Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          nASlhsafffgsgj/xS7650itvqDGqJrNer/MZ2Ex5yo8=
Subject key identifier:   78:52:43:23:98:90:9C:6A:C8:3C:8B:0B:8D:21:F3:A7:A5:24:A3:8E
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       0197B74558ECFB7EAD80A4178C9A33498AF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 16:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:04 +0000
Files and hashes:         1: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: JxylPmcvjiwireKctmJvETJkYTVr0jTUzz+psCbvNtI=)
                          3: L7e4J1RQTn0nIwk--GSUaD-UmoM.roa (hash: 2gs+pIrBMmE/Jpl0M+ftbVMtlfnyIgG+tIOj7MBw26s=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:58:ec:fb:7e:ad:80:a4:17:8c:9a:33:49:8a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Jun 28 16:01:04 2025 GMT
            Not After : Jun 29 16:01:04 2025 GMT
        Subject: CN=7852432398909c6ac83c8b0b8d21f3a7a524a38e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:ad:f1:f7:39:a0:8a:97:b6:70:37:e3:0d:
                    64:56:bf:97:a1:e1:01:a0:cd:69:a8:41:d4:ce:d3:
                    b2:29:02:1d:4e:e8:b6:a7:96:cb:7d:21:2f:88:66:
                    8a:81:e7:bc:99:ef:54:85:c5:5a:d0:45:96:46:c2:
                    b2:88:c1:2b:e8:ce:cd:c8:f5:5b:fa:a2:1a:0c:9f:
                    f3:d0:ae:d2:58:79:ec:4e:16:30:04:7d:c5:5f:69:
                    7e:31:ed:30:ba:eb:46:56:ce:d8:28:64:ee:1b:23:
                    33:1b:50:43:4a:da:b0:82:8e:59:d7:0c:16:55:f7:
                    1c:eb:7e:16:47:d8:83:e1:b0:ee:b0:ac:04:5c:cf:
                    82:e3:aa:25:6c:72:fb:f7:39:44:93:d7:4c:3b:4e:
                    24:4b:35:9a:95:f0:37:27:04:d2:8d:87:ce:7c:f1:
                    6e:75:39:0e:f2:5c:d8:92:2c:42:67:26:f2:ae:91:
                    1e:04:aa:94:5e:b3:35:5e:27:f5:62:5f:f4:8e:5a:
                    12:ad:fc:2d:84:2f:40:ef:70:99:83:60:86:04:64:
                    dd:e1:7b:33:bb:ac:0c:58:2e:59:eb:f7:d0:c3:10:
                    3d:16:9c:81:f8:8d:c2:4f:73:9d:f2:54:89:6e:e1:
                    45:35:f0:41:c8:f1:02:c6:2e:e0:8f:e6:8e:f5:b8:
                    bf:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:52:43:23:98:90:9C:6A:C8:3C:8B:0B:8D:21:F3:A7:A5:24:A3:8E
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a3:a4:90:10:17:64:0d:96:bc:0d:55:d5:07:f5:a7:49:aa:
         3c:c7:9d:27:da:c7:91:06:d4:1a:ba:77:76:dd:94:bd:1b:61:
         9e:05:b9:7a:48:72:84:8e:99:c1:45:ba:65:8e:10:9c:a7:14:
         be:f2:c3:bb:60:e9:58:d6:18:a4:f9:eb:4d:90:de:df:47:aa:
         81:ac:fd:89:3a:4e:1c:aa:c5:e8:92:67:af:62:0b:fe:84:97:
         49:dd:3e:88:26:44:8a:7e:2c:20:95:57:a5:d2:e7:36:36:f1:
         0c:5f:13:eb:16:9e:3b:73:93:89:b0:8d:20:17:0a:82:45:f7:
         d9:fa:ae:f7:e1:f5:e5:64:e6:61:b5:34:20:65:f5:8f:d2:33:
         a2:9f:ec:17:b2:0a:5b:b8:b7:d4:91:be:3e:4c:a1:52:b2:37:
         1b:84:58:c0:a4:a3:fc:81:95:7d:8b:fb:55:a2:33:2c:70:5f:
         d9:6f:76:de:46:d5:1f:4a:8c:6d:1f:72:5d:77:98:2b:52:6f:
         9e:70:77:1c:d4:de:6f:51:4f:75:f3:e7:8e:b7:95:1a:1f:7a:
         81:3d:a7:4f:89:88:b4:9e:b8:fb:6d:e5:e3:22:9a:8b:bf:16:
         7b:f0:ca:93:6d:dd:92:df:67:9f:10:7a:8b:39:6c:97:aa:ea:
         f7:55:88:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:36 2025 by rpki-client