Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          lxa7Rb7IwHq1urSA+PkIdKph67W4ZELVeIkBAjxxzxE=
Subject key identifier:   25:A1:B8:EB:36:E5:6B:01:21:A1:70:D4:88:B9:EB:6F:31:70:44:34
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       0196A0BFD00455908F5E3A7173A06803D116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          0968
Signing time:             Mon 05 May 2025 14:00:47 +0000
Manifest this update:     Mon 05 May 2025 14:00:47 +0000
Manifest next update:     Tue 06 May 2025 14:00:47 +0000
Files and hashes:         1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: S31Hi1W9cfrJ8Sr+G0+VMyQiQT39eJdONfO/i22whoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:bf:d0:04:55:90:8f:5e:3a:71:73:a0:68:03:d1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: May  5 14:00:47 2025 GMT
            Not After : May  6 14:00:47 2025 GMT
        Subject: CN=25a1b8eb36e56b0121a170d488b9eb6f31704434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8d:a5:84:0e:c8:b6:1a:16:a2:c9:46:ad:68:
                    17:11:d8:2c:9c:ef:60:43:c4:99:99:ac:6d:d8:16:
                    ca:59:66:70:62:0a:2b:e4:64:ab:60:60:08:c4:e7:
                    b4:14:a7:7c:bf:46:07:5c:e5:35:47:9a:1d:a6:c3:
                    ec:cf:f3:2b:c7:a4:bd:88:08:63:30:ce:ac:16:86:
                    71:99:2c:c6:c1:ae:2b:85:cb:7b:fd:ea:e7:f5:3f:
                    d7:82:38:9a:9b:00:80:9a:53:f3:4b:33:57:17:e2:
                    0c:fd:40:ee:2c:0b:35:1e:ea:db:a5:84:a3:0a:fb:
                    da:96:1e:d4:c8:35:24:be:2f:4d:0a:31:94:9f:0a:
                    31:75:2b:b6:a0:3f:83:6b:f7:4a:5f:01:8c:5e:08:
                    18:08:e7:16:4e:e6:2c:6e:ce:63:6e:84:a3:c7:56:
                    0d:0b:6b:57:23:50:7a:57:7e:ab:bb:a1:47:33:2f:
                    31:2d:a2:80:d8:34:67:9d:3c:dd:04:ee:32:51:04:
                    03:ee:75:dc:50:1b:a2:9c:d4:9f:f6:42:96:ca:a8:
                    ae:c6:af:58:26:9d:89:eb:6e:86:d6:bf:78:a0:4b:
                    f4:4c:7a:e6:3f:db:48:a5:95:0c:b1:c9:3b:e0:77:
                    ce:2a:b8:89:ea:c1:39:8d:ec:5b:54:c6:63:7c:dc:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:B8:EB:36:E5:6B:01:21:A1:70:D4:88:B9:EB:6F:31:70:44:34
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:59:4b:0c:e8:c2:0b:d0:17:cd:91:7f:dd:30:30:19:46:
         c5:07:45:c4:c9:f6:28:15:4b:96:02:e0:ea:8d:97:a3:6c:9b:
         54:94:bf:d3:a1:a5:c7:bb:ac:b6:a6:72:46:b9:c3:e3:95:ad:
         1d:7e:a4:76:4c:25:74:da:2f:36:a7:d8:3b:35:c1:fa:5b:2e:
         dc:4d:99:a7:89:44:26:ef:90:34:9f:fc:b7:5c:41:c3:5c:29:
         98:d4:0d:f5:e2:dc:9e:8b:15:76:6c:1b:4a:63:d1:df:69:03:
         25:9c:b6:8d:8e:1e:08:a7:02:69:01:7f:94:65:e8:5d:88:93:
         e7:ba:a1:f7:8d:91:9a:fc:bc:f4:d3:89:f0:8e:2b:ff:15:44:
         2c:0a:8c:31:0a:eb:d1:4f:a6:0f:f7:fb:57:21:a8:be:32:e4:
         16:6f:ba:47:2a:d4:de:41:48:c6:e0:58:fb:cb:7f:81:22:4d:
         84:f4:2f:49:0d:c3:00:4a:49:d6:bb:cc:ad:bd:88:c0:7a:0f:
         39:6f:d0:10:7e:e0:9a:e2:d0:c5:e8:84:26:c7:05:4d:cb:4c:
         93:af:51:48:a3:40:c1:77:fb:e0:3a:dd:b1:8e:0d:4f:88:5f:
         02:0b:13:46:36:c3:78:5a:16:d8:5b:f8:d4:1d:79:df:49:0d:
         cd:0c:43:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:51:37 2025 by rpki-client