Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File:                     BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier:          0EE4HF1y9y7rNo7MrkyPVnPXhscu2dXJmzKf9uushns=
Subject key identifier:   A7:6C:61:24:B7:73:8D:C3:69:47:52:06:A9:A6:04:D2:87:ED:54:26
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer:       /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial:       01968A00A0AE34A6574CACCF67DBA470A105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number:          047D
Signing time:             Thu 01 May 2025 04:00:18 +0000
Manifest this update:     Thu 01 May 2025 04:00:18 +0000
Manifest next update:     Fri 02 May 2025 04:00:18 +0000
Files and hashes:         1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: acHYoZ6axJmOxC97BMXGVMmqoucuCCY8/fO2c77ZAxs=)
                          2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 04:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8a:00:a0:ae:34:a6:57:4c:ac:cf:67:db:a4:70:a1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
        Validity
            Not Before: May  1 04:00:18 2025 GMT
            Not After : May  2 04:00:18 2025 GMT
        Subject: CN=a76c6124b7738dc369475206a9a604d287ed5426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:6b:ee:42:53:b8:8a:53:5a:14:ba:b3:50:
                    3f:e9:f1:a6:5b:c4:fb:e4:6c:af:7c:8e:73:54:03:
                    b2:95:b5:ef:3b:b1:0d:9e:73:a8:a2:82:f2:8e:33:
                    5c:be:05:91:71:42:76:9c:ca:55:e0:3c:fd:0a:9e:
                    31:c0:6a:f9:8c:bf:46:f4:cc:7d:6f:7c:27:96:86:
                    2b:83:75:b2:e8:ba:fb:30:59:70:3b:86:67:09:08:
                    3d:75:dd:47:b8:0c:89:05:a0:4d:42:60:31:46:6a:
                    a9:fb:d5:a6:c1:51:82:f4:d6:14:6b:70:43:43:6c:
                    71:57:2a:b0:3c:ed:b1:3c:c1:e8:83:74:cc:39:4e:
                    d9:e0:a0:f6:79:e1:87:aa:15:7a:3d:f7:70:a4:06:
                    b0:43:37:e6:88:80:4f:38:62:cc:cf:d9:a1:ee:57:
                    81:56:b6:bf:23:f9:1a:40:a5:b0:f3:4a:43:a6:7d:
                    d3:00:ad:7c:73:84:de:23:48:ad:1c:6d:cf:cc:ca:
                    a6:cc:1a:08:f6:b1:29:1d:89:79:6d:22:4f:44:5e:
                    54:91:f2:b6:fe:ea:42:9c:80:ef:dc:fc:97:d7:5e:
                    fc:22:10:b6:c6:39:07:d6:75:5a:54:53:0c:4b:74:
                    7f:0e:22:4f:c5:5c:1a:a9:93:3d:78:61:d8:bf:18:
                    bd:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6C:61:24:B7:73:8D:C3:69:47:52:06:A9:A6:04:D2:87:ED:54:26
            X509v3 Authority Key Identifier:
                keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:6d:fc:4a:ea:cc:35:36:c7:f2:64:2c:11:da:ed:b1:d5:aa:
         e2:e5:39:53:1b:5c:fc:d6:b8:74:7b:4f:ed:79:5d:63:fd:11:
         cf:c3:7b:72:b8:2f:cd:5b:79:71:f7:ca:93:57:bc:4b:1a:72:
         fd:78:49:e3:5d:c4:67:74:aa:6e:c7:d7:77:4a:2a:66:fe:99:
         96:7d:28:f3:77:c8:de:ee:cb:84:eb:6b:0c:03:9a:1f:38:3f:
         8e:e1:25:13:25:52:22:0b:08:85:45:c5:d9:69:52:f7:13:00:
         49:c0:1d:05:01:1b:e0:bf:db:6d:f3:df:62:08:ba:ff:ff:71:
         21:e3:6f:28:f7:ff:6a:fb:b9:1a:a5:22:e9:ab:27:2e:f9:77:
         d0:c5:5d:0c:33:07:ff:75:d6:f0:0a:72:2d:21:0e:ca:67:d4:
         70:6b:4d:3b:87:05:2f:be:da:b2:99:d5:57:50:a2:b5:8e:d9:
         aa:a2:1b:50:a3:d9:48:67:6a:bb:e2:bc:16:06:33:28:d2:74:
         d5:64:d3:02:23:30:06:21:e7:13:2c:4c:85:1a:22:f3:66:0f:
         75:8d:c3:bb:a2:0d:07:dd:61:89:40:80:34:af:7a:95:4e:f5:
         83:f8:f0:58:e2:e6:2c:49:87:be:b0:75:e8:42:dc:42:68:49:
         3d:34:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:31:10 2025 by rpki-client