Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File:                     BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier:          3KKPpjDkAd30KcHk4quxx7jIcwQfr+GkcGbrwsouJjM=
Subject key identifier:   84:5D:88:7B:4D:D7:24:00:66:7D:B8:31:97:9D:52:DC:E5:E2:DE:BF
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer:       /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial:       0196ACFAB0C7521FE85586D7ACF2DDB1D4D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number:          152B
Signing time:             Wed 07 May 2025 23:00:32 +0000
Manifest this update:     Wed 07 May 2025 23:00:32 +0000
Manifest next update:     Thu 08 May 2025 23:00:32 +0000
Files and hashes:         1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: u5vUboORTXHfnE0FT/T1vdv4l0NgsACKxlJ9B25oItU=)
                          2: V1jBLHDx-YMbIoIxpTiAmkmziIw.roa (hash: SGHuNvgj4twRIgtAoRf+w31bdCCwfTwFv+zuwmyR4Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ac:fa:b0:c7:52:1f:e8:55:86:d7:ac:f2:dd:b1:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
        Validity
            Not Before: May  7 23:00:32 2025 GMT
            Not After : May  8 23:00:32 2025 GMT
        Subject: CN=845d887b4dd72400667db831979d52dce5e2debf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:6a:96:8e:39:b3:58:f7:5e:72:85:3f:ab:
                    cd:42:44:c3:0a:a7:8f:18:78:c2:9e:67:13:7a:05:
                    14:17:98:84:c2:a9:0f:80:93:02:fe:91:b2:c1:59:
                    06:42:6a:68:65:ec:be:8f:8b:93:a1:f2:a6:bc:54:
                    2f:99:9b:7f:32:55:fd:4a:ac:88:ff:d1:35:01:ff:
                    74:02:57:f6:f6:81:a8:43:35:d9:04:12:dd:2f:d0:
                    a8:d1:48:30:4a:8f:93:de:ec:58:2f:4f:31:b7:fa:
                    32:eb:54:ea:3b:d1:53:b6:d7:1b:a7:19:61:92:af:
                    00:e5:06:f6:cf:31:a4:6e:fa:6b:c1:af:df:6a:75:
                    77:5d:ff:99:da:02:6f:f8:0c:74:18:62:c0:5a:6d:
                    b1:73:f9:ee:f1:42:29:19:b0:dc:a9:19:66:41:a1:
                    71:07:9e:bc:e8:c8:4c:1c:dd:dc:ab:69:4d:99:85:
                    30:7d:1f:b4:b7:f0:3b:a6:55:ca:c8:ff:eb:38:e3:
                    27:a2:ee:c2:34:7c:e1:ad:04:61:5b:6c:88:62:88:
                    e7:ee:9e:65:24:c2:e7:51:42:43:53:8c:fc:01:43:
                    73:94:4c:c6:8b:8f:ff:5f:96:d5:e8:c4:c9:01:38:
                    a6:31:54:8f:1f:a0:ab:a9:22:40:51:8a:95:dc:b8:
                    fb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5D:88:7B:4D:D7:24:00:66:7D:B8:31:97:9D:52:DC:E5:E2:DE:BF
            X509v3 Authority Key Identifier:
                keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:e7:57:a5:03:7c:26:6e:c0:7f:ea:2d:6a:08:ef:78:68:
         75:4e:38:c0:40:8c:0d:fb:a6:2f:58:70:63:6a:17:ac:a1:b7:
         ef:14:38:a6:75:fd:73:32:92:33:9c:00:4b:7a:da:93:b1:8c:
         fc:ae:29:6f:2e:c6:01:dd:a1:d5:47:d3:66:8e:f7:24:9b:34:
         ac:a1:f6:2f:c1:c9:84:1a:5a:4f:f7:13:86:0f:98:a4:fb:e7:
         0d:13:3c:69:71:02:83:eb:cb:20:d8:66:16:6a:2c:f4:b9:6b:
         a7:ad:8e:c6:d2:63:f9:32:35:bd:06:49:5e:95:db:14:3d:16:
         49:64:2a:47:f6:47:ef:77:7a:4b:38:b7:c3:ff:9c:87:da:30:
         21:54:24:ec:fc:58:b2:8d:e2:b2:ee:5e:4b:23:98:e9:98:a9:
         2c:9b:e1:70:74:d8:a3:de:b3:a6:07:3c:33:c9:3c:0b:3d:98:
         da:e7:1a:3e:c9:cd:4a:ed:df:36:f6:4f:43:12:58:68:3e:05:
         aa:02:b0:69:50:46:2e:b8:65:9f:9c:01:31:87:84:cb:7b:6d:
         d6:6a:bc:2d:c1:52:46:66:04:b1:2e:bf:7e:53:f0:b4:d7:fe:
         81:4e:c3:b1:c2:ea:7c:2d:04:b6:44:1d:48:13:39:31:c8:e6:
         8a:c8:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:49:09 2025 by rpki-client