Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File:                     bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier:          1vZ64ClcFyefu/LAUQ14hNZeCKri5UM0fKP4Kq4m/ZU=
Subject key identifier:   D2:AD:84:36:C2:1D:32:58:FC:11:7F:33:07:DD:4D:F6:E6:01:C8:FD
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer:       /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial:       0196D2F5C22A54ED10661BC38E2C9B5503BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number:          0B11
Signing time:             Thu 15 May 2025 08:00:43 +0000
Manifest this update:     Thu 15 May 2025 08:00:43 +0000
Manifest next update:     Fri 16 May 2025 08:00:43 +0000
Files and hashes:         1: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: 2j2I/oCgsjNEnWv+a9xBP4dI+WJMuI/Qa6GEBHlQO/g=)
                          2: kqOQ78t4w6FZpmwe4_k_12IlEMA.roa (hash: HyBjAoXV0kXvavyvJersLyuqJgRnm+q7hrBZfg1KGdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d2:f5:c2:2a:54:ed:10:66:1b:c3:8e:2c:9b:55:03:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
        Validity
            Not Before: May 15 08:00:43 2025 GMT
            Not After : May 16 08:00:43 2025 GMT
        Subject: CN=d2ad8436c21d3258fc117f3307dd4df6e601c8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:52:ba:be:12:e8:2c:91:b1:5f:ec:6a:da:
                    94:d6:a9:86:a0:10:d7:a2:d0:57:c5:d8:1f:7e:d5:
                    73:14:18:54:9a:d9:8b:74:b2:cb:d3:4b:1a:b2:31:
                    e5:9b:2e:3a:79:09:a4:f2:6f:f2:f5:b4:cc:f5:1c:
                    a4:c7:a2:73:be:40:24:ff:7d:2e:fe:f8:0e:c8:79:
                    31:26:6e:87:f5:2a:88:3b:a5:cc:bf:3d:d9:b0:5c:
                    5c:21:90:81:0d:9f:95:84:98:98:bb:91:50:b6:9d:
                    40:ef:70:a6:8d:89:9f:31:16:21:83:58:af:73:1d:
                    a9:cf:51:54:4c:8e:90:2d:f8:2c:1b:2e:ad:80:e8:
                    d0:3c:47:b3:21:1b:0c:cc:76:da:d1:55:ba:54:7d:
                    ea:e3:ad:56:fc:e2:a4:d1:e5:e2:41:fb:b2:33:76:
                    d4:0a:14:45:02:ae:45:ad:e0:59:dd:fc:a8:c5:e3:
                    83:6e:d5:11:62:35:6c:8a:97:81:7f:92:00:1e:7e:
                    c3:22:a2:8b:44:b5:c5:49:4a:6d:1c:79:86:9d:9a:
                    9c:1e:e0:b2:7e:47:10:a8:77:c9:03:da:83:19:c1:
                    98:38:e3:9d:e4:15:51:cf:5b:62:01:87:c7:53:5f:
                    f3:84:c8:3d:08:f2:1e:06:77:23:9a:9e:70:7f:d3:
                    3b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AD:84:36:C2:1D:32:58:FC:11:7F:33:07:DD:4D:F6:E6:01:C8:FD
            X509v3 Authority Key Identifier:
                keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:5e:46:28:43:4e:b5:0f:9d:e7:c7:0b:a6:43:12:b8:50:d1:
         30:2f:46:02:9a:d2:61:15:65:ef:b7:ce:1a:16:6c:5c:bb:5b:
         ff:71:0a:53:f4:06:6c:c8:8e:0a:c9:04:ff:e5:99:bc:85:05:
         56:bc:67:85:a3:19:92:06:d3:e6:e8:3f:7d:b4:34:4b:ce:e3:
         0e:81:6c:61:56:78:4a:eb:4e:05:c1:2e:d3:88:1a:5e:82:9c:
         cd:3c:1b:3a:3c:73:93:fb:44:69:aa:b5:8c:96:8b:6f:ea:32:
         7b:db:a9:1c:06:66:01:f8:23:64:23:f4:01:35:b4:70:10:7a:
         ff:cb:28:b4:a8:be:ff:93:19:5b:ee:35:8a:d8:7d:38:77:80:
         25:73:e0:dd:eb:4b:ed:e1:06:bd:fe:ab:a7:23:c7:66:87:27:
         71:b5:cd:b7:e0:a8:94:ae:c2:d1:34:c4:c0:a0:d7:02:13:a3:
         9a:03:c6:5d:b3:6f:d4:2c:8f:62:b0:c1:e5:87:0d:f7:71:9a:
         17:c1:bd:cd:4f:b4:71:31:61:50:c6:d6:d4:cc:22:34:9a:16:
         a0:92:3b:f6:6f:8d:8c:e5:b8:aa:d3:4d:82:5a:81:ff:b3:4b:
         62:d8:61:52:e4:4d:11:de:f3:b7:59:28:77:e2:31:3e:3f:c6:
         c5:9c:76:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:36:26 2025 by rpki-client