Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File:                     bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier:          IGK6vd5VNpHJVLG8jxgW0L1ResCEwsYkEKmMvsg/f8o=
Subject key identifier:   1B:CB:D0:CE:2A:C2:0E:25:3F:8F:3D:22:6F:D1:55:60:72:55:58:04
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer:       /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial:       01976F2C54476502A75A43654F3AB68B49E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number:          0E03
Signing time:             Sat 14 Jun 2025 16:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:05 +0000
Files and hashes:         1: CUY45Y1KmLWjDR8KaCm8pfbWmHk.roa (hash: Wr/mH88dBzO09g3KW6jW/bHo4ew9LfQROwCNYWZRYNQ=)
                          2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: JmKoaGsaWtZ7qRjAEAMMMMT87u+zNEHuoRvilOlgLLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:54:47:65:02:a7:5a:43:65:4f:3a:b6:8b:49:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
        Validity
            Not Before: Jun 14 16:01:05 2025 GMT
            Not After : Jun 15 16:01:05 2025 GMT
        Subject: CN=1bcbd0ce2ac20e253f8f3d226fd1556072555804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:b5:ba:8a:2d:7c:c1:89:9a:5d:ba:dd:07:
                    66:55:f1:39:a5:50:36:41:84:3a:4a:d9:e4:82:41:
                    75:d3:80:b8:ab:35:87:2d:e7:17:6d:1b:78:6c:02:
                    c0:d6:cb:2f:c0:ac:03:0d:20:a5:27:ee:13:30:e1:
                    82:18:46:43:f6:2b:6f:22:49:75:20:1f:ce:3a:f5:
                    aa:54:55:47:f6:28:85:88:7f:70:68:1e:76:bb:ce:
                    4e:e0:62:8f:e8:76:a7:eb:6e:e6:0d:3b:9b:7f:a0:
                    4f:62:09:c0:b3:44:20:3e:f6:67:af:cb:29:54:93:
                    ea:1b:d6:c1:f8:bd:4f:92:4d:07:8f:bb:cd:96:1a:
                    64:a8:89:4d:a6:82:b3:09:0c:a6:f5:fc:56:ed:43:
                    77:84:0b:f8:40:fd:b7:bd:46:a7:a6:29:81:20:bf:
                    05:d1:f8:f8:55:c6:14:cc:1f:98:4a:38:1c:8e:b5:
                    58:29:9e:3b:ae:81:3a:83:36:f7:fe:b8:b9:c0:18:
                    5b:50:4e:8c:72:75:9a:40:7a:ff:ea:12:c8:8b:fe:
                    3d:35:bf:44:b9:0c:35:7b:db:8c:67:76:78:9e:dc:
                    96:e3:10:d4:a8:61:40:04:33:43:fb:95:b6:0a:0d:
                    3a:52:5c:79:91:88:24:b5:39:ba:1d:59:63:94:07:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CB:D0:CE:2A:C2:0E:25:3F:8F:3D:22:6F:D1:55:60:72:55:58:04
            X509v3 Authority Key Identifier:
                keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:5e:22:90:0d:dd:db:62:68:5e:1a:89:99:4f:e4:d8:85:4f:
         3a:d9:65:7e:34:5b:dc:99:b9:bd:f4:1b:25:e9:68:db:52:74:
         4c:a9:76:95:b4:56:b3:de:8a:10:56:10:0b:17:8d:40:33:c3:
         95:ee:6f:af:b0:b5:12:39:43:eb:14:c1:a4:f4:49:1e:1c:0d:
         28:ea:fa:36:4d:4c:2b:7b:64:27:c5:08:59:22:09:f0:f1:16:
         8b:b7:30:f5:2c:eb:d7:a3:71:a5:23:4c:b3:e6:c5:95:4d:0c:
         c6:2a:f3:3a:c8:f8:ac:11:52:db:41:88:50:a1:49:7c:e3:29:
         c4:2e:79:74:8f:f8:ab:57:f2:70:4e:11:98:85:08:95:87:7d:
         5b:d6:91:67:7b:3a:bb:5c:03:0e:8b:60:0b:87:1d:01:b1:96:
         a7:49:f4:bd:60:f6:f9:66:67:25:eb:5a:ed:2e:59:8e:21:26:
         c4:79:4a:ce:32:c5:d2:c1:61:bc:3d:7d:4a:6c:4a:a8:da:9f:
         1c:0e:36:1d:d9:f2:30:60:f7:41:81:24:17:b6:2d:8f:48:64:
         ad:0b:36:16:70:41:00:1a:2e:55:1c:24:79:70:34:58:86:52:
         0b:65:05:7a:54:18:57:15:03:8f:e7:b1:33:c7:da:94:04:e4:
         2e:9e:bb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:54 2025 by rpki-client