Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          +pfJWHPdHiESQCMdJzRNv/GcV8QFxLftFLNvtTR2xJU=
Subject key identifier:   DF:B8:E7:95:2B:02:10:EF:59:B1:BF:95:AC:38:16:FB:3C:83:3B:E3
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       0197CCF16DFC45EBEADB62F64AFEC4EA5A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          08E3
Signing time:             Wed 02 Jul 2025 21:01:03 +0000
Manifest this update:     Wed 02 Jul 2025 21:01:03 +0000
Manifest next update:     Thu 03 Jul 2025 21:01:03 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: U25ImXm0yhWt0wyuBZwx8oAea0J6sz24aB/j3KvpccM=)
                          2: oSc9TDaxZAgpBUL0U_QOqXe1iIQ.roa (hash: eRGT3we8piuEWhQIjqoI4A2ShRxv7LWNOl9KqCnYlOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:f1:6d:fc:45:eb:ea:db:62:f6:4a:fe:c4:ea:5a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: Jul  2 21:01:03 2025 GMT
            Not After : Jul  3 21:01:03 2025 GMT
        Subject: CN=dfb8e7952b0210ef59b1bf95ac3816fb3c833be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:06:94:77:56:a4:85:0e:93:b2:a1:d0:59:33:
                    08:90:55:82:6a:94:a8:d2:41:0a:2e:e0:b3:65:95:
                    71:5e:91:73:33:9f:3d:9b:ce:ab:6f:70:be:02:02:
                    21:95:b3:3c:4d:a3:46:c7:d3:ff:7a:1f:7a:89:2f:
                    94:9b:15:02:94:43:e6:04:25:48:dc:f7:3c:63:c5:
                    00:2b:e2:83:cd:d4:af:0c:9a:c4:ae:74:60:9d:6f:
                    c3:67:58:0f:7d:19:4f:5d:41:e4:53:17:87:a8:25:
                    8f:77:54:db:6c:65:bc:3c:fa:91:0b:48:fa:7a:7a:
                    fb:ed:88:d2:83:67:c7:d9:78:b2:06:d0:f2:ec:0a:
                    41:0f:83:25:76:cd:02:e9:b2:94:14:79:79:f3:00:
                    80:f8:59:ed:66:fb:2d:83:75:7f:a3:0e:fb:ee:be:
                    94:ac:4c:47:b2:72:a8:3a:f8:4e:7e:26:14:f3:7c:
                    91:3a:60:e5:34:d1:a6:9a:0c:e5:73:3f:38:69:9b:
                    f1:1b:98:62:d4:99:8d:27:20:e7:6e:47:92:76:45:
                    99:4f:78:9f:29:e7:3d:8a:93:58:b0:cf:4e:b8:89:
                    eb:94:fd:a1:55:e7:5e:5c:27:36:cc:7e:3a:f8:81:
                    cf:be:93:17:22:8d:6c:62:8b:71:82:fb:f4:31:b8:
                    81:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B8:E7:95:2B:02:10:EF:59:B1:BF:95:AC:38:16:FB:3C:83:3B:E3
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:dc:2e:1f:ae:01:ca:0a:84:7d:5c:4e:bb:c3:ad:69:d3:4c:
         1b:e4:bc:19:b0:28:35:8a:46:e6:f0:44:d3:3b:d5:7f:9b:af:
         12:8d:c9:06:c6:6a:3f:3e:c1:e1:95:98:bb:8b:29:b9:d8:3e:
         ed:d8:57:87:85:5a:4e:79:3f:fc:2a:c1:5e:86:5d:86:9f:37:
         ae:7c:b1:8f:54:62:65:ea:00:82:05:a6:bb:1f:35:17:8a:c7:
         ce:55:fb:54:1c:d8:0c:7e:e7:bd:4e:83:d6:42:5e:fe:ad:80:
         e0:c4:5a:87:e5:24:85:59:2e:23:4a:5c:c8:a9:fb:8e:f1:d3:
         6f:f8:38:d7:d7:19:0f:90:2e:68:d9:9d:40:7f:36:a6:b0:b4:
         da:9e:24:d1:e9:3e:05:9d:b0:e5:7b:a4:6e:28:f5:2c:4d:b0:
         49:49:f7:77:5e:99:30:77:0d:8d:38:d9:c8:2e:cd:45:98:c7:
         d1:25:48:5a:df:1b:a0:98:e7:0d:83:c1:87:d7:6b:dc:28:e6:
         02:4c:2b:a4:86:e1:c9:04:74:74:a1:64:96:4b:98:07:4c:66:
         cb:dc:eb:38:ac:c9:3a:07:ce:2e:91:14:d1:1d:81:76:12:1f:
         35:9a:10:2a:7c:18:74:10:d3:6f:12:03:1a:34:be:07:e7:6d:
         e4:f2:7c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:26:09 2025 by rpki-client