Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          2AwoFudzhLnVktgrpKYwmype0LQCTkU+NI6YVpvjBD4=
Subject key identifier:   10:8C:75:D2:52:58:58:A2:66:A6:E4:31:81:AC:73:AD:BA:E0:15:BB
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       0197B7459489C68977E7BBE9106F006AFAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          15BF
Signing time:             Sat 28 Jun 2025 16:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:19 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: /42A/20/wk6A5gLkEGW/jB4SkNHuH36LauWqk+eDxzI=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:94:89:c6:89:77:e7:bb:e9:10:6f:00:6a:fa:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Jun 28 16:01:19 2025 GMT
            Not After : Jun 29 16:01:19 2025 GMT
        Subject: CN=108c75d2525858a266a6e43181ac73adbae015bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:ae:a7:24:7e:31:d8:a4:65:fe:07:1c:8c:
                    64:d7:9d:bc:94:e4:fd:b2:7a:f1:51:23:75:43:34:
                    fb:80:1d:ac:3d:0d:44:8d:d3:e5:00:a9:78:08:43:
                    2a:8b:d2:a0:5f:42:fa:4a:d5:68:05:fd:7a:8b:95:
                    cc:30:c6:e6:75:af:53:3d:09:f9:7d:f3:0b:6f:ef:
                    e2:be:24:ab:b1:74:ac:d2:e9:f1:c9:89:4c:98:bc:
                    27:e5:68:36:5a:02:7a:90:19:27:e2:81:f6:06:ea:
                    07:72:f7:d7:3c:0f:99:dc:46:0d:72:ab:25:3f:7f:
                    5a:18:a5:a2:58:68:3c:69:41:c4:24:76:c8:95:90:
                    38:d0:db:92:de:c2:55:b3:38:28:cb:30:5e:7b:bd:
                    8b:5f:d9:76:22:3d:72:7a:bc:1e:da:af:4e:39:b7:
                    56:e2:d3:51:85:60:19:b5:e9:97:e7:3c:82:81:70:
                    54:71:4f:01:4d:51:1c:73:84:40:44:76:e1:56:08:
                    3d:1b:c1:b3:4a:a0:03:84:96:14:c4:29:c1:b1:17:
                    e2:52:17:2a:b2:61:a7:73:59:05:03:1e:f4:f2:f2:
                    5a:69:63:65:e7:b0:ab:ea:35:dc:6f:2d:1b:f0:ca:
                    41:1e:67:b6:20:70:25:80:3a:13:59:56:ea:8c:ae:
                    2a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8C:75:D2:52:58:58:A2:66:A6:E4:31:81:AC:73:AD:BA:E0:15:BB
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1e:7c:02:fa:17:45:5f:27:b6:07:00:f9:49:38:7e:69:fd:
         f4:79:3d:33:cf:77:65:ee:57:14:0d:e1:6e:c4:2b:fc:52:d8:
         9d:a3:9d:6c:f0:37:5e:21:93:e8:2e:5e:dc:24:df:b8:6a:3d:
         f9:37:38:52:cf:7b:75:05:86:f2:1b:ec:29:d3:d7:8c:58:3c:
         a7:52:5c:69:eb:c5:c8:89:59:3f:c0:84:80:19:d7:d8:31:e5:
         de:44:ca:37:29:23:35:68:02:5c:32:36:e0:44:18:dc:98:be:
         65:eb:8b:ab:01:0f:14:01:8e:e8:21:39:cd:7a:3d:6b:d6:96:
         a7:b8:78:08:50:c3:94:d5:69:66:70:5b:a4:09:6e:22:23:c9:
         55:09:5e:ad:ce:59:0c:29:80:42:57:1b:5e:27:8b:ff:d3:66:
         97:58:f2:da:15:e3:12:1d:ce:8e:fd:d8:f7:77:58:60:32:f5:
         38:2c:35:09:23:0b:d3:b3:dd:91:a8:45:c6:19:e2:8c:cf:dd:
         2e:77:5d:e1:b8:c4:dd:bf:e8:56:d8:b8:91:06:e1:8d:60:be:
         e4:56:51:d5:fd:08:4a:c5:64:d8:22:c6:62:68:f0:28:23:55:
         5e:bb:4a:0a:31:41:52:fb:6e:0e:d5:9e:c6:9f:b0:6c:3e:6f:
         a8:1e:c4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:54 2025 by rpki-client