Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
File:                     BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json)
Hash identifier:          6cGoiUjof/QRQrmZ2jQpsm0THLFdr/pDAw86PncXO8Y=
Subject key identifier:   20:59:F4:F8:7F:F4:FA:37:7E:DA:92:C0:BD:81:63:C9:A6:05:90:7F
Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Certificate issuer:       /CN=06a757442e47f82608bef423dac344c25358dbf9
Certificate serial:       0196AEE96270729F04E3D8A69D2D772C068D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
Manifest number:          0A86
Signing time:             Thu 08 May 2025 08:00:52 +0000
Manifest this update:     Thu 08 May 2025 08:00:52 +0000
Manifest next update:     Fri 09 May 2025 08:00:52 +0000
Files and hashes:         1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: MVIHPLj9xBZ/bfJGV+UmaqH3h+XiOrYbZC+fbP8nXcg=)
                          2: cnQVrWDhW0BxCfHysaIfdn7x84A.roa (hash: QGeaUhczDONIP6VJTksO3RkYcdOxpExDTeoK1S4rtLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ae:e9:62:70:72:9f:04:e3:d8:a6:9d:2d:77:2c:06:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9
        Validity
            Not Before: May  8 08:00:52 2025 GMT
            Not After : May  9 08:00:52 2025 GMT
        Subject: CN=2059f4f87ff4fa377eda92c0bd8163c9a605907f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:35:c4:f2:a5:71:11:8d:8d:33:ff:8c:ea:
                    62:a2:84:b7:71:da:44:d6:8b:23:37:a8:d7:0b:91:
                    ee:e0:a3:c0:f5:a9:13:2d:de:ad:5f:16:e8:8f:51:
                    7c:49:21:b5:6b:a0:16:68:1f:5a:29:b4:58:02:1d:
                    50:01:d6:90:45:d0:3b:cc:c8:05:ff:d6:35:42:08:
                    da:74:71:04:c1:dd:9a:19:5b:39:dd:25:7e:97:d7:
                    f4:a3:db:79:08:ac:09:0d:e2:c2:21:39:75:15:a0:
                    73:ce:a8:0e:59:1e:94:bb:09:0d:7b:6e:4d:02:a6:
                    f2:56:34:16:15:d5:a8:d8:c4:80:c7:4e:8c:bf:8b:
                    b9:60:98:d7:bf:5a:85:d1:ca:87:bc:3b:4f:3e:79:
                    82:06:15:5a:fc:cf:10:24:28:7a:3b:1b:b8:6f:ab:
                    ee:c4:65:45:00:d5:84:b7:0e:62:7a:bb:e1:ed:7e:
                    53:9f:30:5e:41:f6:f3:e4:82:17:49:c6:ff:2f:a5:
                    1a:4f:d4:40:c9:5c:c4:8c:91:2c:11:1b:d6:d5:19:
                    d8:27:51:1c:42:77:9d:87:83:58:af:f5:54:c7:66:
                    15:f0:4c:11:2c:c2:b3:ee:77:47:18:56:51:3f:b0:
                    16:7e:0b:0a:89:06:8a:f6:e8:22:ac:58:69:b4:15:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:59:F4:F8:7F:F4:FA:37:7E:DA:92:C0:BD:81:63:C9:A6:05:90:7F
            X509v3 Authority Key Identifier:
                keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:24:12:14:d4:fb:11:1a:74:a6:24:ca:69:30:8f:c8:00:
         ff:3e:5e:5d:ed:96:36:8a:96:42:ea:ae:9d:2f:e0:a3:9e:d7:
         df:1b:9d:05:4d:26:2f:b1:0f:c0:e8:67:62:37:63:7f:0b:17:
         79:3e:e6:c6:9f:b4:0c:fd:14:26:b4:96:f6:65:df:8d:b6:15:
         71:32:e5:13:5b:24:8b:b9:56:98:33:32:2e:80:44:5e:00:90:
         d5:5f:3d:e3:e3:6e:a1:4d:d1:a5:f2:06:d8:98:1d:83:2c:18:
         24:d7:73:68:9c:08:f7:52:17:e9:06:6e:99:c2:d0:dc:f3:1c:
         dd:4d:b7:8b:4a:57:8d:95:1a:1b:33:77:ff:09:d3:86:86:ce:
         41:70:5c:c2:d7:0b:77:ab:6d:57:f7:42:a6:70:85:1d:8d:bb:
         10:cb:b5:19:70:5d:a9:82:9a:f8:26:2a:d9:05:1b:9b:5c:6a:
         6e:b5:40:f4:b7:92:91:8b:da:cf:6d:33:b1:1a:65:1d:81:71:
         9b:a9:1c:d7:d3:b6:46:1f:ee:29:ec:8c:0d:73:f8:61:57:ab:
         5e:09:e2:fb:03:92:ca:f2:20:ff:f7:1b:cf:fe:c2:6b:fc:4c:
         5e:bf:02:cb:43:e3:75:69:11:7b:14:fa:90:6d:d1:26:9e:72:
         1b:66:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:21:12 2025 by rpki-client