cd:f1:8a:ce:36:a7:b4:8a:c9:4f:
         ef:98:06:a4:3b:d4:cd:b4:aa:b7:16:cc:2b:e1:86:95:19:14:
         65:ca:6a:a3:fd:9e:dd:5f:8c:f0:bc:ec:f3:df:c6:00:e8:46:
         e7:03:50:36:3a:14:53:df:1d:6c:ac:89:73:e2:e5:cc:37:b3:
         47:4a:b5:7b:d0:d7:66:f7:1e:8c:30:98:c0:ee:71:ad:34:13:
         15:aa:14:8c:57:31:f1:f5:67:cb:8b:80:39:2f:63:42:1d:d2:
         bb:ba:04:ab:8f:70:46:26:20:3b:56:1f:b8:88:fb:14:2a:9d:
         66:b0:57:1f:ef:c5:a4:a4:f6:d8:0f:90:97:1c:1a:91:48:fb:
         dc:13:9d:d8:53:c1:7e:f7:c1:40:49:6a:23:78:f7:81:59:57:
         ea:d3:b3:6b:23:64:b4:f0:86:fb:9e:6f:c5:15:f0:04:66:7a:
         b8:d3:48:8c:c0:b2:b5:a1:a8:58:5d:49:55:c5:95:5a:46:73:
         94:f2:c4:01:a9:8b:c9:04:36:eb:f2:c3:2f:93:5c:1e:0e:d4:
         ff:72:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:48:25 2025 by rpki-client