Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          Bl7dbbrw8VfVjSkwwcJOGl++tNFc1CmPKeObRR4rdtg=
Subject key identifier:   CA:3F:19:9A:7A:64:43:22:57:2F:E0:1A:6A:43:61:07:BF:0C:25:02
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       0196C7CD782B0F214F8935FBA19F41B9D517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1543
Signing time:             Tue 13 May 2025 04:00:53 +0000
Manifest this update:     Tue 13 May 2025 04:00:53 +0000
Manifest next update:     Wed 14 May 2025 04:00:53 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: XbRUpmqEhyjW/MN9ploUTtrlA96IN8z7YOsYc39rWjs=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:78:2b:0f:21:4f:89:35:fb:a1:9f:41:b9:d5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: May 13 04:00:53 2025 GMT
            Not After : May 14 04:00:53 2025 GMT
        Subject: CN=ca3f199a7a644322572fe01a6a436107bf0c2502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:d4:92:36:1f:1b:08:e0:8a:23:a7:93:06:
                    08:7b:bb:27:cf:6f:b0:10:28:81:dd:83:6f:cb:7f:
                    a0:2e:de:13:1f:d4:cf:31:99:99:9f:84:a7:78:2c:
                    98:67:bc:7c:c3:43:75:1e:12:7c:0a:26:7d:86:ee:
                    59:ab:28:49:43:1d:34:98:00:c8:79:a9:58:ab:47:
                    ad:c4:38:5d:2f:11:61:b6:59:35:17:1b:f0:72:f3:
                    46:e9:1e:71:8f:e4:bb:33:40:d4:4e:43:04:02:e0:
                    cb:24:75:49:d3:fc:57:a0:7f:8a:a9:bf:29:70:3b:
                    8d:71:be:3b:e2:b0:bd:b3:8b:3c:60:ff:10:a0:31:
                    ae:20:0c:4d:bd:97:fd:22:9b:3e:19:1a:94:f3:f3:
                    cf:7c:95:5f:cc:d0:51:c0:e7:61:e2:d8:cd:87:10:
                    73:ae:51:33:d4:6a:5a:e4:2b:e7:e0:78:b1:03:fd:
                    fe:75:41:82:3d:46:fc:6d:0f:ad:e2:b9:43:8e:25:
                    c6:88:ad:8f:7c:3f:ee:d4:44:90:4a:72:5f:c7:c6:
                    1b:11:c1:ae:49:26:1c:ac:ef:63:75:4b:8b:dd:c0:
                    64:97:2d:8f:60:a7:88:9e:7e:39:f7:a9:a2:52:18:
                    25:e0:06:29:04:ec:ed:1e:12:38:0b:6e:d0:61:e9:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3F:19:9A:7A:64:43:22:57:2F:E0:1A:6A:43:61:07:BF:0C:25:02
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:32:69:fa:4a:8c:dc:00:4c:48:3e:bc:f9:6c:42:99:49:
         4f:21:f8:a7:86:19:b1:6c:6b:b3:7b:96:2c:0f:05:23:24:d9:
         98:6b:b1:8d:79:c3:65:ff:9c:a8:ec:00:3b:2c:e0:d5:8c:26:
         85:56:77:54:b4:26:00:72:23:a0:6a:89:a4:ee:e5:78:08:a1:
         9b:fb:a6:04:e9:78:33:b7:3e:43:12:7b:5e:c7:d3:3c:6d:6a:
         4d:22:0a:10:bb:7c:8d:12:61:bf:36:f0:2c:69:49:ac:22:ea:
         1d:50:71:de:a0:92:22:05:a6:f0:83:be:87:8f:e9:ac:6c:b2:
         5b:c6:d4:96:78:39:43:3b:59:f2:f0:3e:6d:60:1a:fa:7b:92:
         e9:67:ba:bc:48:6c:bf:c5:30:fa:38:6b:0a:54:e1:d7:51:b7:
         21:50:c0:04:d7:cf:52:57:b8:c9:6a:23:0c:6d:15:d0:05:32:
         ec:3a:d8:64:07:48:6b:50:47:9f:f3:86:02:98:bf:83:41:85:
         64:87:bc:c0:63:7f:9d:1c:86:f0:68:45:64:11:42:1c:be:6b:
         5e:f1:a7:04:81:86:41:b5:e8:ff:e9:9e:8e:91:86:a2:da:c7:
         7c:df:07:3b:27:3f:c3:f9:e4:58:65:af:45:bf:17:34:18:2a:
         1c:d8:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:55:53 2025 by rpki-client