Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
File:                     C6VqvctPbwyGuDLswT9eJJch1vg.mft (raw, json)
Hash identifier:          rYLOfMcPyLvxvoaFGDc8Kt300N0zJO4RfrVcUYaqI5k=
Subject key identifier:   47:DC:55:11:97:83:4F:65:75:27:D9:48:48:D3:82:15:4A:2E:62:0A
Authority key identifier: 0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8
Certificate issuer:       /CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
Certificate serial:       01968E82E2BA326CD4FCBD03C347B7FD0249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
Manifest number:          0BC4
Signing time:             Fri 02 May 2025 01:01:04 +0000
Manifest this update:     Fri 02 May 2025 01:01:04 +0000
Manifest next update:     Sat 03 May 2025 01:01:04 +0000
Files and hashes:         1: 10gRzD3VrAGl4bbzZAnzRnZ-9NY.roa (hash: lcACm1XYWQGs+OoRyS5RawPhw9wP7Mmy1MtCSpjZTr8=)
                          2: C6VqvctPbwyGuDLswT9eJJch1vg.crl (hash: LMushYHEb8VmbqIJacpxKcsmHLBeXNjNqMixQ8imMHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 May 2025 19:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:82:e2:ba:32:6c:d4:fc:bd:03:c3:47:b7:fd:02:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba56abdcb4f6f0c86b832ecc13f5e249721d6f8
        Validity
            Not Before: May  2 01:01:04 2025 GMT
            Not After : May  3 01:01:04 2025 GMT
        Subject: CN=47dc551197834f657527d94848d382154a2e620a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b4:0f:cf:99:20:73:dd:49:c8:13:4c:30:e0:
                    c1:77:1c:47:0d:53:26:17:04:3f:99:09:86:2e:bb:
                    a0:30:8b:43:23:5c:26:94:56:08:11:22:2c:a2:4c:
                    02:e9:37:46:df:24:ae:5f:25:78:24:37:c9:06:8d:
                    72:d2:ec:e4:06:fc:fc:4e:ca:a7:c7:ea:c9:fa:18:
                    39:99:61:a2:23:de:b5:be:ca:5f:5e:a5:65:dd:45:
                    ca:82:59:ed:ae:95:b6:59:d6:31:03:a0:95:b8:65:
                    65:e7:d7:4c:5d:7e:c2:97:2c:ab:20:c8:9f:6e:7f:
                    af:10:dd:9c:c3:b7:0a:34:f9:8d:25:dd:35:38:92:
                    05:21:54:d3:54:8f:32:97:33:c7:d0:5d:f4:3c:ae:
                    2a:6a:ed:cf:e5:12:8c:0e:7a:6e:c1:07:ed:f7:9d:
                    f3:a9:ab:6e:61:de:2c:c2:11:4b:92:75:d2:f3:1d:
                    b4:e4:d0:38:77:93:62:ff:a5:ff:4c:e1:22:46:df:
                    ce:68:9f:c3:63:58:4a:a5:52:bd:95:35:e0:77:70:
                    c5:06:0e:b2:cb:49:59:7d:9b:ca:f2:17:3b:93:f6:
                    34:40:87:37:13:3e:92:05:bb:ff:9a:1e:1a:8c:60:
                    03:78:6c:8a:33:a4:55:b1:cf:a2:80:1e:17:bc:14:
                    90:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:DC:55:11:97:83:4F:65:75:27:D9:48:48:D3:82:15:4A:2E:62:0A
            X509v3 Authority Key Identifier:
                keyid:0B:A5:6A:BD:CB:4F:6F:0C:86:B8:32:EC:C1:3F:5E:24:97:21:D6:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6VqvctPbwyGuDLswT9eJJch1vg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/78a861-b918-4ea7-88a8-603cb083714b/1/C6VqvctPbwyGuDLswT9eJJch1vg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b6:6f:8c:fd:5f:4e:3f:6d:ef:16:d6:77:3e:a2:57:2d:f1:
         87:0b:a5:82:88:1c:61:78:fe:8e:2c:4c:68:ec:c7:9e:e1:7f:
         63:89:79:b6:62:4e:0a:64:27:6f:bc:dc:01:12:f4:71:46:51:
         4a:fc:4e:af:49:2e:0c:75:14:9d:78:ec:1e:ca:8b:46:b9:a1:
         c4:07:12:e0:4c:db:39:26:2b:46:94:ca:3e:83:0e:74:e5:e8:
         f8:81:29:fa:a4:65:f1:d2:d1:e9:e5:8c:8c:6c:76:91:1a:8e:
         d2:c5:62:23:6a:20:1f:1b:ea:00:f7:ac:6b:9e:02:80:c8:ad:
         05:5b:68:2c:e2:af:d4:d7:f6:96:66:35:7f:13:7d:46:90:47:
         b1:a6:42:91:4c:2d:4b:05:19:0d:7b:09:c8:36:60:2d:56:8e:
         17:b6:4a:6a:51:66:38:0f:2c:18:2e:aa:b5:59:4f:c1:26:0b:
         c9:1c:c4:4b:f0:c8:d5:73:dc:0b:f0:77:c4:75:2f:cb:86:b1:
         3c:6e:8c:5c:7d:19:1a:72:ed:b5:99:fd:45:48:76:8f:c6:dc:
         81:b9:39:35:2b:4a:0a:48:6f:4e:4e:d1:26:4f:4f:b3:89:a1:
         ac:80:64:7b:0d:9e:1d:f1:fc:41:4f:3a:27:7d:99:d6:57:53:
         3a:80:5d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:03:06 2025 by rpki-client