Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
File:                     bvqMD-YuxUrMveNcYL2K1LkBT_c.mft (raw, json)
Hash identifier:          Qb7wPcRjFWdhAHNJMRGJ/qafH7R4JrwfRIGdA/uM6G8=
Subject key identifier:   5D:5E:36:6A:37:22:4C:CF:49:26:CD:F0:3B:11:B7:A4:70:9D:DF:6F
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Certificate issuer:       /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial:       01967BA027DA24B968443336CE69C263DFF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
Manifest number:          13AE
Signing time:             Mon 28 Apr 2025 09:00:15 +0000
Manifest this update:     Mon 28 Apr 2025 09:00:15 +0000
Manifest next update:     Tue 29 Apr 2025 09:00:15 +0000
Files and hashes:         1: DW8SHbVlL8Myb-p7QtpBtdE4Fug.roa (hash: yUyTh7meErNXbMRoAKGZB1yTrhp9xLOBqyMiqtl/XxA=)
                          2: bvqMD-YuxUrMveNcYL2K1LkBT_c.crl (hash: 35S4bI68o4tgF/Sde2wBmxNHmuyXO/twDBMd6pj6DDc=)
                          3: uBSOOeaOOAPA_AKPY15x-quda9A.roa (hash: Dt69/ItO+3jelx7+KElGDpHbyUEQGmbIcaxvgmv3LtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7b:a0:27:da:24:b9:68:44:33:36:ce:69:c2:63:df:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
        Validity
            Not Before: Apr 28 09:00:15 2025 GMT
            Not After : Apr 29 09:00:15 2025 GMT
        Subject: CN=5d5e366a37224ccf4926cdf03b11b7a4709ddf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:14:5f:c4:42:08:bf:07:09:de:06:76:07:
                    e0:44:23:5f:92:5f:2e:3f:82:3a:d4:f7:60:02:50:
                    62:fc:b8:75:d0:cd:40:de:a2:d8:58:19:2e:37:de:
                    1b:93:a0:30:af:a7:f9:f6:37:fb:19:ee:8d:82:c9:
                    6d:5d:ab:4e:ea:2a:48:d0:29:b8:9a:cb:ad:aa:a0:
                    53:7a:bc:e9:18:6f:b6:36:87:2f:b1:06:43:5e:77:
                    bc:9d:81:92:e7:7d:1b:9a:b9:ce:63:fe:6a:f3:7c:
                    a7:1e:2c:30:f2:b7:45:02:0d:35:bd:56:55:81:bd:
                    93:42:75:15:20:72:e0:35:14:6f:85:28:b9:0c:dd:
                    75:3b:78:50:c0:c0:09:c5:84:94:04:44:7d:49:24:
                    d0:26:ad:a9:59:8d:08:15:65:97:4f:af:d6:c4:74:
                    1e:d5:86:42:4a:77:6c:5e:50:b2:2f:da:6e:6e:2e:
                    c4:26:a0:f6:1a:4b:42:cf:75:5c:34:6c:97:80:65:
                    6e:93:12:a0:b4:16:15:5a:54:09:05:ab:f9:c9:34:
                    9b:ce:8a:8d:ec:ee:a9:83:3c:ba:63:45:52:f0:f8:
                    bc:c5:da:ca:f8:e3:b6:e6:3a:3b:ef:21:78:26:fb:
                    b0:2a:c8:0a:85:5b:49:91:28:56:9a:13:d6:f3:48:
                    c6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:5E:36:6A:37:22:4C:CF:49:26:CD:F0:3B:11:B7:A4:70:9D:DF:6F
            X509v3 Authority Key Identifier:
                keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:8d:d8:3f:f5:56:c4:20:f1:06:14:19:bd:f8:be:91:b9:
         21:bd:e9:b6:f9:bf:f1:21:32:df:b1:10:26:83:45:a1:3a:33:
         4b:a9:91:47:7b:08:d5:1a:62:a1:c9:74:37:d9:d5:45:1d:13:
         1f:4a:0f:4b:fd:66:d9:ba:0c:66:92:0d:cb:24:04:1d:7f:44:
         70:53:f8:40:f0:d3:c1:8e:a7:54:e8:26:1d:3b:07:32:a0:32:
         70:ba:72:31:e5:66:9a:e1:33:de:10:4d:fc:aa:40:bd:fc:39:
         f2:86:c3:48:e1:e6:d1:f8:1d:87:a8:14:41:8a:62:a2:62:79:
         26:34:23:9e:a9:a6:9e:88:07:c7:73:69:6d:c8:ac:40:88:c0:
         9e:7e:65:9b:ad:98:d4:cb:23:04:27:62:96:9c:95:a4:36:30:
         ca:ec:a9:5b:64:39:35:57:39:8e:8f:81:e3:c1:3f:fc:e2:72:
         b5:93:46:1d:54:ce:df:10:9d:bd:04:c5:d1:17:2b:23:ad:67:
         ac:26:60:94:3a:a4:ea:2d:32:b5:b9:62:aa:e5:9c:15:ad:41:
         aa:b5:16:d9:03:06:5b:82:fc:8e:b8:b7:27:5a:fe:bf:aa:45:
         79:e0:89:d0:e9:6a:ce:15:8b:c2:5c:d7:44:b2:ea:d6:3a:7a:
         13:ce:10:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:21 2025 by rpki-client