Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
File:                     BvPXAJgq-awbr-TyqnGEStAHWR0.mft (raw, json)
Hash identifier:          Pr1Nj8Se04chet0SCbiIw2kIGCFmARRN8kY4dWlL+Kg=
Subject key identifier:   EF:CE:69:B0:67:52:12:E5:15:01:2A:78:8A:E0:1B:F9:84:62:46:EA
Authority key identifier: 06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D
Certificate issuer:       /CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
Certificate serial:       0196C53A9916B3A7EB8ECD8B1ACDA8E5AAE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
Manifest number:          086A
Signing time:             Mon 12 May 2025 16:01:13 +0000
Manifest this update:     Mon 12 May 2025 16:01:13 +0000
Manifest next update:     Tue 13 May 2025 16:01:13 +0000
Files and hashes:         1: BvPXAJgq-awbr-TyqnGEStAHWR0.crl (hash: Nb3mxlWBlLN61D7IdybwygcPmPRmL/yB/9eVg/9sfXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:99:16:b3:a7:eb:8e:cd:8b:1a:cd:a8:e5:aa:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f3d700982af9ac1bafe4f2aa71844ad007591d
        Validity
            Not Before: May 12 16:01:13 2025 GMT
            Not After : May 13 16:01:13 2025 GMT
        Subject: CN=efce69b0675212e515012a788ae01bf9846246ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:0d:34:2f:af:8c:9e:0d:dd:ec:ec:b7:93:
                    ec:ec:89:23:24:1e:df:b9:bf:64:b3:d2:81:69:f3:
                    c1:12:0b:cc:40:74:5d:c9:b1:c5:19:24:0f:86:91:
                    fc:38:7f:f0:83:a5:90:a8:fc:df:34:81:de:67:de:
                    57:1a:18:b0:c8:f4:bb:89:5f:9c:bb:2d:e3:e6:0e:
                    41:bd:28:1e:99:6f:58:22:54:0b:25:c0:01:e4:bb:
                    8a:de:de:41:2b:66:ef:eb:68:8f:8f:ab:e5:eb:3f:
                    db:f3:71:76:64:c6:ae:a5:6c:cb:f1:0e:1f:fe:37:
                    f3:fd:0a:11:60:05:40:ee:c0:4f:71:b9:41:c0:97:
                    e2:ea:91:b4:52:fe:b5:cb:c2:ae:81:fa:cb:31:e3:
                    29:7b:c1:7a:44:c3:ef:7b:0c:93:7b:a8:ce:38:b6:
                    61:8b:0f:77:83:74:38:4e:1e:4c:83:c5:d0:55:bc:
                    93:18:94:f1:9b:56:7b:20:25:80:e5:dc:4e:3f:b5:
                    95:72:38:81:cb:a2:5c:83:d6:56:50:2e:21:ee:51:
                    00:c1:5a:2a:44:2b:9b:21:b6:ec:f2:3c:bb:a3:b6:
                    80:5f:12:af:b9:74:64:f1:01:b1:c3:cb:21:64:d7:
                    ef:4c:bd:e8:24:65:4e:a0:b2:d8:13:6a:05:db:a0:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:69:B0:67:52:12:E5:15:01:2A:78:8A:E0:1B:F9:84:62:46:EA
            X509v3 Authority Key Identifier:
                keyid:06:F3:D7:00:98:2A:F9:AC:1B:AF:E4:F2:AA:71:84:4A:D0:07:59:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvPXAJgq-awbr-TyqnGEStAHWR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/97eb03-0d6e-4d7c-82f1-d3b3e77bd993/1/BvPXAJgq-awbr-TyqnGEStAHWR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3a:c4:1c:b8:a2:b8:b6:43:b7:8f:62:a4:22:b1:61:95:a3:
         02:be:98:5c:8b:cd:6e:b3:d2:24:6f:36:5d:84:d0:1a:52:2c:
         ae:a3:5d:f9:d8:40:ae:7e:e0:e0:03:39:fd:c0:b8:56:f9:44:
         fb:7a:71:d7:9e:c8:e6:0c:88:5e:17:ec:2e:3a:32:72:a6:be:
         ac:a9:06:75:59:2c:4c:8a:8a:61:bf:18:c1:3e:ca:ba:8e:ea:
         0f:e8:b4:66:af:0a:a3:1c:89:76:ae:05:cf:6a:4b:30:3c:d5:
         47:64:c6:de:18:96:97:e3:3b:b3:8b:85:89:49:6e:6e:94:da:
         08:9e:08:f2:ab:27:51:2b:0e:1a:b0:77:05:cd:85:fc:82:d1:
         36:93:0e:41:8b:fc:49:09:0a:56:23:81:d5:01:e9:99:cc:e0:
         80:b4:f2:76:12:12:e0:32:1d:0c:55:83:2c:bf:73:67:21:40:
         25:77:3b:94:d4:f4:a9:e6:83:96:14:b7:37:a1:86:ef:13:fa:
         62:c1:3e:d0:6e:c5:df:04:97:10:2e:24:89:fb:c1:f4:60:e0:
         a2:a9:ca:fc:f8:d0:5f:33:67:3a:d2:b2:ce:32:fa:35:01:98:
         aa:c7:a9:ad:3f:a8:39:16:41:bd:ba:2e:25:ca:0d:f7:5b:12:
         b9:70:20:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:52:52 2025 by rpki-client