Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          eiVV4HdfhQoeIEpgVm9jm+Aa7WuNWs1ywbW9+A5V/9M=
Subject key identifier:   19:F0:B4:25:E0:07:4C:C2:D6:0F:26:C2:7E:C9:ED:82:E3:E6:7F:12
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       0196B2C60C241A13D2EDDD0D2B41B48C61CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          12EC
Signing time:             Fri 09 May 2025 02:00:45 +0000
Manifest this update:     Fri 09 May 2025 02:00:45 +0000
Manifest next update:     Sat 10 May 2025 02:00:45 +0000
Files and hashes:         1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
                          2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
                          3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: mbuQMEhCImoC2DiIw+W9eRO2GEk8m5ZagFklVL9FAqk=)
                          4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
                          5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:c6:0c:24:1a:13:d2:ed:dd:0d:2b:41:b4:8c:61:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: May  9 02:00:45 2025 GMT
            Not After : May 10 02:00:45 2025 GMT
        Subject: CN=19f0b425e0074cc2d60f26c27ec9ed82e3e67f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f0:cd:be:59:b4:a8:3a:be:13:34:c8:42:0e:
                    4e:e5:b7:2a:70:9f:7c:ba:5a:73:da:1d:cd:2c:82:
                    a7:33:f8:2f:d6:8d:b3:28:2b:17:03:1b:84:4b:e8:
                    03:2e:92:9a:50:23:3f:6a:24:b3:0e:7d:7d:5d:93:
                    46:5e:5b:7a:78:20:f8:79:69:af:14:71:23:93:c2:
                    c7:c4:05:70:f8:b9:34:2b:67:5d:d5:08:3c:48:81:
                    21:3d:ae:3f:36:d6:0a:58:75:1f:2f:84:9b:8f:48:
                    0f:19:eb:4c:a9:ac:0d:f0:3e:bc:cc:aa:eb:c7:f2:
                    90:ed:75:90:ee:13:d3:17:59:4c:4c:c4:e4:5a:0c:
                    34:bd:7d:d9:af:05:17:1a:74:60:70:f5:e6:92:f0:
                    16:65:56:9b:89:e6:81:55:28:78:70:6e:d8:d4:b5:
                    04:c4:b0:9e:0a:9e:49:7e:e7:55:13:97:1e:16:3d:
                    71:3a:3d:7d:e9:f3:e4:8f:df:86:17:0f:e5:fb:a2:
                    7b:1d:9f:f1:ef:14:19:aa:be:19:72:10:e2:38:68:
                    e1:dd:8e:74:d7:4a:c6:cd:cc:cc:36:88:38:48:5b:
                    5a:15:83:37:00:43:72:1f:5e:35:87:ac:8d:6a:c1:
                    f1:55:c3:e7:00:e1:54:4f:ba:3b:3f:72:24:43:8d:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F0:B4:25:E0:07:4C:C2:D6:0F:26:C2:7E:C9:ED:82:E3:E6:7F:12
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:81:3e:99:4b:dc:b9:68:75:bb:fe:bf:26:83:ab:50:d4:44:
         34:a8:bf:f7:1e:f1:3a:a1:5d:87:ca:2a:0d:6b:85:5b:d0:e9:
         04:35:83:bd:25:e5:22:4b:6c:e6:d2:80:b2:9d:8b:2b:95:74:
         18:66:c3:6f:25:aa:12:9f:31:cf:43:b4:7f:9a:3b:67:76:95:
         51:b4:42:d9:a7:b4:a6:51:6e:0e:50:45:20:7d:24:d5:6e:31:
         79:0d:6a:2f:f1:82:ec:46:fd:64:44:ab:c3:2f:e2:7b:53:bc:
         eb:6e:9b:1e:92:8e:e5:51:b8:05:30:df:d4:53:42:bd:27:e3:
         84:e7:f0:e2:a0:f0:6f:55:93:52:c4:70:32:3a:c3:07:e2:e0:
         42:1f:9e:04:79:8f:c2:64:94:4f:ae:09:23:b0:b7:1d:71:80:
         fd:31:62:94:98:c9:e4:2b:c5:c9:30:f0:2b:8b:81:ab:21:41:
         df:07:d5:d9:27:b4:1b:9a:2f:99:42:bf:62:ce:20:f7:d3:1d:
         a1:c8:3c:97:a2:b1:61:ed:bc:d5:08:82:d2:d7:47:5c:6a:a3:
         bf:db:51:ff:84:00:8a:b6:37:c2:b3:a3:61:b0:25:49:98:2c:
         a6:69:c1:9b:2c:38:aa:15:0f:8f:d5:3a:51:95:0b:0a:4c:0a:
         83:76:c2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:09:16 2025 by rpki-client