Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File:                     bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier:          1638C384nnrmQTTWTnrer6nsxajgGKV2XZj/Q+DTEsM=
Subject key identifier:   80:F5:11:CA:AF:77:09:CD:12:C7:3A:B4:D2:05:8A:86:44:8D:77:EC
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer:       /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial:       0197CA956A605811408B3E89CD497B3F721E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number:          15BF
Signing time:             Wed 02 Jul 2025 10:01:19 +0000
Manifest this update:     Wed 02 Jul 2025 10:01:19 +0000
Manifest next update:     Thu 03 Jul 2025 10:01:19 +0000
Files and hashes:         1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
                          2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: d1UyW2uur5a1uN1Aqjp3sPe3DqVdk7yJdjjpryCsLYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:95:6a:60:58:11:40:8b:3e:89:cd:49:7b:3f:72:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
        Validity
            Not Before: Jul  2 10:01:19 2025 GMT
            Not After : Jul  3 10:01:19 2025 GMT
        Subject: CN=80f511caaf7709cd12c73ab4d2058a86448d77ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:67:d4:ef:07:0f:49:1f:5d:90:32:e9:81:
                    ee:3c:86:29:ae:99:44:34:4f:4c:26:2d:8f:8e:89:
                    13:e9:ed:05:53:2a:14:1a:13:d3:37:dd:21:38:c3:
                    da:c8:9a:ac:3c:63:d0:85:11:96:0b:d6:bc:96:ff:
                    53:8c:fe:c7:3c:c3:5e:89:16:b0:ab:46:72:cd:46:
                    cd:9e:24:a4:19:ba:3d:62:16:16:59:98:ac:4c:da:
                    b7:cd:eb:c1:04:8c:2c:86:a2:7d:ca:64:14:3c:9a:
                    41:2f:e2:a4:26:0c:89:15:36:dd:1e:0c:82:1c:e4:
                    f5:46:10:7e:ab:6c:9d:32:7c:30:bd:78:b5:84:e1:
                    c6:76:1a:30:95:1c:52:9b:24:dc:d8:8d:ee:5b:41:
                    8e:06:ae:14:75:bc:2a:0b:3d:f5:68:3d:80:0b:0c:
                    6a:bc:99:b2:aa:c5:2c:c7:cd:11:fb:be:bc:12:35:
                    5a:bb:82:38:ca:35:35:3f:a1:41:d2:99:d6:8a:d7:
                    07:9f:20:1a:2b:9d:f3:56:14:15:c7:85:7a:19:48:
                    04:65:32:f4:61:b5:02:11:77:29:24:a7:c9:ec:70:
                    c1:bb:5c:e7:8d:47:08:c7:dc:aa:cb:b5:32:41:00:
                    d7:f9:fa:6d:7b:ab:51:16:ef:04:ff:84:34:84:a2:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F5:11:CA:AF:77:09:CD:12:C7:3A:B4:D2:05:8A:86:44:8D:77:EC
            X509v3 Authority Key Identifier:
                keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:de:56:c6:ac:b7:23:65:83:83:93:91:73:e1:14:6e:6d:41:
         ee:f8:4b:dc:f3:9d:39:5f:2d:41:b2:dc:5b:58:0f:a2:8c:da:
         d4:1f:4b:85:71:ea:92:e9:3f:1e:a5:78:13:5b:9e:47:7d:91:
         48:82:4f:17:a5:8f:67:f2:ef:81:df:f8:13:b7:6f:f0:ca:44:
         2e:bf:2b:34:49:37:57:c4:d6:34:82:75:ee:cc:89:0a:60:88:
         89:4b:4c:4a:1a:ab:77:18:4c:2b:e3:ef:80:6d:e6:98:93:99:
         71:0b:09:b7:90:10:cf:08:f8:ba:6a:8d:05:24:3a:29:1c:7f:
         62:d9:88:fc:12:21:c9:54:f7:da:57:40:85:87:9e:ac:29:b5:
         d2:c5:b2:f0:30:33:cd:82:23:7f:a4:c0:e7:23:14:e4:8b:6f:
         cc:74:de:1f:79:88:bd:e4:3f:ba:65:ac:5d:9b:66:29:c3:dc:
         fb:35:f4:b4:39:54:f1:2e:3a:fd:f0:71:5b:07:18:f3:ef:46:
         e6:e9:b8:b5:e4:b6:1f:18:91:59:07:82:eb:81:2b:b4:21:6d:
         bd:6c:3b:52:e7:85:8b:84:26:7a:87:ac:5f:b0:25:89:74:ef:
         33:5e:f5:44:3b:9e:4b:f7:10:f6:a3:03:7f:5a:0e:84:8f:16:
         7f:de:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 12:18:35 2025 by rpki-client