Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
File:                     BU1P54D-RTMHgN627DhMuUk_LfI.mft (raw, json)
Hash identifier:          ifkRMo4k+o0UReZs5d8bwm8uNm/vcTpexGHFGGIKr74=
Subject key identifier:   9B:5D:61:26:60:9B:80:9A:AA:68:94:60:D7:35:72:08:22:77:21:3A
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Certificate issuer:       /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial:       0196A1D28C57DD1BA2442FF99D6C73A068E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
Manifest number:          1154
Signing time:             Mon 05 May 2025 19:00:52 +0000
Manifest this update:     Mon 05 May 2025 19:00:52 +0000
Manifest next update:     Tue 06 May 2025 19:00:52 +0000
Files and hashes:         1: BU1P54D-RTMHgN627DhMuUk_LfI.crl (hash: Dq5IPzN2tflah/uueE/HI4LSBUZqoA+nvhWCtoVJkFk=)
                          2: ka7B1o22nQ899fZrHQAwPaISuMc.roa (hash: YtdRj2DUEOEWo4MtM001iw/fwE9TLkR0g86JFagGliA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a1:d2:8c:57:dd:1b:a2:44:2f:f9:9d:6c:73:a0:68:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
        Validity
            Not Before: May  5 19:00:52 2025 GMT
            Not After : May  6 19:00:52 2025 GMT
        Subject: CN=9b5d6126609b809aaa689460d73572082277213a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:6f:14:08:da:62:e0:9e:ea:b0:63:dd:4f:
                    9a:4e:ad:d6:42:cb:27:a7:02:97:d3:07:4b:24:65:
                    c1:d3:59:62:aa:b0:3f:db:54:86:ef:62:4a:e6:0d:
                    a7:fc:40:4a:67:91:b1:4c:52:25:fe:23:71:7d:64:
                    b2:cd:3d:2a:64:db:15:c0:9f:d1:45:15:a9:3c:5c:
                    2d:5b:84:ef:82:bd:f4:b1:0f:04:ed:8a:5f:c0:0f:
                    73:2d:2b:ee:bd:95:1a:66:9a:58:80:19:78:3e:13:
                    9c:de:d3:64:cb:27:83:25:e3:8e:b3:3d:c4:98:a4:
                    17:87:3b:c3:de:14:f4:dc:a9:65:2b:a8:f7:86:a6:
                    99:5b:38:1e:57:52:c7:76:78:23:2a:ea:32:44:48:
                    95:18:cb:67:1b:bd:ee:68:a6:2b:6f:ce:cd:31:c3:
                    8f:c8:cd:75:8a:e1:7a:a3:92:17:4a:0f:bd:3b:b0:
                    42:02:c2:d0:76:20:a2:96:e8:f5:f7:38:fd:e6:56:
                    e5:4b:e2:1e:8e:b1:45:15:67:76:3b:bc:cd:12:fe:
                    48:3b:2a:34:50:84:a3:f2:21:a6:db:1e:57:d2:6e:
                    6a:16:15:6a:80:f9:76:80:23:40:a7:1b:a9:3e:28:
                    58:1b:22:13:17:8b:98:20:66:9d:d0:ae:76:a4:f8:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5D:61:26:60:9B:80:9A:AA:68:94:60:D7:35:72:08:22:77:21:3A
            X509v3 Authority Key Identifier:
                keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:68:6e:61:2a:46:4a:8c:0d:27:12:38:61:2a:af:b4:8c:72:
         33:c9:88:3a:82:f2:48:77:70:6f:5f:71:bf:7d:6f:e1:bc:d1:
         73:98:7d:7e:07:9f:09:83:bc:68:d8:71:a8:3a:24:d3:f5:48:
         90:7b:d3:26:bd:8a:68:83:c5:be:a7:06:04:1d:a3:18:6a:12:
         e5:5e:15:13:d4:17:7c:da:04:ba:09:ee:9b:c0:34:f6:4e:4a:
         bf:cb:c4:57:70:dd:eb:12:96:9f:60:61:62:29:ca:b1:4a:d0:
         3b:ba:e7:80:a3:b5:e9:a5:1b:49:6c:57:26:b0:9e:8b:69:c7:
         b3:e3:43:97:7f:67:40:d2:9d:4f:53:cb:45:4f:64:a9:68:16:
         b3:f7:f9:c2:0a:f1:aa:ab:f5:28:4d:9e:f1:09:ae:13:3c:87:
         a2:37:fd:2f:6b:a4:28:96:1c:1d:06:59:12:2b:ef:52:f1:2b:
         e4:65:6e:30:4c:25:98:96:33:c7:0d:d1:95:65:92:51:ff:a5:
         7e:f5:41:b6:be:b1:22:8d:5d:a2:58:e8:63:8d:aa:0e:81:a1:
         46:e6:1a:b1:88:57:6a:3a:48:ca:73:8c:dd:cb:df:46:ed:0c:
         9b:31:66:31:6a:71:86:d4:a9:89:3a:2f:3f:54:a2:40:35:63:
         5c:cf:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:02:27 2025 by rpki-client