Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
File:                     BU1P54D-RTMHgN627DhMuUk_LfI.mft (raw, json)
Hash identifier:          wEErrkGQVfsrj6EqE+MbjY3JXqkpHhJn8uJM9j2RfgA=
Subject key identifier:   FB:8F:B6:A6:38:90:FE:8E:36:C4:71:92:89:95:3F:DD:05:86:39:2D
Authority key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Certificate issuer:       /CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Certificate serial:       0197B5FC34239D30E6C04B8D6FB51FC836F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
Manifest number:          11E3
Signing time:             Sat 28 Jun 2025 10:01:33 +0000
Manifest this update:     Sat 28 Jun 2025 10:01:33 +0000
Manifest next update:     Sun 29 Jun 2025 10:01:33 +0000
Files and hashes:         1: BU1P54D-RTMHgN627DhMuUk_LfI.crl (hash: eC3nvKrRw65lAH5IxJwfVC/nmQ0sYy7tg5raODX4hMw=)
                          2: ka7B1o22nQ899fZrHQAwPaISuMc.roa (hash: YtdRj2DUEOEWo4MtM001iw/fwE9TLkR0g86JFagGliA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b5:fc:34:23:9d:30:e6:c0:4b:8d:6f:b5:1f:c8:36:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
        Validity
            Not Before: Jun 28 10:01:33 2025 GMT
            Not After : Jun 29 10:01:33 2025 GMT
        Subject: CN=fb8fb6a63890fe8e36c4719289953fdd0586392d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:23:0c:e7:09:9e:ed:8e:90:3c:16:7e:a7:
                    5f:d5:55:b3:14:9e:16:67:22:95:63:27:ea:0e:36:
                    f8:45:10:6c:c8:a6:12:b4:02:3e:71:20:cb:50:d3:
                    08:fa:77:10:55:30:40:8c:88:24:9c:dc:c6:ec:d2:
                    35:e8:90:79:3f:68:17:da:5d:da:0c:32:13:36:a6:
                    ef:50:fe:d9:fc:d0:e9:e5:0c:24:e0:5e:f6:33:e1:
                    70:ab:5e:5b:de:c8:ba:f1:43:0e:6e:a6:5c:fa:e5:
                    a3:b3:67:87:0b:58:7d:00:fe:b0:1e:64:0a:99:1f:
                    37:cf:78:65:e2:28:ff:9f:53:2e:ac:eb:a9:a2:fb:
                    ea:c0:fc:be:e8:29:8b:6f:eb:3d:61:e7:07:41:12:
                    9e:45:6e:5d:d4:35:c1:db:75:78:9c:86:5b:41:df:
                    14:86:ba:a7:bd:0a:59:95:05:41:4c:db:27:10:e8:
                    40:5c:a4:78:6b:35:79:ac:7e:73:70:1f:05:f0:3a:
                    06:7f:ad:ac:a5:e2:e1:87:c8:fb:66:c4:08:18:cc:
                    07:69:c5:05:be:b0:24:a0:68:2f:4c:e1:d6:55:ce:
                    b7:0d:13:3d:2e:c7:a3:57:d9:49:2c:30:55:65:3d:
                    13:94:70:82:eb:2f:8e:7e:1d:b1:18:cf:9f:b5:ec:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8F:B6:A6:38:90:FE:8E:36:C4:71:92:89:95:3F:DD:05:86:39:2D
            X509v3 Authority Key Identifier:
                keyid:05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:43:5e:d0:0e:c7:13:97:c4:fc:0f:94:31:70:0e:94:39:25:
         a8:b0:bf:31:e3:b9:c3:dd:ad:32:99:36:28:f0:ea:9b:19:0b:
         8a:49:5b:a6:47:01:7a:43:00:7a:c0:12:19:80:69:8d:bb:03:
         e0:cb:aa:e0:21:4a:60:97:8b:1d:2b:65:74:49:7b:9d:2e:8a:
         bb:64:99:ee:8f:25:1d:ad:83:8c:b0:a0:69:bc:ec:58:2c:de:
         41:8d:41:fc:2c:ca:e4:6f:8c:4a:d5:64:5c:05:94:24:04:d8:
         68:92:28:e7:c1:b2:b9:19:71:ff:14:fb:8c:1c:88:5d:b3:e0:
         1b:98:4c:1d:76:29:81:bd:2a:6a:87:69:4d:8c:8d:54:8c:ee:
         4a:00:64:e5:da:3e:cd:29:c2:1d:d2:79:bd:3b:88:0b:19:fc:
         97:6d:46:71:bb:c0:66:1e:67:01:eb:29:0b:61:ca:f4:71:2f:
         a9:06:b1:02:c5:8b:1d:89:9e:b8:68:2e:71:00:67:d3:42:72:
         41:d7:e1:cb:3c:56:9e:a4:ff:2c:0a:f7:cf:f1:97:fd:84:2d:
         46:85:f8:d8:31:60:14:03:30:db:a0:8a:85:e5:11:9d:7c:a4:
         29:b8:c5:ba:97:02:02:3c:06:0f:c8:bf:1a:df:2f:b7:f8:40:
         2c:44:b7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:43:54 2025 by rpki-client