Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File:                     BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier:          MYPwiXJXsyjyXV82RqRqNByiSzHbOK7Pmgmk/qzb9LM=
Subject key identifier:   CE:1C:B7:3C:96:09:E9:88:F8:65:43:65:B8:A2:B2:20:1C:8A:30:9F
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer:       /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial:       019694BB56479E1F2488A17FFD940C539DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number:          0983
Signing time:             Sat 03 May 2025 06:00:27 +0000
Manifest this update:     Sat 03 May 2025 06:00:27 +0000
Manifest next update:     Sun 04 May 2025 06:00:27 +0000
Files and hashes:         1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: TWxLl4XJhdoBQFExw9xdvUdBM7Yng7LON0YCZI3O3Q0=)
                          2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:94:bb:56:47:9e:1f:24:88:a1:7f:fd:94:0c:53:9d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
        Validity
            Not Before: May  3 06:00:27 2025 GMT
            Not After : May  4 06:00:27 2025 GMT
        Subject: CN=ce1cb73c9609e988f8654365b8a2b2201c8a309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b8:63:38:99:93:c3:bb:31:ea:c7:ce:0f:2f:
                    ad:91:f6:a2:61:96:1b:c8:5c:33:b5:8b:4b:18:2d:
                    0a:45:f7:e2:6a:d0:62:11:4a:3e:b8:d0:7b:f3:d6:
                    39:7a:75:bc:5b:12:bb:f4:cf:cc:48:c1:f0:51:62:
                    2d:a6:81:8d:10:ac:c3:e5:d1:9a:41:1f:ec:42:73:
                    09:68:ed:4c:bc:e8:45:e8:82:fb:a1:7f:52:2e:ff:
                    89:ac:48:6d:02:de:a4:6e:41:da:d6:c9:c0:fa:1d:
                    11:63:1e:8d:74:cc:6e:5e:e5:16:22:ce:77:9c:41:
                    1a:42:94:80:a4:36:18:b3:c9:7d:e1:7f:59:b4:3e:
                    74:61:84:13:ee:76:ec:fe:84:b7:89:d6:07:c6:dd:
                    b3:62:94:8a:da:7b:af:06:52:b4:aa:64:ed:8c:5b:
                    47:39:35:b5:e2:4d:f0:da:b0:71:98:34:44:6a:5a:
                    09:5a:b7:f6:1b:0e:60:7c:51:b0:10:54:89:62:4c:
                    e8:85:d6:80:78:ba:fc:11:c7:a2:d4:ae:26:7b:7b:
                    0c:98:ec:60:6e:fa:2d:cd:0e:e0:d6:15:7b:a5:30:
                    7b:01:06:34:db:7a:43:8b:15:ab:2c:b4:b2:46:58:
                    ad:c8:28:16:bc:5e:3c:fe:7b:9f:6c:63:04:00:2b:
                    62:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:1C:B7:3C:96:09:E9:88:F8:65:43:65:B8:A2:B2:20:1C:8A:30:9F
            X509v3 Authority Key Identifier:
                keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:42:fa:b0:ec:b7:67:e1:91:0b:3e:de:33:50:98:05:e2:87:
         ef:86:28:b7:95:c5:85:68:68:51:47:95:83:58:2e:ee:17:11:
         e0:7a:b0:91:8f:f8:03:c6:78:e9:dd:e2:29:1c:d3:c8:33:e1:
         cc:d0:c6:a6:6d:46:4b:fa:77:94:52:b3:ae:83:e5:81:0f:5f:
         65:c9:b3:1e:0e:7b:20:80:20:9e:e7:3f:eb:da:42:e1:dd:c5:
         94:4c:4b:9d:8e:39:fd:60:63:67:5a:a7:0b:59:b6:a5:68:66:
         14:3c:44:3a:da:b5:35:e8:bc:3c:4f:ec:4c:d4:e9:76:be:25:
         56:ac:e7:06:27:0a:f9:c2:48:a4:2d:e6:26:32:37:3f:26:52:
         02:41:f4:fd:30:58:fa:c3:fc:4c:c4:6d:9a:99:55:0d:13:96:
         57:da:81:db:f3:b3:99:f5:4b:dd:41:c0:da:ae:b4:1f:4e:91:
         c3:70:1e:72:37:45:99:fe:14:c5:02:32:ee:ed:5f:cf:0c:c1:
         0a:9d:3b:f4:2c:59:f1:11:36:18:a7:6c:f9:a3:0d:bf:09:fd:
         f1:1b:a1:42:cd:58:97:17:47:0d:f1:89:04:30:94:29:cb:31:
         ad:83:47:bb:bb:e6:5d:0e:ae:03:38:e9:2d:f8:23:38:f2:6c:
         af:39:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 12:37:52 2025 by rpki-client