Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
File:                     BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft (raw, json)
Hash identifier:          zFghsc1fJP1GYxpQLRMhjWwyATxDdZoE4Rgt8meWlTY=
Subject key identifier:   DA:F7:19:58:BC:02:EF:61:AC:E8:B2:11:79:C9:2C:7B:08:C6:4D:C6
Authority key identifier: 04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7
Certificate issuer:       /CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
Certificate serial:       0197CDCD8F7289B4C1036F9E3C528A6021CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
Manifest number:          04CF
Signing time:             Thu 03 Jul 2025 01:01:30 +0000
Manifest this update:     Thu 03 Jul 2025 01:01:30 +0000
Manifest next update:     Fri 04 Jul 2025 01:01:30 +0000
Files and hashes:         1: BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl (hash: HY4OMlPeQY+s8xiCXIVVVWk+SC26p7omb8XTg+YngNQ=)
                          2: WhtfNl4kPsvSKKPK4a5edmJqBO0.roa (hash: fLmSne41hG7wjVHW396uQUWjNlIxQRVkrNFvdbSceKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cd:cd:8f:72:89:b4:c1:03:6f:9e:3c:52:8a:60:21:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
        Validity
            Not Before: Jul  3 01:01:30 2025 GMT
            Not After : Jul  4 01:01:30 2025 GMT
        Subject: CN=daf71958bc02ef61ace8b21179c92c7b08c64dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:19:b0:16:07:63:67:1b:90:60:b3:ef:09:
                    95:30:96:0b:c2:72:75:f4:5e:8c:83:f0:16:20:c2:
                    3e:43:82:0b:69:f5:d7:8f:cd:8f:0c:e0:49:b2:3c:
                    87:15:00:79:6b:fd:5a:d8:0d:2d:ea:e4:20:b4:19:
                    39:e2:f2:6d:01:96:1e:e1:71:be:7e:22:b9:95:30:
                    0f:f0:e0:4a:46:b4:3e:ef:25:0f:a7:d7:3d:54:9c:
                    a4:6a:98:63:f8:1f:13:9e:7a:8d:85:8d:ea:31:d5:
                    4b:14:c4:89:5e:5f:4b:50:e7:f3:a0:af:39:fc:fc:
                    4b:6b:02:5f:6e:75:73:70:5c:53:d6:50:1d:61:72:
                    c8:95:c9:bb:98:39:f7:3a:27:11:a3:b6:54:57:10:
                    18:2b:a3:28:9c:77:bd:73:75:9b:6a:8a:ac:83:ce:
                    be:45:2a:ec:22:04:73:1d:c8:05:f7:21:90:59:64:
                    32:9a:32:ab:b1:ab:02:7f:0b:1f:cb:03:d0:c3:a2:
                    aa:07:54:7f:f3:c9:6d:c2:e8:5a:7a:58:40:36:a5:
                    99:51:a0:0a:e3:2b:7e:fb:06:43:f5:b0:71:fa:d2:
                    c4:93:2a:bc:8b:f1:a0:90:f2:eb:97:b0:1d:c0:d8:
                    48:e8:72:a6:b8:7d:fb:82:fa:0a:d3:60:34:5c:60:
                    1f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F7:19:58:BC:02:EF:61:AC:E8:B2:11:79:C9:2C:7B:08:C6:4D:C6
            X509v3 Authority Key Identifier:
                keyid:04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:c7:fc:e1:d9:ed:a1:01:45:1f:e4:c3:39:44:90:54:d2:
         1e:8b:ea:c9:fb:51:80:a5:65:82:4a:83:f6:26:4f:6e:3e:2c:
         3f:13:09:4c:5b:57:9c:93:be:34:72:d7:26:b4:19:5c:e3:64:
         b4:cf:c9:3d:12:59:59:d5:e1:0e:d9:8b:47:18:f3:e0:09:5d:
         b4:5e:63:2d:2a:0b:4f:a6:48:d9:32:28:21:30:49:db:77:dc:
         c2:a4:3a:f7:41:24:9d:30:46:d7:67:ae:c2:e7:72:c1:93:ee:
         1c:95:be:57:ec:33:99:fc:ef:6c:c1:19:3a:85:08:b7:1c:a0:
         5e:8e:6b:05:cd:02:28:35:ec:82:96:7e:ab:93:82:c2:b2:87:
         dd:18:bd:85:77:21:39:71:7a:d2:c1:4f:c3:38:df:a1:67:7c:
         63:d7:a9:ce:0e:e5:0c:f9:78:6e:c4:12:92:34:e5:3b:65:10:
         3f:a5:59:62:56:e4:b8:dc:7f:78:78:ab:07:64:26:d6:b3:ec:
         b9:a9:f5:9b:75:1f:bb:e3:0e:52:1f:1f:bc:47:33:98:bc:b8:
         cc:db:78:fb:0d:44:03:9e:e8:d6:bb:0b:22:02:49:44:fc:5f:
         46:13:c5:8e:82:32:eb:33:3f:bf:b7:5e:28:ba:bb:87:a6:ca:
         e3:6c:1a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:27:33 2025 by rpki-client