Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
File:                     tungBTS_H0IC0C5WhBB_A66kYNA.mft (raw, json)
Hash identifier:          J1Zz+NNQv6cmtPVOFzYotRN68neZb5bRznmvi8Oqwh0=
Subject key identifier:   99:FC:C9:22:2F:A4:36:BD:67:F0:EE:48:30:87:94:0E:A0:C3:02:65
Authority key identifier: B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0
Certificate issuer:       /CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
Certificate serial:       0197BA0F2A615565DA39F83005AB6A111EBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
Manifest number:          0EC3
Signing time:             Sun 29 Jun 2025 05:00:45 +0000
Manifest this update:     Sun 29 Jun 2025 05:00:45 +0000
Manifest next update:     Mon 30 Jun 2025 05:00:45 +0000
Files and hashes:         1: 2tjpWqYFbsp3PJ7j0a8LgZv9o-k.roa (hash: yc1LwHgvBHnrFxChVc9lBWOHj/dQfTKRBxylI9liBwA=)
                          2: tungBTS_H0IC0C5WhBB_A66kYNA.crl (hash: h2tYMorD8x+0a0ZFwVRbAVxKlDs1TT93R/53GVh6+Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:0f:2a:61:55:65:da:39:f8:30:05:ab:6a:11:1e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e9e00534bf1f4202d02e5684107f03aea460d0
        Validity
            Not Before: Jun 29 05:00:45 2025 GMT
            Not After : Jun 30 05:00:45 2025 GMT
        Subject: CN=99fcc9222fa436bd67f0ee483087940ea0c30265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:95:f0:24:38:10:e7:f9:37:1b:a0:46:e0:
                    4f:86:ed:89:23:1b:30:07:a3:da:ec:a9:8f:e8:4a:
                    f9:e9:14:ae:59:bf:10:13:42:d9:74:82:a1:f3:2c:
                    19:c8:89:aa:44:e3:b9:cd:58:e4:0c:9c:92:bf:4a:
                    60:2e:14:7e:26:3b:51:e8:e9:8a:e3:61:4d:83:3a:
                    11:de:32:d6:8d:ee:ae:f1:f4:ff:33:e1:19:19:98:
                    52:bd:68:11:89:22:5f:96:ab:8a:74:5d:08:d4:95:
                    92:2b:34:d7:19:9d:5b:11:5b:10:d5:92:58:8b:16:
                    fd:39:75:18:64:2e:89:31:83:05:ef:cd:fb:d0:fd:
                    d0:52:8d:7c:ad:8e:a3:5d:07:93:24:59:6c:5d:e8:
                    e1:7f:ad:3f:c0:7b:71:8d:c9:c2:6a:2c:f8:32:23:
                    64:03:f3:74:17:b4:62:2f:a9:8b:c4:ed:ce:22:aa:
                    cc:e6:a5:9f:5b:59:34:87:f1:52:21:90:82:ae:9b:
                    f1:47:24:37:e3:f6:2a:35:de:5f:81:4d:1d:ae:fe:
                    6f:d1:21:69:f9:3e:01:09:eb:af:ca:b9:3c:eb:e0:
                    95:83:fc:77:e4:e9:08:3f:7d:7b:82:f4:83:08:31:
                    5a:ef:4d:55:43:e3:be:b8:4e:eb:0a:f7:18:30:82:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FC:C9:22:2F:A4:36:BD:67:F0:EE:48:30:87:94:0E:A0:C3:02:65
            X509v3 Authority Key Identifier:
                keyid:B6:E9:E0:05:34:BF:1F:42:02:D0:2E:56:84:10:7F:03:AE:A4:60:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tungBTS_H0IC0C5WhBB_A66kYNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/0eae4b-543f-4d42-a711-360daa324923/1/tungBTS_H0IC0C5WhBB_A66kYNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:92:5f:9b:fa:f8:12:12:26:11:d9:bf:f5:1c:b1:5d:49:d9:
         1d:55:66:86:8b:d6:4a:9b:bc:fc:50:1a:97:68:79:8d:f7:05:
         a0:6b:1e:28:0f:a6:ac:6d:85:1e:3f:57:b2:f8:06:76:f1:80:
         41:58:ae:c0:12:25:f7:17:81:d8:55:a5:ad:8d:65:ab:78:f5:
         17:91:c8:20:97:6e:d4:92:0a:51:df:8d:44:91:78:b7:29:04:
         6e:d9:65:f4:81:93:16:81:1f:c6:c8:96:63:4f:eb:6d:66:21:
         d6:e2:79:c7:3e:76:de:17:a7:a9:27:de:22:fa:1c:16:62:5c:
         ed:17:ef:19:3f:36:df:4b:c0:7c:71:02:c2:d5:31:df:53:b8:
         84:bb:06:20:3d:07:31:3d:19:fb:15:47:19:f7:88:22:57:00:
         8f:45:f4:2c:18:de:b3:4f:a9:50:f4:ec:ae:75:26:ce:21:81:
         e8:16:91:5c:d4:1e:5c:63:30:85:89:2d:53:a2:50:96:c9:87:
         90:f5:22:64:81:25:1e:47:45:d2:fd:da:52:fb:c4:22:fa:ac:
         a5:37:f0:f7:ad:79:e1:4f:0a:c5:d6:59:57:fa:0d:9e:62:d5:
         8e:b8:e5:c6:64:94:9d:e7:0a:cd:f3:44:b0:54:37:6d:d2:a8:
         db:59:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:14:45 2025 by rpki-client