Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          Uy+aVkX4ow/kltCJKag5nuv9mMFAQfUuxogGDUGXwpQ=
Subject key identifier:   B3:4B:A7:CA:74:8D:53:78:EB:CC:44:5F:47:A6:67:1A:AA:0B:DE:53
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       0197B6A0D9248C0A2300B82E0CEFFB2B14FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1146
Signing time:             Sat 28 Jun 2025 13:01:23 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:23 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:23 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: EBs9qN9Kc1Vi4FoDfaSA33S+vzsbVC/sS6jAs9q+kJE=)
                          2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:d9:24:8c:0a:23:00:b8:2e:0c:ef:fb:2b:14:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Jun 28 13:01:23 2025 GMT
            Not After : Jun 29 13:01:23 2025 GMT
        Subject: CN=b34ba7ca748d5378ebcc445f47a6671aaa0bde53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:02:de:f6:93:5c:87:ea:a3:ae:7b:59:4b:ad:
                    68:08:69:fa:9d:34:5a:fa:b2:30:4e:2c:15:ae:5f:
                    f4:bc:9d:48:45:e9:70:57:eb:ea:15:f1:9b:1c:81:
                    c6:4d:97:78:29:2d:98:04:6e:69:32:e5:ce:d0:b2:
                    ba:03:9e:e1:e3:f6:78:1b:2e:ed:18:28:e1:42:f1:
                    70:8b:ea:36:f9:7a:c4:d7:1a:46:d0:8d:67:f9:b7:
                    02:48:b2:4b:19:7e:85:6b:0b:27:ed:1a:f6:4c:a7:
                    b7:d5:ba:7a:c3:c6:af:9e:3a:00:42:4a:48:f9:80:
                    dc:5a:ce:92:90:83:24:fc:5c:50:d1:57:0f:cd:d4:
                    e9:68:35:0f:94:71:62:c9:90:18:7a:82:fa:aa:aa:
                    2a:f2:f3:4b:44:6e:04:1e:c5:94:08:8b:96:71:aa:
                    0c:8c:19:4a:92:12:87:a2:1c:c5:fa:87:8a:f4:ea:
                    5d:b8:bc:6c:28:41:3c:9f:2b:0c:e7:a1:f0:c0:30:
                    c0:2f:05:6b:fe:11:03:f4:e1:ef:42:c2:68:d9:d9:
                    f1:9b:4f:75:f7:6f:bb:84:fd:d4:f0:43:ba:69:5b:
                    ad:2f:59:13:cf:da:d2:99:7e:f2:da:ae:96:f2:5d:
                    d2:a7:64:82:7f:36:da:58:bd:a7:4b:22:27:d0:f5:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:A7:CA:74:8D:53:78:EB:CC:44:5F:47:A6:67:1A:AA:0B:DE:53
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:60:ed:0c:af:5a:d6:93:a5:2e:36:a5:38:ac:4c:eb:b0:9f:
         73:b3:70:78:c3:87:10:e4:f1:8d:b7:22:cb:68:2b:15:45:d8:
         b0:14:1f:a4:ee:8d:2b:9f:af:9a:5a:dd:56:87:54:55:f0:32:
         f1:f2:38:bd:b7:bd:b8:e9:b2:f7:88:60:d4:c6:07:e7:83:d3:
         59:e4:e2:05:1d:8a:8b:73:02:9e:bb:7c:97:b9:af:70:3c:ff:
         d2:35:ba:b4:81:2d:62:9d:aa:e7:71:6a:c9:4b:80:6a:ef:2b:
         6b:c4:83:6c:83:e5:38:28:82:e6:62:d6:02:02:24:17:64:71:
         74:fa:21:ad:70:f3:7e:06:30:6e:f3:72:47:d1:7c:95:99:2e:
         09:b6:ee:b8:16:70:4c:8d:e1:d5:b8:29:11:83:ee:46:45:51:
         f2:96:53:3a:ba:fe:1d:11:8e:81:a8:2a:93:e2:5c:8f:60:7c:
         15:9e:4d:0c:2b:a1:35:68:f7:f9:8f:54:84:19:4e:6b:e8:dc:
         0d:68:35:35:39:fc:81:5c:02:09:51:48:3c:4e:13:61:e2:a2:
         31:aa:6b:45:d7:03:02:7b:3c:db:2b:14:81:7a:83:83:dc:4c:
         f9:32:da:5b:53:f4:22:11:e8:01:e7:78:e4:8c:1c:11:25:fe:
         96:0e:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client