Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File:                     tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier:          oD02TRQ/KyQGSsp6Vk0tEoUfSPcWiQB0ZMIUiRM0T8k=
Subject key identifier:   08:AF:E5:AA:1D:25:CC:13:83:32:BF:00:0A:DB:88:0A:DA:8C:5F:47
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer:       /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial:       0196BA7F10B609B5797AE0064C48ECF4D86A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number:          1539
Signing time:             Sat 10 May 2025 14:00:11 +0000
Manifest this update:     Sat 10 May 2025 14:00:11 +0000
Manifest next update:     Sun 11 May 2025 14:00:11 +0000
Files and hashes:         1: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (hash: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=)
                          2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: yjboau88gzZLS+s7lh94AkLu903yH9nWXHJ1MGtQe9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:7f:10:b6:09:b5:79:7a:e0:06:4c:48:ec:f4:d8:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
        Validity
            Not Before: May 10 14:00:11 2025 GMT
            Not After : May 11 14:00:11 2025 GMT
        Subject: CN=08afe5aa1d25cc138332bf000adb880ada8c5f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4a:4a:3a:67:0b:af:10:35:9f:ff:b2:e6:68:
                    c6:9a:35:2e:cd:52:10:20:81:88:d7:dd:ab:49:48:
                    ef:a5:a8:ae:52:28:b2:23:fc:6a:86:ce:d9:db:1e:
                    f5:97:2e:f7:e6:a8:ec:74:36:bf:6b:51:80:4d:6c:
                    f0:8f:4a:60:9b:67:1a:45:96:48:39:df:9c:4e:9a:
                    2f:66:28:b0:84:b2:b7:c3:b7:05:c6:07:cc:ce:48:
                    69:f9:05:d4:88:84:48:03:f6:b5:4a:00:7f:1d:1c:
                    9d:4a:7c:25:99:fe:8f:32:c0:e3:d3:7c:f5:8d:ef:
                    80:9a:bd:61:9d:77:fc:f3:0d:38:f1:11:25:46:56:
                    bf:48:e7:f2:25:e3:89:33:69:22:8d:80:55:51:d8:
                    f2:7c:39:d6:bf:6b:0d:c8:37:6c:ee:66:2f:33:0c:
                    a0:91:68:8a:be:30:2e:69:20:23:cf:55:c2:41:ac:
                    4f:76:6d:35:69:06:d5:9f:f3:cc:56:4f:61:cc:0a:
                    e2:4b:d6:ab:1b:1c:e9:cc:64:fe:9a:dd:78:8e:86:
                    16:26:f5:3b:8f:2f:41:6c:51:b5:23:7f:72:11:3a:
                    93:b6:1d:94:d3:f6:d0:72:55:02:28:d8:77:71:b6:
                    7a:39:7f:ae:52:8b:14:cf:ea:92:bb:a6:70:bf:c0:
                    99:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AF:E5:AA:1D:25:CC:13:83:32:BF:00:0A:DB:88:0A:DA:8C:5F:47
            X509v3 Authority Key Identifier:
                keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:17:98:ef:38:e3:14:3a:d7:71:44:a0:d8:c2:9d:81:6c:71:
         43:c7:98:28:3a:ff:0b:b8:90:97:2f:bf:b6:f4:40:0f:1c:a4:
         d2:95:8c:19:93:af:65:a0:f7:6f:86:26:15:cb:44:df:69:be:
         3b:3c:55:fd:51:e5:bf:b9:ba:b2:85:3d:87:52:a4:36:d6:c0:
         7d:82:5b:e9:09:f6:81:6f:2d:c6:69:db:c0:06:04:5a:8b:55:
         d7:29:f1:2f:3f:cd:80:66:be:9e:45:4a:7e:ce:d0:64:bc:07:
         0a:b8:a3:0a:9d:7c:4f:b4:2a:4e:ee:7a:45:03:b7:83:3d:db:
         f9:cb:e3:69:9e:3f:cd:8f:6e:cc:19:b6:1f:3f:84:aa:fd:b7:
         3c:11:b6:74:e1:42:3c:b7:d5:0a:92:fc:3e:30:33:ab:9d:0b:
         cc:c9:33:5c:19:84:55:13:ff:44:46:a7:3d:ee:8c:56:a1:ca:
         6a:8b:15:8a:96:99:f9:8d:a8:5e:ef:4b:a6:70:8a:e4:2c:aa:
         26:e7:3c:2f:c4:83:94:a0:56:5e:30:e8:16:d3:58:81:e0:cc:
         a2:b7:aa:17:70:bb:f3:85:b8:5c:f7:47:9c:5a:52:1c:71:3a:
         6e:d2:cf:9b:a0:d4:3a:67:72:f3:0c:52:96:9c:fe:c3:52:93:
         29:ce:92:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:56:45 2025 by rpki-client