Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File:                     bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier:          77hSUNtjFCN2h325FoMhWksHbm/ZH7Hr81VGPIYGd4w=
Subject key identifier:   A3:4C:6C:14:47:DF:10:88:84:8C:FD:6C:6C:87:D7:6F:F0:89:9C:0C
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer:       /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial:       0197C614CDC4ABF09049DA9566EF1B74270B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number:          073E
Signing time:             Tue 01 Jul 2025 13:02:21 +0000
Manifest this update:     Tue 01 Jul 2025 13:02:21 +0000
Manifest next update:     Wed 02 Jul 2025 13:02:21 +0000
Files and hashes:         1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: 2n0LzdOFa+pgY0RjTNkkLpyptu3IvB7800Ll7fv+rhQ=)
                          2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 13:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:14:cd:c4:ab:f0:90:49:da:95:66:ef:1b:74:27:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
        Validity
            Not Before: Jul  1 13:02:21 2025 GMT
            Not After : Jul  2 13:02:21 2025 GMT
        Subject: CN=a34c6c1447df1088848cfd6c6c87d76ff0899c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:85:92:03:6c:5f:8d:19:da:fd:63:c1:98:
                    18:26:dc:7c:f8:02:31:90:d0:c2:73:99:7d:37:06:
                    67:48:2c:ef:4b:71:3e:29:ae:ab:e9:6c:40:0b:5a:
                    fa:35:63:84:9f:b6:51:c1:3b:bd:18:82:b8:8b:91:
                    1e:5c:31:ae:fe:18:4c:4e:ba:49:66:16:2a:ed:03:
                    27:fd:71:cb:4b:a4:16:82:3a:57:2f:60:90:73:9b:
                    18:60:88:e8:57:96:f2:50:da:04:e8:f9:e1:80:0f:
                    a8:2c:71:fb:8e:5f:b4:2b:c2:0e:22:9f:63:a6:41:
                    7c:f4:98:2a:8a:1a:52:7a:84:37:3d:53:1e:64:4f:
                    88:29:85:e4:9e:77:92:91:10:40:00:44:fd:05:26:
                    59:4d:c8:6e:8a:1b:54:89:d8:6c:38:20:1e:6d:3a:
                    37:d8:16:98:fe:9e:53:86:a4:78:b3:b7:67:84:aa:
                    f7:50:fb:00:cb:f8:6f:bc:e4:1e:60:ef:8b:fd:77:
                    5a:06:e9:e7:c9:9a:75:55:12:0e:07:e9:52:3c:60:
                    38:36:1e:74:e4:03:ef:b1:06:20:85:ae:97:1a:e0:
                    d8:29:c3:15:12:ad:01:6e:84:c8:71:56:07:4c:cd:
                    1f:78:84:6b:39:04:e6:23:25:4a:df:56:61:cd:b6:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4C:6C:14:47:DF:10:88:84:8C:FD:6C:6C:87:D7:6F:F0:89:9C:0C
            X509v3 Authority Key Identifier:
                keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:98:f9:54:81:2c:8a:94:62:9c:b3:e6:2e:ab:1b:a3:e2:
         ea:89:ec:49:b5:4e:e2:cf:b6:45:ed:e4:d5:90:92:76:db:60:
         56:5d:22:9f:c6:9e:41:cc:72:cf:95:99:8a:0f:29:b0:7e:c7:
         30:8d:21:27:4e:d7:1d:22:7d:f4:a4:18:4d:d3:18:9a:64:d6:
         35:ae:7a:e5:0c:1a:61:91:77:85:6b:7e:51:27:d0:66:6b:ad:
         b2:36:43:78:cd:d9:76:df:8f:75:23:2a:b5:2c:0f:5f:29:a4:
         13:07:fe:76:02:79:1d:c4:3f:bb:94:39:3d:0e:7a:64:c7:1e:
         fb:6d:4f:3f:d7:f3:a4:a3:e2:23:17:40:28:1f:bb:b1:02:b6:
         05:74:6d:c1:d7:61:48:35:3c:64:34:b7:5f:4e:06:34:b4:6a:
         e9:e1:5a:eb:7f:65:d1:8b:09:f6:dd:b3:da:05:31:d9:bc:ef:
         3b:30:8a:0e:ac:62:84:ac:9d:a2:49:bb:d7:43:b9:6d:46:ac:
         10:76:4c:d6:e1:8d:c9:0c:cf:a6:d2:3a:ab:a9:b3:8d:cc:66:
         52:91:b7:4f:07:b6:e9:b0:20:2c:3e:03:48:68:be:8d:0e:28:
         86:05:75:72:8a:b1:f1:3d:1c:8c:2b:d0:ef:a6:f9:bf:e8:d3:
         28:9f:f8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:21:31 2025 by rpki-client