Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          3DlLfhaOu0tlOs8GdEClYE/bEVof1jYL6XMN0w4oNw4=
Subject key identifier:   9F:72:2D:A9:97:A5:76:2B:79:5F:11:47:78:04:01:27:71:47:39:D3
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       01968993015940B9FF919C23954847DFD49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          14AA
Signing time:             Thu 01 May 2025 02:00:34 +0000
Manifest this update:     Thu 01 May 2025 02:00:34 +0000
Manifest next update:     Fri 02 May 2025 02:00:34 +0000
Files and hashes:         1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: vb3SXKXrEGmmapVJjPpcZ9z/AifF6PeXzoclVKwT5Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:93:01:59:40:b9:ff:91:9c:23:95:48:47:df:d4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: May  1 02:00:34 2025 GMT
            Not After : May  2 02:00:34 2025 GMT
        Subject: CN=9f722da997a5762b795f114778040127714739d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:b5:58:9f:8c:cb:d3:06:6a:9c:af:b1:c5:
                    1a:19:c3:ab:85:0d:34:9a:42:c1:79:2d:f9:66:41:
                    de:88:b4:da:d2:9a:7b:3e:3d:73:af:20:7a:13:7f:
                    d8:d6:1a:10:82:58:7b:22:69:ad:45:ab:89:72:59:
                    b9:af:3c:af:ce:11:d5:63:a4:f5:62:16:09:a2:5f:
                    b6:a8:60:e8:32:f1:48:58:85:7d:c7:94:4a:1f:95:
                    7a:4b:26:bb:b7:bb:7d:69:19:ce:bf:a5:d7:bd:4c:
                    b5:e9:e1:d8:50:20:0c:b5:87:bb:72:ff:b6:dc:41:
                    a0:92:87:37:8e:22:f4:0e:a4:8c:0d:5d:98:12:13:
                    9b:4b:e1:93:c0:ab:2a:dc:d7:b2:32:83:41:20:52:
                    a2:b9:6a:24:55:71:a5:96:10:ea:cb:fa:b0:53:e3:
                    38:14:79:2b:fa:4e:6e:51:09:17:95:6d:09:47:af:
                    95:19:06:06:5f:e8:59:77:ea:fc:dd:e2:4f:c5:50:
                    d6:a7:51:9c:ba:3c:11:5c:07:e3:90:ae:7f:9a:dd:
                    db:9d:62:65:41:af:57:9c:49:14:f5:a5:00:d2:27:
                    99:8e:d8:43:d7:cd:a2:6f:f5:cb:10:cf:be:15:96:
                    a0:74:52:f9:36:ac:30:b1:2d:3b:d1:fb:a3:5e:8c:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:2D:A9:97:A5:76:2B:79:5F:11:47:78:04:01:27:71:47:39:D3
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:62:0e:fa:d5:22:26:02:68:1b:d0:9c:8b:b5:b5:15:1f:
         43:32:62:30:e8:15:a0:c7:dd:20:78:2c:4e:97:69:41:6f:71:
         95:5e:5c:cd:ae:ba:d6:88:59:ae:47:e1:c3:b7:b4:b7:32:63:
         51:d0:55:81:ee:11:ba:ae:46:ab:04:83:aa:4a:d6:3b:67:85:
         67:cc:97:ad:63:4c:e5:29:a6:2c:50:d0:0e:d9:48:0e:81:a2:
         92:88:da:9a:45:2f:f9:f4:35:ac:a2:0c:ef:e1:c7:ff:7a:6b:
         99:61:92:30:3d:0e:f2:3d:dd:a8:47:e5:6b:95:15:ae:bb:19:
         62:5c:aa:75:e7:d9:f7:2a:f2:46:d8:2a:33:e3:0b:59:dd:2a:
         3b:21:bb:1e:02:1b:b7:8f:9d:28:c8:ad:84:9b:19:f7:c5:0d:
         34:99:38:5a:e0:8d:8f:6f:98:cf:f1:ab:bb:c8:4d:d6:38:cf:
         92:19:22:5a:a9:b7:21:a8:61:57:55:5c:2d:b9:2a:d3:58:0e:
         a6:1b:64:82:b3:58:07:dd:65:d3:b1:8e:e7:31:5b:b0:9b:d6:
         6e:f5:d3:75:85:c5:7d:fc:ce:b6:ad:c1:39:05:73:a4:ad:a5:
         2d:8b:fa:e7:f8:57:05:a1:54:a3:93:6b:39:5c:2e:29:27:9d:
         de:a3:d1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:15:28 2025 by rpki-client