Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File:                     BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier:          yaBgQdU7v9l9mBCPLHeeu6doPSzBZOfGr04Z56DJvh0=
Subject key identifier:   0C:2D:95:99:69:0A:AE:C0:F9:A7:57:9D:33:FE:7C:05:51:37:23:42
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer:       /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial:       0196A164C787577BD35B028B1996D76CCDE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number:          06E5
Signing time:             Mon 05 May 2025 17:00:58 +0000
Manifest this update:     Mon 05 May 2025 17:00:58 +0000
Manifest next update:     Tue 06 May 2025 17:00:58 +0000
Files and hashes:         1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: tRL+U+/lbsorS/BimYv0Ws8DG7TVYFvdOMnxp/PRsSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:64:c7:87:57:7b:d3:5b:02:8b:19:96:d7:6c:cd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
        Validity
            Not Before: May  5 17:00:58 2025 GMT
            Not After : May  6 17:00:58 2025 GMT
        Subject: CN=0c2d9599690aaec0f9a7579d33fe7c0551372342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:10:94:aa:9c:d4:33:dd:be:1f:38:0c:e3:3b:
                    e2:a1:bb:3c:60:27:81:48:fc:66:06:8c:e1:58:bd:
                    97:1e:7b:7f:44:04:75:90:29:b1:33:c4:ba:30:a1:
                    93:86:0b:c3:ec:93:84:94:62:48:88:bc:98:bf:92:
                    0d:60:d8:39:65:06:30:98:76:c0:90:3a:78:b1:28:
                    37:15:1a:d6:29:dd:93:4a:2b:2f:77:f6:10:de:54:
                    86:ce:ba:70:8a:47:e1:35:15:aa:e8:af:a3:7e:0f:
                    1b:bb:5c:64:b4:40:ef:15:c7:52:b4:c9:c0:56:c6:
                    2b:66:58:45:8c:a5:22:7c:06:df:71:9f:e3:bd:b6:
                    3f:03:8f:7e:cd:5e:bb:07:55:e4:1e:26:39:c2:13:
                    b5:a5:e8:f8:06:67:c9:a9:3b:b1:15:da:3e:6a:04:
                    a7:1b:d3:67:c0:9a:7d:a5:97:8a:f8:de:a4:c3:c5:
                    98:de:45:0a:45:56:7a:61:d0:03:c6:62:1b:71:ef:
                    68:05:30:02:49:a9:22:dc:eb:c1:76:ed:f2:bf:77:
                    10:44:dd:5b:7c:97:75:df:ce:85:3d:b7:0d:c7:a2:
                    eb:96:fd:1a:9e:f1:6f:19:7a:64:f7:7a:1f:6a:bf:
                    0c:42:8f:82:16:19:e4:72:02:5e:7f:a5:fc:a5:f8:
                    62:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2D:95:99:69:0A:AE:C0:F9:A7:57:9D:33:FE:7C:05:51:37:23:42
            X509v3 Authority Key Identifier:
                keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e4:7c:41:33:76:87:09:15:f7:43:2c:f5:ba:3e:06:36:08:
         22:ed:a4:2f:af:b7:e6:88:75:78:47:28:eb:a5:31:6b:f5:7f:
         f7:f8:97:78:1f:2d:0b:59:01:e6:d1:fd:69:a3:8c:18:11:4f:
         96:26:56:ce:98:b2:f1:b0:4d:97:14:1d:53:02:80:da:5a:a1:
         5a:a7:03:21:61:44:c3:ba:67:3a:eb:aa:ab:2f:a0:3c:62:86:
         8c:fb:bb:90:eb:e1:96:03:85:f2:2c:52:92:d3:77:e3:b9:6b:
         ed:5d:78:7b:a6:0a:a3:b5:a6:77:cd:8b:6e:2c:01:03:b5:18:
         e7:c0:4b:6a:97:a2:a5:0b:ca:a4:67:1c:53:27:13:6e:f4:3b:
         7a:07:b4:95:79:ad:d9:76:9f:0d:db:6b:14:e7:ee:25:66:19:
         57:1f:96:28:11:46:e0:aa:f0:da:c1:7d:c3:2c:f5:d4:01:ca:
         34:4d:0e:66:9d:a8:16:73:28:97:28:19:a7:e8:93:0b:fb:d7:
         fa:8a:39:d5:e6:14:e0:c0:85:ce:a7:1b:6a:91:d7:4c:3b:13:
         f8:db:57:0c:7b:5d:1f:06:06:ab:d5:da:6b:6d:c1:b1:d1:60:
         5e:c5:91:77:6e:d3:7b:7c:4e:0b:4d:8c:06:8a:b6:67:4f:7c:
         88:70:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:22:24 2025 by rpki-client