Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
File:                     BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json)
Hash identifier:          m4lKVAejkJN5YjM4Aq2Epmr+AVxiIuO+hfNWktVLMmI=
Subject key identifier:   5D:23:5F:CF:2F:26:E8:23:78:88:3C:75:1C:F2:05:E2:BE:DD:C8:96
Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA
Certificate issuer:       /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
Certificate serial:       0196C3B98308A59AE3F410FFB6C86F791B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
Manifest number:          1537
Signing time:             Mon 12 May 2025 09:00:36 +0000
Manifest this update:     Mon 12 May 2025 09:00:36 +0000
Manifest next update:     Tue 13 May 2025 09:00:36 +0000
Files and hashes:         1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: wdQcXKkcUmVZE5pVObqrYTew8TTryidXO5BgpnsK7iM=)
                          2: ytt6NDRPw01MpgKIPHZI-KhTqFM.roa (hash: Qz/7LnFWYN8eKNmOmwVT183VYftTGjaTvg3yJfBkJTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:83:08:a5:9a:e3:f4:10:ff:b6:c8:6f:79:1b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa
        Validity
            Not Before: May 12 09:00:36 2025 GMT
            Not After : May 13 09:00:36 2025 GMT
        Subject: CN=5d235fcf2f26e82378883c751cf205e2beddc896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:38:93:32:f9:04:19:ab:7a:61:b4:49:70:81:
                    0b:8f:a0:14:32:15:6f:45:54:a3:97:15:ae:d6:2e:
                    6d:82:0c:57:57:aa:fc:ed:64:ba:fc:45:e8:6d:52:
                    1a:01:bb:c5:39:b7:3e:30:74:0d:a7:f0:fc:28:b1:
                    30:9b:8d:01:5e:08:93:d4:b1:91:b5:2c:e3:5a:74:
                    e6:0f:e5:14:fd:8d:72:3a:39:47:c4:6e:42:43:5c:
                    93:45:a8:92:1e:1c:5c:77:1b:c3:a5:6b:8c:10:6b:
                    da:a1:d6:9d:18:12:bb:17:29:3e:37:42:75:48:f4:
                    1d:8b:96:f2:78:db:c8:d1:2c:33:d2:dd:d3:c4:49:
                    d8:a0:aa:34:62:da:f3:25:59:ea:ba:24:d3:e9:ec:
                    6d:df:d2:ec:34:4c:16:7b:62:a6:27:e9:2e:9b:33:
                    b1:74:55:af:df:02:b7:7c:19:b2:38:35:25:49:8d:
                    55:db:6b:3b:b8:b9:12:5b:b8:72:e8:e5:91:f3:78:
                    01:ef:38:06:1d:fd:e2:be:57:3e:49:fb:2c:08:12:
                    3e:4c:e5:68:fd:00:fb:a0:45:4a:c0:25:c1:57:cd:
                    a4:b5:ac:08:a2:37:7e:45:43:2b:b4:ec:df:87:26:
                    9a:e8:9e:7e:42:16:94:ea:b0:7f:66:26:33:9f:a4:
                    54:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:23:5F:CF:2F:26:E8:23:78:88:3C:75:1C:F2:05:E2:BE:DD:C8:96
            X509v3 Authority Key Identifier:
                keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ab:2d:32:8b:b9:4e:f0:bb:ee:c7:2f:7d:15:5c:c5:29:22:
         17:40:d7:5d:ae:4e:30:58:94:d3:38:bd:e2:49:f0:ee:ef:e3:
         a9:7d:54:10:5d:4f:f8:5b:6d:3c:74:04:be:36:73:e6:24:00:
         94:09:d4:a4:b7:1a:c2:45:09:26:5b:a3:b8:16:73:5b:31:64:
         b6:a5:94:d3:e3:7d:51:0b:f8:5a:31:94:37:dd:14:ff:ee:ad:
         51:08:2c:65:d0:ac:1e:d6:10:b2:d4:3a:ed:d5:db:cd:6d:29:
         45:96:34:10:7a:af:ba:26:51:8e:2f:04:80:8f:b1:5e:63:9d:
         f3:d5:62:3d:05:f0:3d:88:59:ee:17:b8:e3:a8:03:e0:23:a6:
         86:cc:be:c0:a0:ea:1f:8e:dc:2b:fe:2a:0e:a3:54:cd:3b:38:
         56:9a:18:a0:8b:ef:38:b0:ee:bf:76:47:38:b1:36:77:bd:55:
         44:d8:1e:d7:cc:7a:aa:85:06:ed:85:23:f4:60:bf:64:69:b9:
         f4:98:0e:3d:e1:49:ab:ad:49:80:01:1f:18:74:2a:c1:02:bb:
         ff:aa:12:fb:1b:e0:6d:f3:d9:19:fd:0a:77:73:9e:c0:25:a5:
         0c:b9:fc:e1:66:db:2d:98:ca:fe:12:d3:9e:c4:cf:37:c8:72:
         92:48:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:26:55 2025 by rpki-client