Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File:                     vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier:          iFSpKZw+5oClS3m9i2S0KZ7QlqDt+aIQCuFNII1/JdE=
Subject key identifier:   01:C9:B6:B1:18:38:59:29:F5:EE:E1:15:4C:6E:69:7A:78:C3:57:D6
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer:       /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial:       019675304AFFE9DB215449EDB5C5B5BD5442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number:          0D0E
Signing time:             Sun 27 Apr 2025 03:00:21 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:21 +0000
Manifest next update:     Mon 28 Apr 2025 03:00:21 +0000
Files and hashes:         1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
                          2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: Qq+SSaiFxfVt+mewsXj6h1HmwY67Aakf7GRmKyqKKh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:75:30:4a:ff:e9:db:21:54:49:ed:b5:c5:b5:bd:54:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
        Validity
            Not Before: Apr 27 03:00:21 2025 GMT
            Not After : Apr 28 03:00:21 2025 GMT
        Subject: CN=01c9b6b118385929f5eee1154c6e697a78c357d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:fd:60:08:be:3d:02:54:89:1b:e7:9c:d4:
                    23:b6:e1:22:c4:92:cd:e4:6a:f2:78:32:2e:3e:a2:
                    b0:3b:e6:d5:3d:74:4a:94:98:3a:6d:49:f9:76:3d:
                    93:5e:63:6d:03:83:f1:60:be:95:b9:aa:7b:92:85:
                    ff:a5:7f:c2:cc:06:0c:03:40:1e:55:16:06:a5:b3:
                    5b:8b:7e:72:9e:80:df:0a:7a:68:7c:0e:3a:32:4c:
                    b3:b0:e7:7f:b0:76:c0:34:4c:ed:21:4e:cb:ec:62:
                    09:cc:fd:56:33:07:5e:ce:99:9d:07:50:32:ad:1a:
                    e0:f9:33:7d:aa:72:37:6d:38:bb:d9:65:05:4d:93:
                    f0:02:81:51:48:ee:60:31:ce:2e:fd:b2:9f:3d:c9:
                    b5:77:dd:16:c2:b6:ce:92:ef:27:9e:6b:8a:94:bc:
                    d6:51:b6:06:d5:b2:c0:81:79:fb:6d:51:00:09:56:
                    a6:25:31:aa:0d:3c:f8:f0:b9:84:ef:54:3b:8d:d4:
                    62:bc:73:d0:61:70:d0:0d:df:66:07:ff:c4:23:90:
                    fd:1e:f9:44:60:e4:c6:ba:3b:77:8a:8f:2d:dd:f4:
                    67:22:14:94:1a:81:20:97:70:bc:4d:23:ea:36:36:
                    bc:62:8b:dd:55:d0:91:a3:54:dc:03:d7:15:2e:e9:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:B6:B1:18:38:59:29:F5:EE:E1:15:4C:6E:69:7A:78:C3:57:D6
            X509v3 Authority Key Identifier:
                keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:0a:77:e2:d2:fa:51:57:7b:3a:f7:a8:98:7d:b0:ed:cc:92:
         c9:0a:1f:66:76:f9:d8:b9:25:94:f6:f2:93:f5:48:d8:3b:23:
         24:a6:3d:d7:b4:dd:de:cd:18:92:af:fb:8c:b6:d6:fc:c4:1f:
         6b:4b:b4:59:7e:f9:1e:9d:15:e5:fe:f4:d1:f2:93:84:af:be:
         51:d5:ee:22:a0:9e:d6:b4:85:4e:4e:09:c1:1b:a1:8e:1d:09:
         fc:87:f0:e3:1a:4f:d8:3d:31:2f:6c:a0:bb:0b:3c:2e:be:70:
         b6:59:c8:c6:d9:10:2f:18:a4:20:5e:69:71:54:92:85:45:ef:
         d8:6a:bf:b4:f5:e4:5e:5c:81:08:c2:0c:d6:59:b0:64:a6:58:
         16:df:c0:9e:90:f8:8d:44:52:cc:5f:41:db:7b:1c:42:7f:2e:
         dc:6d:54:74:25:30:8e:e2:70:89:c2:04:73:b8:e3:25:90:0e:
         3a:27:50:bc:d9:44:93:66:f9:bf:35:5f:24:3c:f7:36:3f:0e:
         15:c8:9e:d7:49:85:05:bc:a3:7e:23:f9:28:00:5a:ba:8d:09:
         a1:18:cf:01:c9:a4:2c:e5:8f:8b:53:8f:85:e7:8e:17:91:a2:
         5e:60:08:8d:53:de:6d:1a:36:4e:25:b8:06:58:b8:20:55:36:
         85:33:46:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:14 2025 by rpki-client