Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          v5lWgxK8ik66OHErmEwL2V82xH1cqBLFlz7D+JQKkAg=
Subject key identifier:   F3:16:B8:F0:C0:DA:F0:8B:5F:B7:93:32:0B:E8:26:17:DE:73:0B:72
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       019676B13455168598071D43C9EEC296B7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          1514
Signing time:             Sun 27 Apr 2025 10:00:46 +0000
Manifest this update:     Sun 27 Apr 2025 10:00:46 +0000
Manifest next update:     Mon 28 Apr 2025 10:00:46 +0000
Files and hashes:         1: exRb-rHcA90oTXk_rLfDmE2va0Q.roa (hash: o03D8YYP7kHIc/dGF0EKjd2OHviH18SfZbezk98xob4=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: eA7v8HDmPYA6/vyPcmMifsLlsnnOLfB+dPQd/KyNu5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:b1:34:55:16:85:98:07:1d:43:c9:ee:c2:96:b7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Apr 27 10:00:46 2025 GMT
            Not After : Apr 28 10:00:46 2025 GMT
        Subject: CN=f316b8f0c0daf08b5fb793320be82617de730b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:12:c9:78:ef:40:58:b3:d5:96:74:71:b8:
                    ed:f6:06:5c:f0:4b:b0:19:c1:fc:39:f7:bb:08:ab:
                    f0:4f:14:ee:6f:1a:e8:9c:ee:f0:aa:10:f6:56:fc:
                    0b:a9:6e:b9:94:21:e3:16:da:05:98:cf:47:58:0c:
                    09:51:37:34:f8:a6:43:41:e9:79:a5:38:21:be:42:
                    ec:69:00:ab:1b:94:25:c3:e5:16:d8:c1:e8:06:1c:
                    ae:7e:07:b5:cf:cc:70:a7:ac:1c:79:74:5b:5f:ad:
                    f9:f6:9b:df:89:33:56:26:98:06:3b:b4:f3:56:9e:
                    32:1f:82:17:c0:05:10:27:4e:ec:c6:1f:14:b7:57:
                    00:07:71:12:18:8e:c2:de:bd:a6:07:c2:77:22:2b:
                    ec:8a:bd:0c:eb:0a:0c:8c:d7:78:8b:ad:8b:02:e7:
                    f2:c0:b9:99:3a:22:14:e8:49:de:02:53:a6:37:52:
                    eb:7e:e8:12:b9:ab:12:ba:a1:8c:d8:ba:c0:a7:7d:
                    68:f3:dc:cb:24:66:be:76:01:90:98:24:20:3a:a4:
                    bc:cd:70:47:76:55:40:fe:3a:a2:aa:02:c7:4c:d4:
                    29:61:1c:c4:6c:d8:08:9b:bf:13:07:a9:b2:79:52:
                    c9:c1:84:34:2f:08:ee:35:58:80:28:40:62:a8:bd:
                    8c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:B8:F0:C0:DA:F0:8B:5F:B7:93:32:0B:E8:26:17:DE:73:0B:72
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:ed:61:15:f3:ee:03:1c:86:44:1d:c3:ca:ba:1a:7e:fc:
         75:80:f9:d2:c2:4d:01:37:4e:13:47:39:c1:dc:62:75:a5:f1:
         04:2a:14:55:0d:89:04:82:5a:93:26:21:2f:3a:25:11:bd:57:
         a1:b9:9e:db:28:06:af:d3:63:9f:c7:cb:ae:3b:b4:73:2f:7a:
         59:cf:85:ae:1e:ce:6b:a3:2d:04:da:c2:4c:d8:55:8b:de:76:
         0f:66:bb:9b:c7:b9:fd:3a:7f:2f:23:83:c2:52:ab:b9:57:e2:
         d8:f0:6b:c7:de:cd:3a:ea:48:59:6c:d7:4a:59:d8:ad:2d:7c:
         7f:eb:7f:9b:2a:25:5a:dd:a4:38:f4:99:41:c5:bd:45:17:27:
         46:ce:bc:fc:e7:87:16:6b:b5:c9:fb:33:1a:e3:f5:28:a2:d8:
         18:8d:93:3e:eb:be:98:78:78:d6:f3:86:d6:95:6e:60:dc:25:
         0d:ac:b4:f7:9d:c3:b0:69:c1:1e:3c:0d:03:8b:86:79:ad:7b:
         9f:d6:4b:9f:4e:ff:bc:de:1c:e2:9b:7f:94:b8:8c:3a:e5:a5:
         f4:e3:f6:85:ea:2f:93:11:03:78:49:cc:95:bc:09:d1:ca:5e:
         cb:b5:bf:df:74:3a:a8:df:a4:d2:8d:f5:06:0c:ce:71:2a:72:
         fa:ae:85:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:35:29 2025 by rpki-client