Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          x5h1coMKPu3a4UD4DVNZqYlc/kRmCx1pkE1gYlXRIi8=
Subject key identifier:   68:B0:E1:33:57:E5:E0:9F:81:E1:E1:68:FA:36:9C:7D:29:C4:E9:D2
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       0196B145634B1B82C6B0397DB2E8C151E3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0D27
Signing time:             Thu 08 May 2025 19:00:36 +0000
Manifest this update:     Thu 08 May 2025 19:00:36 +0000
Manifest next update:     Fri 09 May 2025 19:00:36 +0000
Files and hashes:         1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=)
                          2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=)
                          3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: Yl5SxojiM/VVSIuO0SByijSAYLqBkCKdRdeAtTkn0tk=)
                          4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=)
                          5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=)
                          6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=)
                          7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=)
                          8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=)
                          9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=)
                          10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:45:63:4b:1b:82:c6:b0:39:7d:b2:e8:c1:51:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: May  8 19:00:36 2025 GMT
            Not After : May  9 19:00:36 2025 GMT
        Subject: CN=68b0e13357e5e09f81e1e168fa369c7d29c4e9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:2d:cb:b6:80:dc:66:5f:b9:59:f1:c2:8c:
                    e8:63:0e:33:38:5f:86:d7:74:0f:19:f5:fa:0e:f4:
                    2e:ed:6b:b2:9a:99:09:2d:58:ac:53:0e:8e:bb:a7:
                    60:47:a6:45:be:fa:3b:85:2c:2f:09:85:c7:c9:5f:
                    78:c4:dd:b4:5a:fe:bf:8e:8f:e0:0b:b0:0c:7f:8b:
                    ad:94:f5:ee:cc:2d:8a:88:17:6a:e5:2c:90:be:1a:
                    bf:2d:2d:4c:8e:b6:97:95:a9:97:19:2d:6f:02:f8:
                    19:9a:4b:06:c6:3c:c4:19:54:1e:e4:28:91:28:49:
                    b9:f0:e0:61:06:32:0f:89:fa:34:ec:26:94:ac:4a:
                    af:80:81:ee:bd:a0:6f:0d:db:3f:79:f9:a0:38:b9:
                    19:35:5e:a3:c6:84:c6:f7:14:ce:94:87:5f:51:36:
                    89:6a:7e:46:d0:ad:76:11:2a:f7:7c:a0:e5:a9:83:
                    25:73:ed:6d:7d:3e:12:ba:02:ba:29:61:3a:1f:a1:
                    04:45:57:1c:0b:49:fa:20:7a:81:7f:bd:1b:51:78:
                    bc:d3:6c:5a:f3:6f:33:3c:df:61:ca:54:4b:59:4a:
                    30:ea:63:34:ca:0a:ba:99:b6:73:0e:c2:4a:5a:4d:
                    30:7a:41:dc:17:41:9d:ff:50:8c:d0:0e:75:5e:f8:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B0:E1:33:57:E5:E0:9F:81:E1:E1:68:FA:36:9C:7D:29:C4:E9:D2
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e2:92:60:aa:8a:2d:f1:9f:fb:9c:5b:05:a2:c6:53:69:b3:
         4a:ca:45:02:36:53:90:c2:78:0c:7c:64:7d:76:6a:6f:56:a0:
         f0:f9:73:a7:cc:0d:a4:82:a3:89:18:7a:73:14:d3:9a:b6:99:
         e4:92:4b:4b:ba:cd:2b:31:e0:7d:3b:38:86:57:b9:5d:e7:33:
         7b:38:32:10:78:1d:ce:37:b6:ca:87:ad:ba:73:4b:af:d3:bc:
         71:c5:ee:ad:f2:89:cf:af:57:bc:a4:dd:b7:76:ff:88:18:3a:
         ae:e4:a7:1f:f3:bc:34:9c:d6:5f:7a:a3:b7:82:4c:17:9d:9d:
         7e:97:0f:13:d9:41:31:04:ce:4d:63:d7:4f:7f:a7:72:6b:a1:
         7a:c3:85:c2:2d:32:82:d3:16:07:e1:44:2d:af:62:a5:c5:96:
         ef:d4:25:2f:e9:be:00:6c:33:1e:90:50:44:90:a2:79:70:03:
         d6:76:92:df:3a:95:25:6e:32:80:17:4b:24:0e:e5:d8:58:86:
         77:37:c9:9e:80:73:7d:f6:78:d2:3b:7f:d6:72:a6:08:78:28:
         21:78:47:35:aa:66:cd:ed:e1:fa:fb:15:fe:5a:62:bb:d3:42:
         4a:cc:65:1f:2c:97:f8:e4:87:0f:a1:fc:f1:c6:0d:41:03:49:
         67:26:d7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 21:37:46 2025 by rpki-client