Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File:                     vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier:          bZAk6HVHb5y47D9LY5oSdXUeSHlW0Cg+psniLMQvM/I=
Subject key identifier:   83:7A:EF:05:D9:0C:64:E6:7D:06:3F:EF:F5:87:53:31:69:08:1B:A3
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer:       /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial:       01967EA1C9D9287EFCE78F357B201761FA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number:          1511
Signing time:             Mon 28 Apr 2025 23:00:54 +0000
Manifest this update:     Mon 28 Apr 2025 23:00:54 +0000
Manifest next update:     Tue 29 Apr 2025 23:00:54 +0000
Files and hashes:         1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: cPnoGUGIbp8jbtJUGQpLPaMboGWJhlBDeUPO3KlzEFo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:a1:c9:d9:28:7e:fc:e7:8f:35:7b:20:17:61:fa:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
        Validity
            Not Before: Apr 28 23:00:54 2025 GMT
            Not After : Apr 29 23:00:54 2025 GMT
        Subject: CN=837aef05d90c64e67d063feff587533169081ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c2:9a:f2:1d:ec:9b:78:2e:d0:f5:3e:71:ed:
                    42:6c:de:7c:8a:76:aa:15:bb:60:a3:1f:ad:51:e3:
                    9b:43:5f:b4:a7:fd:3e:89:d9:12:ce:83:df:12:2c:
                    86:31:90:07:76:fc:74:a5:3f:6b:de:31:19:a7:02:
                    57:5b:34:bd:34:d1:a9:59:f4:48:5c:44:77:33:1e:
                    7d:33:d4:b4:2e:91:e4:9e:73:84:e8:a8:4d:82:37:
                    0d:50:b4:cc:6d:04:78:7c:71:ac:1d:ff:fb:2e:01:
                    a9:4f:4b:84:b7:50:98:dd:43:63:1d:f1:0a:63:6a:
                    1c:43:a4:85:08:e3:40:f6:1e:10:db:62:8c:89:16:
                    50:3a:ec:d1:f6:45:7e:32:a4:95:8c:01:0b:59:48:
                    19:3a:f5:6a:5d:71:60:33:34:e2:57:83:e7:24:52:
                    50:95:6d:41:b8:d3:9d:31:0e:53:35:3a:ce:f1:5a:
                    e1:03:73:f3:08:ba:12:fe:cd:1b:51:b4:97:c2:5b:
                    6d:1b:4f:47:d1:4e:0c:d0:c2:a5:e9:7c:73:5c:44:
                    ea:34:8c:b5:7b:8e:a5:89:d7:f5:6f:7b:e8:f0:10:
                    a5:6e:71:64:bc:6c:e3:db:01:f6:59:73:e5:28:34:
                    4c:79:4b:4e:bb:22:fc:5c:73:f4:3c:0a:80:2b:43:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7A:EF:05:D9:0C:64:E6:7D:06:3F:EF:F5:87:53:31:69:08:1B:A3
            X509v3 Authority Key Identifier:
                keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:e6:cb:db:79:68:70:6e:8f:ff:31:25:a6:91:87:bb:c4:
         c5:9e:1f:a6:70:2b:f1:28:26:da:69:20:63:aa:3e:b6:a8:ad:
         df:02:55:57:11:2f:ee:e1:b0:8e:6b:00:3a:f4:fb:0f:77:31:
         f4:ba:fe:f2:d6:a8:5a:89:ea:6e:fd:e0:a9:32:c7:58:87:31:
         9b:e5:8e:73:7d:b2:b3:61:6e:24:d5:f1:23:10:8f:c5:f7:ee:
         04:ae:3e:e0:17:ab:82:4d:75:54:62:77:38:d0:78:12:0b:7a:
         c3:48:71:12:62:d1:38:35:c3:2f:4b:fb:75:49:f6:94:3f:60:
         a4:20:15:bb:1f:ec:5d:5b:45:5d:81:29:90:eb:8d:2b:ff:e4:
         9e:ea:ef:f1:80:77:6d:f5:48:5d:5b:29:25:df:77:be:e8:2b:
         0d:7c:d0:c6:75:21:3a:28:78:95:26:e4:24:3c:f6:67:06:e2:
         91:da:f0:26:8c:6d:e6:d0:b1:99:6f:9c:1a:4c:73:55:6d:0a:
         0b:0e:17:7d:5f:43:02:60:7d:56:3f:a7:82:74:66:eb:bb:f4:
         dc:21:66:a0:dd:14:19:72:82:17:e4:be:56:3a:29:eb:3b:bc:
         15:2e:fc:65:f5:a1:8e:9a:50:ee:b9:d8:92:4a:a8:1a:f1:63:
         87:1f:0b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:49:50 2025 by rpki-client