Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          hrUsjVtb5GUUMqWcnp57PENtoh4YkeJtGGk/XtgmmzE=
Subject key identifier:   15:E8:13:A1:72:B5:D7:45:11:2F:A6:A3:A1:E0:99:7B:75:02:C0:85
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       0197B745B7AE51705749774B6FD104EF1BE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          15BA
Signing time:             Sat 28 Jun 2025 16:01:28 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:28 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:28 +0000
Files and hashes:         1: exRb-rHcA90oTXk_rLfDmE2va0Q.roa (hash: o03D8YYP7kHIc/dGF0EKjd2OHviH18SfZbezk98xob4=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: o5taAfGZ3sKRH/86NNcexPhK3FFYJPMK7aI2AnSMeDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:b7:ae:51:70:57:49:77:4b:6f:d1:04:ef:1b:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Jun 28 16:01:28 2025 GMT
            Not After : Jun 29 16:01:28 2025 GMT
        Subject: CN=15e813a172b5d745112fa6a3a1e0997b7502c085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:16:df:a5:b6:de:2f:17:d6:a5:ca:a0:40:
                    25:bd:a0:2b:b8:44:ba:e4:95:43:35:84:b8:26:28:
                    8c:50:25:11:f2:30:40:90:23:9b:76:10:dc:ef:47:
                    7f:fb:42:c1:3a:5a:8d:48:f5:27:d5:39:34:c9:4e:
                    3c:a7:d2:89:aa:0b:10:c7:ed:b9:5e:c3:21:9e:27:
                    79:9e:ae:19:81:a3:98:cf:a4:eb:e6:fb:47:ad:1b:
                    1b:11:09:79:6b:af:dd:28:a9:88:13:f4:92:05:38:
                    e2:1a:01:6d:d0:2f:a8:ee:b7:5d:7e:79:6d:7d:f8:
                    05:88:73:b8:b7:9f:2d:4c:d7:78:46:c5:eb:59:f4:
                    03:1d:4a:ac:68:33:77:6f:99:82:84:89:17:59:70:
                    89:46:de:14:b2:0e:e9:c8:91:e4:2c:98:cf:ec:aa:
                    99:83:bc:92:ab:e4:c5:dd:23:b0:4b:1b:ec:7b:e1:
                    71:cb:9c:56:2c:f0:ed:f1:33:86:61:21:5d:7e:f7:
                    84:bd:db:20:43:f0:aa:ea:84:48:44:e7:a8:8d:1b:
                    1a:5d:c3:14:e5:51:b2:21:50:5e:21:8e:23:de:51:
                    b7:e7:c9:2c:81:70:81:5b:77:ce:84:3d:fc:19:39:
                    11:a9:cb:da:2a:58:36:1c:53:3c:48:0e:51:55:30:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E8:13:A1:72:B5:D7:45:11:2F:A6:A3:A1:E0:99:7B:75:02:C0:85
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:19:6f:b0:5d:b5:64:b1:47:bd:6c:cc:74:ad:11:5b:96:1b:
         b5:1a:7a:a8:01:d6:90:8d:13:bf:df:bd:02:61:84:10:7b:0f:
         17:fa:f0:a7:24:e1:65:2f:b1:cb:71:57:df:d1:62:e3:db:df:
         2e:56:c2:bb:b5:a1:a0:04:f0:76:0d:04:7c:a2:ef:11:05:42:
         2e:ba:27:1c:99:3e:51:3e:4d:43:58:b1:92:b6:71:ac:66:ab:
         87:6b:64:00:1d:72:af:e2:d3:5e:be:c0:2e:a6:42:51:c6:2f:
         ad:b2:31:3c:47:a1:51:e4:90:28:1a:89:87:f1:a4:ce:61:f5:
         84:f6:90:02:e5:a1:38:a9:b0:5d:c1:af:73:1e:fa:1f:43:30:
         cb:10:cd:b2:61:d0:b3:0b:0b:6e:7c:5e:18:0d:7b:3e:92:69:
         1b:5d:f7:fd:84:54:5b:9d:87:4c:f1:26:5b:36:68:9b:81:05:
         11:2a:f3:8b:63:30:c2:b3:e3:0d:54:19:61:42:12:d8:68:5b:
         34:76:68:a6:a3:a6:85:3d:ec:e1:41:f0:53:71:73:20:65:de:
         3b:66:1a:ec:97:28:21:07:68:2a:4d:eb:d2:5f:db:ca:be:b1:
         44:1a:4c:92:62:c0:d7:0f:81:d6:9a:87:55:e1:42:24:d0:68:
         b7:69:7a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:14 2025 by rpki-client