Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          89INLYkL73WEgx8+o8gzfZUlSaWr9aJpXTAyFhyLHhw=
Subject key identifier:   9B:0C:CB:93:0B:CF:3F:25:6B:05:DB:BA:12:FB:5F:C8:AA:F5:6B:A9
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       019691BA3EC7584FA445E9108D3923B0C9BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          07DC
Signing time:             Fri 02 May 2025 16:00:24 +0000
Manifest this update:     Fri 02 May 2025 16:00:24 +0000
Manifest next update:     Sat 03 May 2025 16:00:24 +0000
Files and hashes:         1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: qhnMQbBBTzyaLRI+bnr8cnJX1fwFaz+TE24YopUvRA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:91:ba:3e:c7:58:4f:a4:45:e9:10:8d:39:23:b0:c9:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: May  2 16:00:24 2025 GMT
            Not After : May  3 16:00:24 2025 GMT
        Subject: CN=9b0ccb930bcf3f256b05dbba12fb5fc8aaf56ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:e4:16:f5:2e:7d:c3:3f:36:d1:0f:de:fe:
                    71:c8:db:f4:0c:bc:19:38:cb:af:af:f5:21:13:82:
                    db:ed:72:28:e7:34:64:dc:87:2a:7c:48:29:de:41:
                    cc:2d:96:b3:d1:c8:38:bc:31:bb:10:b1:e6:30:70:
                    05:6d:29:19:a1:7d:8c:a2:e1:95:c0:74:e1:98:dd:
                    54:87:b2:e6:f6:db:8c:85:c0:de:a9:16:e6:8b:b6:
                    5f:0e:93:ee:74:59:54:42:a9:9c:85:49:10:ed:ef:
                    69:b4:50:49:9e:08:9f:9e:71:74:0a:c2:bd:6d:c1:
                    b3:90:01:7a:fc:84:7b:f0:f1:8c:4e:fb:75:34:a4:
                    90:5d:c1:d7:0d:f9:f1:05:6d:3d:34:ae:5d:f0:5c:
                    ea:a9:a7:63:c5:31:d8:cb:4f:a5:70:b4:8c:8e:2d:
                    ee:c0:e4:11:f0:d6:7b:d5:0e:cb:cb:e2:1b:9a:5b:
                    48:d8:95:03:b1:54:a8:09:5e:a0:61:72:d6:61:54:
                    ba:7a:e8:8f:86:ea:7f:0d:fa:61:d9:c9:80:13:47:
                    cd:e0:76:a0:32:5a:43:58:4e:0d:1a:c3:12:ee:36:
                    ed:c6:84:ee:e9:34:7a:08:68:0c:78:b8:9c:4a:be:
                    de:9b:ee:67:4b:74:d3:7e:a3:fc:d4:a3:27:c9:c2:
                    3c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0C:CB:93:0B:CF:3F:25:6B:05:DB:BA:12:FB:5F:C8:AA:F5:6B:A9
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:2e:1a:d6:48:1f:ed:4f:7a:a5:c5:fd:4b:85:3d:41:5b:e3:
         b1:1e:eb:0e:30:5d:7f:dc:9b:be:fd:f3:19:0b:6e:25:fd:5a:
         dc:cf:d4:07:d0:d1:f8:f0:29:c1:11:37:de:9b:73:57:4a:19:
         e0:e1:87:18:0c:09:37:fb:5d:8e:97:fe:00:ab:8d:13:f5:3f:
         8b:4b:14:40:19:73:83:33:7e:57:2f:63:8d:91:9a:70:91:14:
         45:fc:9b:02:e1:ef:d5:a1:71:75:0b:bf:11:26:42:5f:28:b4:
         0b:f3:c4:ab:2c:b7:37:9e:99:23:80:84:45:a4:49:7b:48:97:
         d4:65:e0:d9:da:1a:ac:c8:b1:08:6e:0e:07:8d:74:96:ed:d2:
         23:e7:81:7d:35:33:cd:cb:85:36:78:26:8f:f7:3a:65:cb:e1:
         6b:d6:ce:94:2f:69:03:d8:b7:46:d6:7b:7c:39:fd:d5:06:62:
         a3:20:f6:58:02:a5:cb:ad:69:e3:4d:6b:ca:9c:56:e9:bc:5d:
         c9:de:ac:94:d1:3a:31:f7:65:47:f1:5a:44:32:4e:e2:cb:ec:
         85:d5:c7:e9:58:81:7f:7d:27:52:12:8e:5d:9a:fc:ae:57:94:
         f0:d9:64:9b:fc:31:26:7e:d4:3a:c9:e7:b8:58:b9:f5:77:27:
         38:d2:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:15:17 2025 by rpki-client