Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          3yYAM434p35MhmvxwX+Jd7nFD5o/v92U909c1l2k2rg=
Subject key identifier:   BA:B5:51:59:8E:0B:EB:18:1E:13:67:A3:78:59:8A:DB:58:E4:92:9D
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       0197B6D7410AEC5B66165C71603029D1F007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 14:00:49 +0000
Manifest this update:     Sat 28 Jun 2025 14:00:49 +0000
Manifest next update:     Sun 29 Jun 2025 14:00:49 +0000
Files and hashes:         1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: y+wyai8bxSv4apFNDJf9LkEk+MPz1vKjyQ85emaEhLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:41:0a:ec:5b:66:16:5c:71:60:30:29:d1:f0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: Jun 28 14:00:49 2025 GMT
            Not After : Jun 29 14:00:49 2025 GMT
        Subject: CN=bab551598e0beb181e1367a378598adb58e4929d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:da:be:3c:54:e3:88:a9:28:44:e2:65:eb:
                    1c:83:39:0a:01:2e:61:b0:59:98:c7:a1:9d:d8:6c:
                    0b:5f:d9:01:7a:bd:cc:34:85:d4:90:e6:2a:82:75:
                    ee:e0:07:08:ff:b8:c1:8c:f0:ca:47:51:f2:b7:5c:
                    80:a2:2a:c4:ab:06:5b:06:17:8f:7f:38:1e:e1:92:
                    1d:3f:01:a8:00:3f:f1:ca:e8:e9:a2:f9:43:71:c5:
                    5c:ee:49:65:b2:61:ee:73:bb:bf:fc:ac:5f:f5:08:
                    96:1e:e0:d1:8c:26:26:15:ca:5a:12:92:1d:fd:92:
                    f3:e3:7b:4e:3c:37:09:92:d6:b4:43:aa:ef:23:2c:
                    ea:f7:85:d4:7c:95:e0:24:d5:b1:60:3d:4c:6c:1a:
                    cf:71:35:db:25:d6:6d:da:1a:e2:b3:49:26:83:b9:
                    13:74:b9:a9:4c:67:56:88:54:2c:9f:b0:2a:45:71:
                    0b:53:07:eb:dd:da:a1:2f:b1:f8:2c:c1:b2:8e:45:
                    a0:3a:e4:57:5e:8b:be:da:61:90:18:5b:8b:8f:a6:
                    11:1e:d7:99:0b:ae:4d:91:b3:26:dc:fd:1e:bc:2a:
                    eb:00:9b:6e:16:24:4a:90:fd:a7:df:82:64:de:bc:
                    4d:64:4a:01:d7:8e:c9:55:04:c8:32:9d:af:2d:69:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B5:51:59:8E:0B:EB:18:1E:13:67:A3:78:59:8A:DB:58:E4:92:9D
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:4d:d9:9b:6a:e5:24:f3:3c:a0:91:e4:ac:9a:1b:95:6d:06:
         97:6d:ae:55:fc:cb:a2:e9:b2:cc:00:5c:c3:8f:42:7b:80:55:
         4d:6c:7a:6a:12:2e:a9:e7:4b:09:cd:1d:97:b4:3f:d7:b9:d7:
         76:2d:4c:fe:13:2a:b5:1c:2e:c2:55:e4:72:21:a5:7b:23:0d:
         09:da:a7:b7:c4:86:56:31:66:42:bc:7d:d0:45:7c:66:33:9c:
         04:bf:40:2f:aa:0e:5b:84:eb:20:ca:80:ab:dd:ea:4b:79:be:
         3f:21:f3:63:50:95:55:21:fd:06:d5:f0:f3:32:09:d3:3c:ed:
         8a:c0:5a:c6:65:46:77:65:1c:af:39:e5:39:73:70:f4:e6:0f:
         b4:11:49:f6:a3:bf:d6:4a:05:bf:23:1b:74:a9:6d:56:08:89:
         46:19:c4:0a:13:f1:16:92:6b:35:e6:3c:13:ab:53:db:37:49:
         c3:82:41:73:18:e8:a9:15:d3:90:09:14:83:ee:2a:73:05:10:
         b2:c1:bd:0f:9b:55:5d:93:3d:9c:ba:13:16:91:21:f4:53:37:
         49:ed:ac:c7:ee:ac:6c:78:97:00:8d:ae:25:6c:bb:78:05:5c:
         9b:c7:88:8c:9a:71:b4:a3:a8:a7:a8:61:ad:26:d1:13:56:83:
         93:c7:cf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:46 2025 by rpki-client