Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          nMvI6mcpGus7i+9JhexMWbio3cV/12tqvVgTRrC8QSk=
Subject key identifier:   FB:BB:5D:8E:D4:BA:A4:00:40:92:7E:38:34:38:94:E5:AD:42:20:C4
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       0196C6834CB78004BFD9CFC1A636259267A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0D4D
Signing time:             Mon 12 May 2025 22:00:15 +0000
Manifest this update:     Mon 12 May 2025 22:00:15 +0000
Manifest next update:     Tue 13 May 2025 22:00:15 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: tIdcEDuT0T94S2U94hlZRnsLDmmoIxGKM8k1U99K2l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:83:4c:b7:80:04:bf:d9:cf:c1:a6:36:25:92:67:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: May 12 22:00:15 2025 GMT
            Not After : May 13 22:00:15 2025 GMT
        Subject: CN=fbbb5d8ed4baa40040927e38343894e5ad4220c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1f:d1:0f:11:e4:d8:10:f6:2e:a4:74:37:67:
                    f0:bf:ea:fa:dc:c6:3e:51:be:12:d1:0a:03:f5:82:
                    1b:a6:99:75:e5:a9:77:9b:83:b4:b8:00:9e:fd:3e:
                    a7:a6:90:19:76:0e:af:6b:45:38:49:b1:ce:c0:e0:
                    da:92:22:1f:93:b7:13:f0:5f:19:13:e1:fa:04:e0:
                    8d:64:29:5b:b3:7a:f7:d4:26:43:08:3f:c3:9f:19:
                    d8:c5:61:b6:2b:7a:19:0f:ba:b8:b1:62:7e:3c:18:
                    28:06:15:76:31:11:bc:7c:83:06:a6:df:60:8f:c7:
                    4a:cb:f5:73:bc:22:cb:92:5b:f6:ef:e9:36:8d:6a:
                    23:1f:46:4c:77:38:48:5b:b0:7d:79:fc:27:78:44:
                    14:40:71:a9:22:df:19:fd:28:70:28:7b:9a:77:3c:
                    b7:3d:12:b6:dd:6d:a2:ae:bd:3a:3b:4a:40:e7:53:
                    2a:db:06:f9:5e:c8:4b:fd:70:05:de:ef:37:d4:2d:
                    66:ed:11:ec:32:db:f7:85:b8:bf:68:16:55:a8:8f:
                    30:54:d4:46:ec:b2:65:4b:9b:7e:78:fa:6e:0f:07:
                    81:c2:31:4d:63:7a:53:14:cf:9f:de:0c:f6:d3:be:
                    b9:3c:a2:13:aa:34:ab:c7:e0:1e:55:07:6b:d9:67:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BB:5D:8E:D4:BA:A4:00:40:92:7E:38:34:38:94:E5:AD:42:20:C4
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:73:af:60:40:b3:82:af:e7:0b:f5:19:63:b4:d9:20:4a:
         48:26:08:0c:0a:97:45:1d:24:40:8a:8a:02:df:07:af:ab:7c:
         63:de:5e:dd:2b:28:08:9c:36:91:71:bc:b6:a4:70:53:11:6d:
         50:35:75:2c:e2:78:07:05:89:2a:fe:6b:f2:1a:3c:b7:14:77:
         d5:67:e4:ad:56:fc:2d:f1:7e:cb:15:0f:ce:68:72:87:e7:56:
         ca:c2:33:1c:4c:ad:93:34:7b:30:ed:a7:b5:f3:a1:f3:8b:d1:
         bc:36:43:ff:e4:76:cd:38:6c:2f:b5:0f:4b:11:d9:2c:25:65:
         82:a2:71:ae:3f:9d:79:1e:c0:4a:b4:32:d4:cb:16:e7:2e:a2:
         bc:34:13:5d:e4:c5:55:eb:b9:e7:ab:35:8e:c9:4d:b0:10:80:
         68:bb:4a:85:86:9d:55:59:65:68:dd:13:17:cd:d2:3e:9b:d6:
         59:6f:99:79:fe:6c:ac:5f:c5:03:78:74:7e:5a:4f:96:b1:9a:
         aa:85:4b:38:c3:43:f8:a9:b4:7c:32:d5:94:72:0b:30:c8:25:
         c3:21:09:a7:bd:a2:87:ba:2c:82:03:74:50:bc:d8:1b:b4:8a:
         d5:3f:6a:b2:66:c5:32:9e:24:f5:eb:d5:d6:de:a0:2f:09:b5:
         15:78:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:54:47 2025 by rpki-client