Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          /02fTLRPrcdxYXMEsJkCZk0nsMQcxWABC1+ysMSq+OA=
Subject key identifier:   C7:E8:E0:C0:9C:06:32:BF:36:49:06:15:DD:F9:30:FA:BB:10:6A:CF
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       0196BC6DECA7291ABDDF98C6DE8268A1F64F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          10C6
Signing time:             Sat 10 May 2025 23:00:42 +0000
Manifest this update:     Sat 10 May 2025 23:00:42 +0000
Manifest next update:     Sun 11 May 2025 23:00:42 +0000
Files and hashes:         1: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
                          2: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
                          3: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: HWM6n0MBVtYZzaND9Bcmpl9i+iaMJeeRPHhCl3QXjKc=)
                          4: DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa (hash: uCJntwDZ+cDZxpzZO6MqyTDIkNdtXNsEPYp7HWqPHR0=)
                          5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
                          6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
                          7: vrZXQ7c7SJqTI-Qy746C6GRBzTE.roa (hash: 9B+Vq1Jvk9CfpjDUR+g8aVrltZw5klYMebxf6UUVTtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:ec:a7:29:1a:bd:df:98:c6:de:82:68:a1:f6:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: May 10 23:00:42 2025 GMT
            Not After : May 11 23:00:42 2025 GMT
        Subject: CN=c7e8e0c09c0632bf36490615ddf930fabb106acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:b6:a0:a4:47:5b:03:8e:84:8d:3c:9a:69:
                    45:71:95:d0:98:6b:00:fe:bc:7b:fb:d6:0b:f6:4f:
                    1d:21:5d:c6:60:7d:b9:fc:d4:9a:66:f3:15:6c:f2:
                    3c:e0:49:66:83:93:ac:b5:1f:c0:f5:40:f9:81:f2:
                    2a:2b:7d:4d:48:3a:6c:61:07:0e:07:e3:15:bd:9b:
                    da:14:08:67:b2:ae:06:0b:44:61:84:04:d3:48:5e:
                    da:8c:06:f1:93:9f:c4:45:e0:49:8d:08:16:a5:e6:
                    91:e8:a3:3d:ee:c7:52:30:ba:29:4c:9e:04:6f:05:
                    8a:cb:21:a0:b8:31:35:18:51:53:18:7b:c3:d0:93:
                    2c:7c:32:a8:dd:51:3b:58:c5:ad:90:b4:c2:61:90:
                    b2:4f:28:87:f3:24:9a:58:1d:ce:fd:d3:08:02:7b:
                    c3:d8:5e:3b:97:da:6e:0a:4a:92:64:a2:d7:3a:c2:
                    a0:df:f1:d3:d5:fc:04:3d:f8:8f:e2:a9:4e:13:63:
                    78:aa:fe:68:88:fc:ee:88:18:3e:c5:b7:1c:d2:28:
                    45:65:eb:28:74:5d:da:8f:18:1e:7b:9a:44:6a:80:
                    c0:55:46:54:ae:6b:b8:fa:6d:6a:58:dc:2b:eb:e3:
                    6e:7a:bd:87:5f:c1:dd:45:9d:ac:d7:83:46:ef:45:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E8:E0:C0:9C:06:32:BF:36:49:06:15:DD:F9:30:FA:BB:10:6A:CF
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:0e:ce:25:ed:dc:2f:9b:71:cb:73:c3:59:5a:3f:b5:aa:
         fd:23:52:d8:b5:de:e2:6f:df:22:0b:0f:35:21:6c:95:57:a0:
         d8:48:d7:dd:55:c6:83:6c:af:b3:5e:95:de:0c:b1:dd:f5:ca:
         e7:27:2e:84:54:c0:29:43:bd:72:b4:41:58:25:1a:66:fe:34:
         e5:fc:67:3d:aa:d9:eb:ab:83:40:59:5a:72:1e:29:57:47:e8:
         0f:34:e2:82:64:89:b3:25:f9:eb:66:93:ea:f9:eb:f1:8e:7b:
         0c:76:47:c1:40:b8:58:84:a6:01:2a:34:52:85:9c:69:fd:5a:
         e3:6a:35:bc:25:f3:1c:83:7e:e3:a6:6f:f0:b9:34:37:f6:e5:
         aa:2d:91:70:3b:d4:bc:12:d8:b5:10:26:6d:cd:6c:f0:6c:30:
         4a:94:d1:28:ec:d0:92:70:db:b0:30:39:a9:d4:10:08:9b:a0:
         65:98:7c:dd:e8:ec:11:ec:e1:9c:d6:a3:7f:22:88:d8:5a:d6:
         20:ba:46:31:86:e0:f5:20:9c:24:c0:83:b2:44:33:f6:ab:f7:
         6e:e0:d8:dc:7b:55:d1:ce:d7:cd:38:16:8e:58:f2:2a:f2:43:
         1b:3d:d1:36:ac:fb:49:64:fa:57:67:1e:7f:66:56:4c:42:f0:
         fb:8b:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:46:55 2025 by rpki-client