Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          CJ55fAcLjC6MFrE6xNOz1kVlkXt96RNIHkVyKslt1dU=
Subject key identifier:   E7:5C:32:07:A4:CE:FE:4C:85:10:40:90:23:D8:AE:7B:05:9C:76:D3
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       0197B7EA6516508692CD6AEA5C16779D0A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          12BB
Signing time:             Sat 28 Jun 2025 19:01:21 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:21 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:21 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: 6ky5xptY/SAe1d7K5qlEvaEpbfNtiLDty4MmtDmnWv8=)
                          2: Ss7XTWpHmXw6L7KiP6AnSkLRnd4.roa (hash: rhKrnmJP9HKc4ydR4WxRdbHD2Fh6lt0Ep1m2e2GnBII=)
                          3: vjNiGGPMMIohREeXJHQsS5InGhc.roa (hash: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:65:16:50:86:92:cd:6a:ea:5c:16:77:9d:0a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Jun 28 19:01:21 2025 GMT
            Not After : Jun 29 19:01:21 2025 GMT
        Subject: CN=e75c3207a4cefe4c8510409023d8ae7b059c76d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ab:72:7d:5d:dd:b3:22:21:ad:a1:23:76:dc:
                    ca:5d:e4:83:68:3f:ec:0f:6f:0b:19:37:f1:75:6d:
                    7c:aa:ba:d9:6b:fa:cf:e1:a1:f1:48:91:79:a4:fc:
                    f8:32:01:cf:6e:db:03:d9:c5:a2:86:e9:9a:9d:e9:
                    42:be:47:e1:62:01:15:d2:0a:1f:b9:fb:15:ad:be:
                    9b:17:9b:3d:33:d2:49:1c:37:eb:80:40:09:7c:89:
                    4b:37:4d:eb:a9:88:df:89:ae:ca:20:22:d6:7f:5c:
                    2a:0f:1b:f6:e7:4d:36:20:76:9e:84:0e:d7:33:a3:
                    a7:03:50:90:a3:0e:8c:84:bf:fd:fc:8b:88:75:ec:
                    c0:39:94:78:5f:ad:70:6b:89:b4:ae:ac:aa:e0:3d:
                    ce:af:b5:dc:51:27:12:5e:d2:83:38:65:7d:01:c0:
                    cf:7d:d5:e5:4d:7b:ae:71:32:6d:dd:5e:01:3d:63:
                    4f:01:f6:18:83:01:93:89:b3:d0:c2:06:dc:81:69:
                    5a:9a:55:e3:12:37:ab:eb:ff:52:12:ae:be:2b:a0:
                    6b:4c:5c:4a:de:2d:3c:91:c8:00:6a:81:a4:d0:4c:
                    97:5c:fd:7f:36:e8:9e:6d:d5:a5:55:17:bc:72:ea:
                    a4:1e:39:9b:fd:aa:d1:04:35:23:cc:b9:4b:38:e9:
                    7b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5C:32:07:A4:CE:FE:4C:85:10:40:90:23:D8:AE:7B:05:9C:76:D3
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:36:e3:00:6d:7a:4e:51:f0:ea:d6:18:89:2b:34:8a:3a:
         a6:b6:9f:95:64:d2:16:93:17:2c:c8:cc:83:00:b9:e5:22:90:
         7b:57:92:ad:13:09:64:0b:d9:01:ba:59:e1:aa:46:77:c8:0c:
         fe:b4:d0:be:f6:ab:ab:d8:fa:94:35:00:ad:27:bd:d8:93:fc:
         cb:5a:85:a5:29:0a:47:96:00:40:c2:fd:e6:6a:9a:14:db:3e:
         ae:9b:4d:b0:5a:cb:f2:88:5a:39:47:0f:24:d2:43:d8:c1:96:
         70:89:df:c4:1b:e5:46:6e:63:0e:19:a1:88:0d:24:64:74:c7:
         48:48:0c:f4:c6:04:56:7a:87:35:82:b2:9c:4b:a8:bc:8b:86:
         7a:a0:6f:bc:f9:53:da:09:74:d8:c0:78:7f:ef:36:08:84:ef:
         e3:1b:54:58:c4:d6:79:2c:34:42:da:f7:84:d6:5d:3b:d6:9f:
         a5:01:ed:b8:e7:39:5a:f0:5c:b3:38:9e:a4:69:33:b1:55:66:
         37:a6:7d:3a:46:b3:5d:fd:48:77:85:9a:27:5b:22:64:53:ad:
         4d:94:0a:69:36:75:18:d8:bf:35:c7:ac:87:f4:d7:04:c3:8b:
         17:20:6c:2c:e9:80:0b:4b:ec:14:dc:b4:27:83:f9:ce:7f:27:
         da:47:6c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:42 2025 by rpki-client