Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File:                     v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier:          oVUz4afpX9akNrmH2YPJxPtTrookyK57yI1uZjYSDxs=
Subject key identifier:   0B:63:C2:E4:6D:27:9F:51:90:5B:75:EA:6B:7B:C2:83:AD:76:9F:37
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer:       /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial:       0196CEE26F3379226E863D4B513D7D6F7B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number:          0D17
Signing time:             Wed 14 May 2025 13:01:08 +0000
Manifest this update:     Wed 14 May 2025 13:01:08 +0000
Manifest next update:     Thu 15 May 2025 13:01:08 +0000
Files and hashes:         1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
                          2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: 6rdJRnMeE3nOIv4x+Cz3ROETEboCki5Yz/VLu1YAiPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 13:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ce:e2:6f:33:79:22:6e:86:3d:4b:51:3d:7d:6f:7b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
        Validity
            Not Before: May 14 13:01:08 2025 GMT
            Not After : May 15 13:01:08 2025 GMT
        Subject: CN=0b63c2e46d279f51905b75ea6b7bc283ad769f37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:50:6f:80:56:1d:e7:61:bb:9f:22:08:8c:
                    f3:90:ea:69:a5:c2:43:69:61:69:e6:35:22:2f:a0:
                    72:61:76:36:8c:99:16:eb:58:f9:ed:9c:82:e7:2d:
                    99:fe:e1:cc:51:bc:bd:c5:1f:02:6e:83:73:e6:e6:
                    9e:e9:7f:bb:1a:e5:1e:f1:cb:fd:94:de:78:58:3f:
                    54:8c:fb:1e:d0:31:17:4e:bd:fe:5f:4e:8f:a5:62:
                    56:90:ca:c7:f5:b0:29:a4:89:a6:c2:97:08:3e:c0:
                    6e:37:8f:3e:2d:56:58:ab:e4:fe:5d:b3:b2:61:e2:
                    11:7d:c3:10:b8:5b:a0:7e:6f:e0:7f:47:cf:16:96:
                    cd:a8:e3:f5:08:2e:fa:0d:8b:fd:e3:21:b7:7f:0a:
                    97:e0:eb:25:e8:91:da:1b:d2:07:3e:09:ae:cf:9e:
                    24:05:55:20:1a:dd:74:74:5a:03:71:b9:a0:61:72:
                    c8:30:0f:63:e6:d2:03:41:63:33:57:61:55:84:60:
                    93:e3:3b:87:6d:9a:f6:d5:78:07:02:7e:8d:11:bf:
                    5a:dc:88:04:30:53:16:da:bf:13:c3:64:fa:d7:5d:
                    27:a0:30:a9:dd:cc:27:df:6e:7f:40:ec:2e:e5:0c:
                    70:ab:2c:a4:22:a5:38:44:a2:48:05:31:0c:bd:d6:
                    8b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:63:C2:E4:6D:27:9F:51:90:5B:75:EA:6B:7B:C2:83:AD:76:9F:37
            X509v3 Authority Key Identifier:
                keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:12:16:f0:f2:4a:88:da:6b:77:99:5e:d6:16:15:a8:84:
         04:6d:3f:f9:ca:83:b9:3a:ee:b1:fd:c4:be:bd:25:6b:08:99:
         87:39:90:d2:41:ef:a5:2f:da:79:44:aa:a8:f0:b9:2e:30:44:
         6b:7f:94:2e:a1:2f:0f:56:06:ba:cb:69:73:e4:8b:5f:f3:21:
         87:03:3d:53:18:b6:25:1d:f3:15:56:20:c4:c8:18:34:5e:39:
         8b:95:34:0c:ea:78:f8:f8:b3:aa:f5:fb:01:cd:34:26:bb:0f:
         d1:72:ab:c5:34:25:d1:2b:a4:80:5f:a2:f1:f0:96:4a:e9:e3:
         50:13:24:15:04:94:b6:db:29:cc:f8:4e:41:6a:0b:35:99:1f:
         de:60:d0:c1:9b:54:43:e5:ce:93:c2:fb:73:4f:b1:20:64:46:
         d6:0d:7d:79:11:71:ae:0b:fc:ff:55:df:72:d6:8c:9c:2c:38:
         12:1f:56:80:d2:76:d1:3a:7f:6b:1c:c7:03:c4:22:5e:c3:8b:
         2c:80:50:d2:40:cf:15:f9:c6:c2:2c:51:88:92:74:fd:3d:f7:
         f3:35:87:ef:ad:2f:3e:8c:8a:52:4c:dd:87:48:a5:ea:39:1a:
         8c:82:28:ee:be:4b:de:ab:4c:d7:67:94:52:47:09:31:f3:ec:
         ac:10:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:17:38 2025 by rpki-client