Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          Zd5T9ebe5vKvUNd3Hm4yUWiKLinEwAozU586g3xnDLo=
Subject key identifier:   BC:C3:FE:8A:3A:27:72:19:9B:7A:27:AD:99:A5:39:C3:AF:B3:D4:AD
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       0196C502F9FD71DB0FB5DBEDD0D5EBBDED5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          0CDD
Signing time:             Mon 12 May 2025 15:00:28 +0000
Manifest this update:     Mon 12 May 2025 15:00:28 +0000
Manifest next update:     Tue 13 May 2025 15:00:28 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: luz/XGWuWYUdV4zatRRXIILb+bnBAf+TyxvbjkSbCuQ=)
                          2: noBL3J3r3tsM2aoB7sMnaFXK45A.roa (hash: 1slbvNJzht+Braw0JbEJxueE4i9IP1ZbfhD3OHI5Tsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:02:f9:fd:71:db:0f:b5:db:ed:d0:d5:eb:bd:ed:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: May 12 15:00:28 2025 GMT
            Not After : May 13 15:00:28 2025 GMT
        Subject: CN=bcc3fe8a3a2772199b7a27ad99a539c3afb3d4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:70:bd:00:86:d8:c6:00:df:df:53:4b:0c:
                    a0:25:48:6e:17:62:60:a8:76:20:e0:15:14:69:f5:
                    80:dc:7f:5a:26:30:db:fb:ac:a2:9b:17:2c:be:d8:
                    1c:e1:7e:95:93:34:47:99:ed:6d:e7:8e:9d:56:83:
                    a4:fb:ba:74:5a:15:df:3f:76:e3:ed:d8:fb:e9:d9:
                    28:f3:ef:88:b3:f1:c4:b0:ee:95:2c:b0:cd:53:50:
                    c0:ec:80:b5:bb:0f:02:f9:53:9a:16:fd:d4:14:09:
                    5a:4b:e0:f3:f2:97:51:e2:86:94:1e:fa:a4:6c:4c:
                    e1:91:f8:27:17:7d:8c:33:32:79:15:7a:fa:d3:ea:
                    6c:82:e9:8e:d5:aa:ac:58:13:bc:38:6c:bd:06:a2:
                    ff:e2:8a:15:14:11:64:8f:3d:90:55:60:f0:45:15:
                    66:d5:b9:9e:d9:2a:34:b9:cc:bd:b6:a2:55:99:5b:
                    39:6b:f4:2f:87:2f:3d:75:c2:ff:a7:e4:e3:61:b6:
                    3b:b3:a6:d3:8d:e7:2e:cb:c1:20:e3:8e:8f:11:fb:
                    68:91:c7:29:c1:f8:ed:bf:0a:b4:ab:6a:0a:e7:7d:
                    2b:a0:48:c1:c2:d0:a6:c2:56:a2:f9:f3:36:f7:e1:
                    4a:14:f0:bf:e1:29:ef:0e:a0:aa:bd:54:af:53:b0:
                    7c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:FE:8A:3A:27:72:19:9B:7A:27:AD:99:A5:39:C3:AF:B3:D4:AD
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f9:d8:a9:04:fd:c8:7f:0d:56:d2:9f:cd:52:4a:01:d4:31:
         58:3b:51:a3:c7:76:24:38:3a:e0:82:49:da:dd:79:89:42:fb:
         ae:ef:2b:48:94:6e:0f:bf:cf:bb:1e:b1:a9:be:ba:04:64:90:
         99:e8:da:5e:d8:53:01:32:77:2f:ec:e3:fb:cf:82:d4:d7:62:
         2f:c1:3b:c8:75:13:cd:cc:d1:bd:2f:b9:4d:81:61:a6:c9:9f:
         4a:2c:88:7c:ae:c4:ee:e6:ac:d1:d6:e8:0d:c3:cf:bc:76:f6:
         f8:7e:e3:e2:fa:6d:d4:52:fd:b4:37:33:63:36:95:cb:31:3c:
         c8:7b:74:b2:18:e2:3c:40:47:95:13:e8:29:4b:d4:33:aa:08:
         ba:8e:62:0f:46:48:30:c1:1b:f2:f1:94:d2:07:20:c9:bf:07:
         00:bb:0a:98:1a:b9:c2:16:b4:95:1a:0c:8d:b4:16:ee:ec:7a:
         d2:32:4e:1b:a8:41:1a:af:5f:36:43:21:d5:04:50:28:27:b6:
         16:dd:32:80:87:d2:6c:d6:57:e6:1a:be:e4:bc:c8:0d:64:a3:
         47:f3:c2:c1:94:b3:8c:77:51:7e:4a:ff:b7:6c:df:e8:36:83:
         cb:b9:b8:ca:48:5b:11:2b:1c:a5:d7:25:0f:78:eb:eb:6b:d6:
         15:23:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:14:44 2025 by rpki-client