Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          E9byvkfoTDXaKj0cYd+71DqzVfLRb7k6VLTLTX66FAg=
Subject key identifier:   EC:AE:8A:AA:91:60:21:31:B2:6C:33:91:1B:6F:39:13:52:20:D5:D2
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       0196C6160BCCCA873C30542DAAB4804182AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          046C
Signing time:             Mon 12 May 2025 20:00:55 +0000
Manifest this update:     Mon 12 May 2025 20:00:55 +0000
Manifest next update:     Tue 13 May 2025 20:00:55 +0000
Files and hashes:         1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
                          2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: donDGpRy/eI4Q3Y86BP5MRc2V8FcATWLwAy1YY3gLgc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:16:0b:cc:ca:87:3c:30:54:2d:aa:b4:80:41:82:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: May 12 20:00:55 2025 GMT
            Not After : May 13 20:00:55 2025 GMT
        Subject: CN=ecae8aaa91602131b26c33911b6f39135220d5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:67:48:6a:6f:d4:ac:cc:ff:1f:07:72:af:41:
                    25:a3:29:26:a5:f2:b2:fb:70:e2:0f:39:28:db:74:
                    b4:13:20:6f:49:c7:1d:6b:ec:56:1b:53:34:9d:ae:
                    c1:a9:fd:a8:b2:43:37:3f:16:9a:48:7c:5a:41:f3:
                    a9:33:49:84:bd:89:30:14:6b:a5:7a:4d:1e:0b:09:
                    df:69:28:ac:bf:36:98:df:8d:b2:8c:e4:eb:c5:d9:
                    72:cc:e6:91:bd:21:7f:36:bd:c1:88:87:29:87:30:
                    f5:22:77:a2:8c:30:97:d4:31:27:86:a9:b9:dd:34:
                    65:43:ff:1b:21:fb:b2:d6:e6:0d:ae:f8:06:ee:c4:
                    e5:44:25:ce:23:c1:d1:46:89:ea:4c:e6:e8:44:69:
                    0d:02:80:63:c1:95:3f:44:2d:32:46:e2:d5:75:2d:
                    e6:b3:64:0e:36:e1:7b:16:c7:5a:c9:f8:21:21:78:
                    5c:54:9c:ca:83:f5:76:00:d4:d9:6d:fa:c3:36:b7:
                    bb:b9:b7:27:06:9a:41:48:16:b2:54:f2:2e:41:ad:
                    86:76:f2:4f:63:f7:74:9c:f1:93:aa:49:52:59:fa:
                    70:57:2f:93:5a:97:99:c9:af:7a:1b:c1:d8:bc:ec:
                    ac:d2:65:6c:5b:97:35:8d:63:81:93:ab:22:3b:44:
                    e3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:8A:AA:91:60:21:31:B2:6C:33:91:1B:6F:39:13:52:20:D5:D2
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:54:5c:d1:fa:73:c0:20:e8:7f:d1:ed:ce:31:c0:fa:9b:0a:
         e4:81:b9:3e:6a:c8:0c:c6:fe:10:59:47:26:90:69:03:56:35:
         ed:9e:18:f4:57:5a:c5:82:45:5b:a2:4f:77:d8:61:c4:46:38:
         35:95:b5:80:15:a6:5d:dc:fa:fd:9a:c7:bc:2e:60:c3:ce:3a:
         0d:55:7e:27:d4:3c:f4:76:73:bc:78:23:fc:a7:51:0d:6a:17:
         a3:41:aa:e5:70:18:1d:42:e0:de:17:15:ae:59:3b:08:89:61:
         15:30:a8:f3:63:c9:b8:56:66:46:33:aa:a5:9b:cf:4d:44:3b:
         70:e6:ba:a5:fa:4d:09:99:d7:fa:8b:f1:3e:c6:5c:f4:a0:82:
         ea:49:b6:1b:8a:dd:00:3e:d3:5c:15:67:08:51:3d:73:94:0b:
         db:4c:f2:cb:f7:b1:f0:ca:99:ec:81:dc:84:91:73:6a:24:da:
         94:15:62:a4:3c:4c:5c:8a:80:83:9d:01:01:ca:58:62:69:b9:
         11:27:be:2a:10:f6:1e:64:39:82:c7:15:79:40:4a:ba:33:8f:
         e3:83:81:6b:87:3c:89:52:07:28:59:2b:2a:f9:6f:9f:a8:43:
         49:72:fa:e7:b6:b7:80:4e:3d:7c:5f:d8:7c:63:eb:b3:6c:62:
         bf:f3:74:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:56:42 2025 by rpki-client