Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File:                     bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier:          WG+unaIt9ZqD1Mf09WjETJrQjTSl7s4ZJtDLSKPwjeI=
Subject key identifier:   2B:9A:07:57:EC:5F:82:5D:71:FF:D4:55:A5:37:1F:A1:37:E3:B0:0E
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer:       /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial:       0196797B70345AAC214657179BCF609D2C99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number:          0DAB
Signing time:             Sun 27 Apr 2025 23:00:54 +0000
Manifest this update:     Sun 27 Apr 2025 23:00:54 +0000
Manifest next update:     Mon 28 Apr 2025 23:00:54 +0000
Files and hashes:         1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
                          2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: QdDVP5iawRSbThLYYV57o4xtjB4f0zvckq73528FNBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:79:7b:70:34:5a:ac:21:46:57:17:9b:cf:60:9d:2c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
        Validity
            Not Before: Apr 27 23:00:54 2025 GMT
            Not After : Apr 28 23:00:54 2025 GMT
        Subject: CN=2b9a0757ec5f825d71ffd455a5371fa137e3b00e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:b6:1a:f9:20:ba:56:0c:6e:0a:fb:20:1a:
                    ce:af:23:57:a0:9d:80:e7:86:e7:b5:04:b7:56:7f:
                    4d:e3:30:46:2f:8e:e3:33:43:5e:38:ed:05:0e:51:
                    7f:a6:75:b9:d6:90:eb:63:41:d8:bb:99:4c:d3:10:
                    62:04:56:98:59:a0:6d:e0:bf:34:30:92:ea:8c:e5:
                    de:9a:a9:d3:7d:ce:6a:86:10:28:7f:e7:ab:ea:9e:
                    f8:d6:ed:57:29:c6:ab:84:dd:3c:1a:02:07:c9:04:
                    5c:8a:1e:a3:cf:52:cd:f1:6f:7f:79:df:3c:a8:58:
                    2a:3a:ce:bf:c9:27:e8:03:6b:ce:ca:65:94:8e:b7:
                    df:58:17:aa:95:22:92:5e:f4:d6:3f:8d:84:9b:90:
                    2d:8b:c3:91:0a:4e:6a:48:ff:a9:1c:ae:04:09:9a:
                    f1:d0:2d:78:21:7a:9a:e6:6f:19:eb:38:bf:bd:a6:
                    7d:7f:be:5c:6a:32:77:35:54:7d:58:d1:7d:ac:4e:
                    29:db:c6:4c:9c:7d:d7:6e:28:4a:7a:4a:8b:17:ca:
                    e7:f6:00:65:db:9e:5b:82:28:c2:69:cb:2b:d0:a7:
                    4e:f9:b6:f1:52:03:0f:3a:57:fc:46:6b:db:ab:26:
                    63:fa:b4:7b:78:ec:7b:49:d8:1e:72:b3:75:49:f7:
                    9c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:9A:07:57:EC:5F:82:5D:71:FF:D4:55:A5:37:1F:A1:37:E3:B0:0E
            X509v3 Authority Key Identifier:
                keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b4:ad:fd:25:88:97:3a:41:83:27:92:77:bc:f7:3c:8c:76:
         73:43:62:73:b8:24:fa:77:d0:c1:4e:0f:15:4e:f6:a6:15:09:
         3e:23:13:37:76:ec:da:ef:df:ca:e9:87:5b:2e:57:ed:04:c5:
         4a:ee:fa:f6:37:60:c9:77:5c:83:09:05:49:59:64:78:e4:b6:
         3c:32:61:4d:cc:09:bf:cd:30:95:16:2f:3e:81:27:87:fc:07:
         8b:d5:99:79:de:d3:76:3b:4f:2b:76:7a:8a:7a:63:4c:c0:47:
         d1:32:52:59:84:68:64:41:84:62:3a:81:a1:75:92:e9:b7:3a:
         6e:76:8d:20:1b:88:3a:03:49:bb:52:22:fc:b4:ed:6e:98:5e:
         40:4a:01:81:48:a9:6b:66:c2:96:40:8c:8c:f8:0c:db:5a:2a:
         75:4f:4e:52:df:79:5f:55:1c:22:33:ad:12:85:5c:84:06:1a:
         b6:cb:05:98:29:80:6d:dd:ea:3e:81:0b:d6:2e:a0:fa:ad:48:
         90:fc:d1:8a:0e:9c:c1:96:56:fb:e3:48:39:d2:6e:09:ec:64:
         d0:a1:24:c9:76:56:a9:5d:49:55:76:ed:8f:0c:19:30:d2:34:
         d9:53:7c:27:39:a5:66:a2:99:ec:cf:ff:c8:22:5b:6f:70:e6:
         85:bf:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:42:21 2025 by rpki-client