Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          t0CRS0o5ruQ/B0OcKBBVmccWF6UOJwvmJFvlr4qc6SI=
Subject key identifier:   1D:94:87:C7:8C:73:7F:16:0E:14:C4:3C:71:F0:D5:A8:EE:59:3D:B0
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       0197B6A0DAAD0EE77D8C7B185BB9937B938C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          BB
Signing time:             Sat 28 Jun 2025 13:01:24 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:24 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:24 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: QeKOBwAMq2rzAZ4YZFFe0cQn/F6cdNNzdBP4fXZG6Fo=)
                          2: iq6cggpLyhLXIPMceZzj6A6ieSo.roa (hash: 2Q+RThf982J7lEvTN7V9KTNdApYIItFmCQYJyXZjAuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:da:ad:0e:e7:7d:8c:7b:18:5b:b9:93:7b:93:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Jun 28 13:01:24 2025 GMT
            Not After : Jun 29 13:01:24 2025 GMT
        Subject: CN=1d9487c78c737f160e14c43c71f0d5a8ee593db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:87:fe:a4:85:73:ff:96:8c:ba:57:10:74:
                    dc:cf:7a:04:49:ea:09:e3:0f:04:f6:28:fe:c7:d5:
                    d8:05:98:84:0b:df:b2:3b:9c:e4:94:84:9d:d0:2c:
                    d9:58:cf:9c:7b:28:1b:0c:98:75:bc:7b:da:a2:fa:
                    77:88:11:d5:d6:3a:bb:17:e8:72:cb:61:8c:3a:dc:
                    fd:5a:0f:f2:a9:d9:a7:5a:95:b9:38:d0:b4:7d:9b:
                    13:db:bb:86:68:ad:d6:52:f2:99:32:ec:27:13:b5:
                    90:69:e7:f0:91:45:53:b1:2d:e2:a2:a6:88:5e:9b:
                    5f:3b:3f:f5:dd:eb:c3:31:d2:a9:2f:6b:7d:d0:c0:
                    22:27:ec:84:84:e2:7f:2d:25:8f:c1:2c:d7:ae:ae:
                    d6:b9:f3:6a:f5:82:93:7f:0c:7d:6e:c7:58:2e:f5:
                    5f:0b:35:7e:6b:2f:2e:d0:c9:11:fb:cb:59:db:bd:
                    bd:4b:21:cb:4b:70:26:1c:9c:ab:bd:f8:eb:df:b3:
                    07:47:cf:b8:81:da:d1:4f:fc:06:1e:27:3a:98:a6:
                    c1:b6:13:b9:46:2c:bf:51:9b:3b:61:f8:4b:87:a7:
                    af:2d:97:0a:da:35:fd:0e:c3:44:82:dc:7d:0b:68:
                    1b:f4:cb:4c:a9:7d:b9:06:b5:25:8f:18:18:70:d0:
                    58:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:87:C7:8C:73:7F:16:0E:14:C4:3C:71:F0:D5:A8:EE:59:3D:B0
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:4b:0d:e7:1b:f6:62:11:d5:77:c4:b5:b2:1a:62:e5:db:1f:
         81:60:df:ae:94:eb:78:0b:e3:09:28:09:99:76:4b:f7:e9:f3:
         e7:8a:eb:27:4c:b2:6b:f3:d6:27:da:e2:1d:77:be:93:16:80:
         f2:c0:75:ab:fa:0f:2b:5b:bb:3c:9e:10:23:2d:97:32:e5:24:
         02:37:56:90:5e:5a:22:15:68:4a:d7:8e:d0:de:bd:80:6c:a5:
         43:71:13:e7:91:4c:d9:9d:50:ec:10:aa:b9:28:0e:21:ee:69:
         38:22:a9:ae:2e:72:1e:44:ae:d8:b2:46:7c:2a:ed:54:fc:74:
         35:54:f9:93:48:8d:97:15:2b:15:db:87:06:9b:f5:d5:ef:4d:
         17:fc:86:1e:31:f7:9b:90:01:65:95:a2:8c:03:f9:8e:88:1c:
         4b:f0:90:3a:20:ed:b3:9f:3a:8c:37:c1:ba:60:4a:e4:20:ed:
         33:7a:38:1c:f6:f2:ca:55:6f:f5:88:28:10:e9:6a:a4:46:d8:
         5b:77:56:c2:15:87:80:ea:cc:fd:72:12:be:b9:d6:b8:75:ae:
         e8:f6:92:13:c5:63:c6:43:9f:c0:8b:00:e8:d4:45:6e:3c:9c:
         db:96:b4:b0:59:4f:7b:4d:e2:08:ff:da:63:50:51:70:09:ed:
         11:83:37:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:08 2025 by rpki-client