Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File:                     BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier:          9FDvSivJkd89+Ya2iNMDo4Fu4kY16Jj7G0i7f01G0VU=
Subject key identifier:   5B:FF:9D:69:78:72:EE:38:B8:CB:9B:0A:AC:47:0D:00:18:FB:7C:67
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer:       /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial:       0197B88F75AB7C245F500852E2BB67C3C38D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number:          08E8
Signing time:             Sat 28 Jun 2025 22:01:38 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:38 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:38 +0000
Files and hashes:         1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: pXtGZMI4XeMKEd941WZ+IDD4QIxNtKORurG1Pj47gvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 22:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:75:ab:7c:24:5f:50:08:52:e2:bb:67:c3:c3:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
        Validity
            Not Before: Jun 28 22:01:38 2025 GMT
            Not After : Jun 29 22:01:38 2025 GMT
        Subject: CN=5bff9d697872ee38b8cb9b0aac470d0018fb7c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:49:69:21:a9:b9:e5:7d:5c:f0:c8:b2:ee:4a:
                    64:ee:99:49:23:03:d5:55:fd:50:e4:f9:6c:4f:bb:
                    67:48:42:3e:6d:41:30:2d:07:68:11:51:7b:2a:37:
                    9f:40:c3:49:d2:73:f0:13:0f:c3:27:d9:3e:9f:da:
                    69:18:88:4b:61:41:d1:ea:83:06:de:98:0f:61:27:
                    00:5b:e7:82:1b:6c:46:a9:d3:13:9d:ce:5f:35:1a:
                    ef:46:48:33:03:41:d3:05:fb:af:c0:f9:c0:ef:d1:
                    7f:2a:33:f7:83:35:d2:66:c0:de:39:4a:d8:63:3a:
                    ec:2a:aa:c6:3a:c8:2c:c8:c0:1b:e3:2a:80:88:b0:
                    7f:b2:d6:36:9e:5d:a3:b5:bf:9d:1d:22:38:8e:ad:
                    fc:70:bd:4c:1d:b7:71:db:d6:72:c9:5c:51:ab:a7:
                    af:7e:93:69:d2:f3:a6:54:08:1b:7a:f2:a1:6d:ff:
                    27:de:31:8b:63:a9:9a:86:32:04:8b:6a:41:58:9c:
                    2d:b1:11:b0:ba:f2:43:d1:4f:58:81:d1:84:d9:05:
                    26:09:ba:17:d3:6b:5e:e4:bf:be:34:8c:5f:76:64:
                    f8:23:b1:fa:fb:dc:47:a2:82:9b:a2:88:b9:1a:74:
                    1f:68:89:92:74:d3:9e:4a:8b:9f:fb:44:8c:2f:b2:
                    62:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:9D:69:78:72:EE:38:B8:CB:9B:0A:AC:47:0D:00:18:FB:7C:67
            X509v3 Authority Key Identifier:
                keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:6e:24:b7:15:5a:aa:07:2f:d3:2d:0e:e5:1d:6e:7d:85:
         8b:e2:9a:bc:34:ad:27:09:67:3a:82:b4:8a:8d:f3:2d:70:47:
         12:f6:d3:cb:ee:4d:f5:54:9f:e8:9c:27:c3:f7:f8:0d:30:f9:
         4d:33:c7:c3:b4:40:cd:85:8c:c4:0e:2f:89:10:6a:92:62:95:
         fa:93:15:4c:ba:ec:b2:65:73:a4:69:fc:ea:6f:a3:c3:78:66:
         8b:64:7f:88:15:19:de:3a:cd:70:18:75:0f:9f:63:8e:3a:bf:
         a5:df:35:ef:8c:0e:69:f4:bb:db:b1:44:da:0a:ad:f3:31:87:
         ac:f9:69:df:18:5b:de:f8:2a:18:f6:34:ad:92:06:e8:a0:49:
         a2:7c:8a:1b:0d:28:77:61:1d:a8:89:95:fd:cd:7d:e6:c3:2c:
         1d:15:d4:74:fc:b5:b2:e8:1e:25:bb:b7:e7:51:08:ab:4d:66:
         2f:6c:8e:dd:d7:eb:1f:be:3b:e2:5d:d8:1a:f9:02:b4:55:1f:
         48:40:75:a2:f3:7d:66:66:19:7f:d6:86:85:25:b0:35:ea:4d:
         fc:be:58:51:8a:73:49:02:49:14:f5:09:42:17:d2:87:16:05:
         27:ba:0b:bf:2b:78:e5:a2:ff:16:e2:6c:02:cc:b5:8e:4e:7d:
         f3:13:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:23 2025 by rpki-client