Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File:                     BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier:          LufpOIqusrSVhZEQdeDZ+0RcOoa+W+/4CHVEPa1VVEU=
Subject key identifier:   D6:1F:78:BD:36:15:34:33:EB:51:6B:EA:B1:AA:FA:4F:E5:18:2F:65
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer:       /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial:       0197B6A172567AA6E98D38F240816479E870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number:          08E7
Signing time:             Sat 28 Jun 2025 13:02:03 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:03 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:03 +0000
Files and hashes:         1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: DiFp1MJpCoOXOxQE8QFtDzIjWZlbtzR3uB3didCRmb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:72:56:7a:a6:e9:8d:38:f2:40:81:64:79:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
        Validity
            Not Before: Jun 28 13:02:03 2025 GMT
            Not After : Jun 29 13:02:03 2025 GMT
        Subject: CN=d61f78bd36153433eb516beab1aafa4fe5182f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:cc:68:80:01:32:5e:1c:88:70:05:8f:26:
                    5c:92:d3:1b:45:53:8c:c9:db:5c:e6:c3:9d:7d:74:
                    6e:53:de:ce:71:8c:be:a3:7e:60:02:b2:ed:33:ab:
                    e3:da:12:fc:fb:ed:d2:70:6e:04:8b:c0:19:4d:e2:
                    96:e7:f2:f0:2d:34:12:fb:5b:b9:04:60:b7:91:ba:
                    85:c4:a7:93:2e:68:03:41:cd:47:61:c0:0d:53:0d:
                    99:0c:86:2b:a9:3f:45:15:70:00:5f:ea:0c:e6:db:
                    a1:d3:ad:fd:9e:f6:c8:8e:ad:16:c5:06:83:dc:53:
                    59:68:0a:60:35:1c:85:75:4e:ff:72:56:20:34:02:
                    67:84:34:da:1e:52:34:de:62:70:25:62:83:c9:71:
                    c0:75:86:d4:62:7f:36:f7:1a:fe:3e:ea:4d:63:14:
                    03:0b:f0:77:10:36:b1:ad:8a:19:e1:b7:41:92:7b:
                    5a:1b:43:89:e6:d7:e8:0c:92:89:9f:b1:37:42:5c:
                    cb:03:49:46:be:c2:67:54:d1:ca:09:4f:2a:13:fa:
                    a7:db:ff:33:a8:74:4e:58:e7:42:fc:ff:57:57:83:
                    68:10:61:e3:98:c7:cd:24:e0:cd:b2:d4:dd:0d:ed:
                    03:46:f2:50:55:9b:ed:fa:e5:75:f3:c9:49:44:ff:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1F:78:BD:36:15:34:33:EB:51:6B:EA:B1:AA:FA:4F:E5:18:2F:65
            X509v3 Authority Key Identifier:
                keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:bc:3f:f4:cd:17:aa:5e:e1:96:53:72:14:c6:2a:2e:b3:
         37:68:33:ce:85:3e:51:2d:ff:26:63:b1:c4:9a:69:42:d9:51:
         3b:1e:3f:46:6d:97:a6:58:54:a8:a8:fb:e7:f3:88:17:49:72:
         bb:97:6e:44:3d:a3:b7:27:8b:76:7f:16:49:12:a1:6d:1d:cd:
         2b:91:cc:2a:cf:63:39:e7:3a:3d:3c:b2:6c:26:8e:70:2c:7a:
         06:14:c0:46:ca:1f:f7:c6:49:a7:b5:3e:50:5d:46:68:e9:bc:
         90:b3:18:0d:e0:df:0e:e8:76:ac:28:3c:f0:46:2c:d0:a3:c7:
         36:a0:b5:17:2a:9a:b6:85:a3:63:67:95:ff:73:63:0f:25:5d:
         84:7e:36:9f:1d:6a:1a:2e:e5:40:d3:24:dd:fb:a3:a2:ec:5e:
         b0:97:c9:09:e6:72:b6:42:53:9a:84:f1:87:50:62:1f:50:77:
         ef:67:4a:a0:79:3c:6f:d4:f1:67:d1:8c:91:66:76:34:1d:1b:
         d1:e1:62:bf:c2:d8:70:b1:52:d9:8c:fe:be:a0:41:fe:89:52:
         03:99:a7:5c:57:db:da:f2:cb:b4:c4:c6:78:41:da:29:8a:a2:
         8b:c2:6e:e5:a2:8c:b9:03:62:67:40:e1:5d:6c:9f:7f:d4:a7:
         57:08:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:17 2025 by rpki-client