Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          IidkjywSgSsy5BUuK26SxnDfycX+GuzJBm/dgjXBlOA=
Subject key identifier:   AB:0D:77:09:7B:26:75:72:AD:0C:3E:96:B3:42:8F:6B:A8:99:D6:6C
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       0197BB8FCA877EEA2D371CE8B60A4C34FB85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 12:00:52 +0000
Manifest this update:     Sun 29 Jun 2025 12:00:52 +0000
Manifest next update:     Mon 30 Jun 2025 12:00:52 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: mwAt5qH2gKtoaxr1aYcPz8MRBboC5CaqSq61uyOt8wo=)
                          2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:bb:8f:ca:87:7e:ea:2d:37:1c:e8:b6:0a:4c:34:fb:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: Jun 29 12:00:52 2025 GMT
            Not After : Jun 30 12:00:52 2025 GMT
        Subject: CN=ab0d77097b267572ad0c3e96b3428f6ba899d66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:4c:41:e6:c9:33:45:bd:cc:d4:95:db:9c:
                    ef:8c:b5:f3:18:51:d3:9e:29:21:91:07:44:5b:35:
                    8a:f7:48:bf:f5:e9:32:fa:81:e0:6b:ed:5c:eb:be:
                    b4:0f:ba:00:5d:73:48:9d:4a:8c:0b:42:c4:2f:04:
                    d6:a1:b2:83:14:ed:cf:a2:fa:7f:1f:74:a5:7e:c6:
                    84:ca:e7:b4:08:d2:bc:27:79:38:2f:33:08:a5:c1:
                    e8:56:3f:77:61:6b:22:22:c1:ae:21:50:92:a6:e6:
                    de:a2:30:74:4d:2b:01:f1:cd:d6:27:ee:48:69:dc:
                    85:b8:87:39:c4:b4:be:36:96:51:90:d4:94:d9:79:
                    12:ef:0e:28:49:fe:e5:10:67:30:a8:9b:56:06:f0:
                    94:2d:ab:ca:a4:29:34:ee:fc:2b:9b:ea:cf:cc:3c:
                    d3:08:53:ae:91:79:cc:e5:8b:2f:22:81:2a:b2:ed:
                    ad:ee:e7:d1:b5:25:57:76:1d:cb:6d:78:61:36:49:
                    f2:0f:ed:0b:00:a3:f8:17:a2:6d:de:c4:73:c7:76:
                    79:03:d5:c5:62:2a:c6:d3:12:f2:20:a9:e2:74:3f:
                    b6:17:7a:5f:8d:ed:c6:0d:b0:80:e4:76:ed:be:16:
                    b0:51:0f:36:69:77:a9:54:7d:dc:df:a0:63:3f:95:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:77:09:7B:26:75:72:AD:0C:3E:96:B3:42:8F:6B:A8:99:D6:6C
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:70:b7:85:69:8c:93:66:9e:b1:33:73:58:5b:8c:4e:8e:4e:
         ea:5b:3f:c7:b5:bb:46:8c:2d:f4:c1:e6:91:31:aa:79:33:0e:
         07:18:1c:90:83:c7:45:ce:a9:8c:37:3e:c8:5c:a9:26:01:b4:
         6c:81:49:d4:5a:4b:47:50:5f:04:fe:79:53:dc:dc:24:c5:37:
         43:f0:fe:25:c7:cd:ad:6a:ee:e2:bb:a2:32:e1:f9:fc:18:d7:
         39:f0:a8:91:df:27:de:8b:31:79:a7:71:3e:99:78:ec:fd:0e:
         bd:0e:cb:1e:9c:9f:34:15:6a:67:85:f9:be:8b:03:28:69:35:
         84:f3:64:44:a3:7b:ed:13:96:d1:56:b4:f1:31:1a:c7:cd:ab:
         16:ab:d7:9b:96:04:85:4f:11:86:b2:51:fc:ba:ad:f7:e6:1c:
         98:39:e8:58:0b:24:1a:f6:a9:6f:2e:27:d3:a0:a7:b8:79:5c:
         09:da:ae:d1:16:59:5b:47:af:57:76:84:03:fe:8b:54:2e:28:
         aa:06:df:8f:dd:32:a1:90:5d:5c:c9:f0:1a:58:1c:f7:4b:e9:
         00:87:2e:54:1a:c4:c7:fc:b0:6b:d6:02:91:f5:8f:ea:0f:32:
         eb:27:a7:80:51:f9:3a:0e:f6:1a:a5:4f:24:73:2b:f7:88:39:
         3e:0d:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:24:02 2025 by rpki-client