Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          BV0UatJUW8A+xjZqAyYvYAi0aQEcnIyDEfjDWeDsdvI=
Subject key identifier:   E1:E8:7E:9F:42:79:E8:FF:73:21:3B:28:19:AA:0E:8D:9E:4E:B3:A6
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       0196BB5AEE0C2E8CA43545BC8B7E7E8D27F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          1533
Signing time:             Sat 10 May 2025 18:00:20 +0000
Manifest this update:     Sat 10 May 2025 18:00:20 +0000
Manifest next update:     Sun 11 May 2025 18:00:20 +0000
Files and hashes:         1: Ciu6VIqlt_xKrbAE5HXa7sI9yIo.roa (hash: GBLv2kj+5/bD+8oVDkrec3Xg5+JexPkwOskhgAEq7iw=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: kBZYvlO65WOJBo6gDInW/M0akzgeEvxSiajKv1tdL1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 18:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:ee:0c:2e:8c:a4:35:45:bc:8b:7e:7e:8d:27:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: May 10 18:00:20 2025 GMT
            Not After : May 11 18:00:20 2025 GMT
        Subject: CN=e1e87e9f4279e8ff73213b2819aa0e8d9e4eb3a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e6:0c:d1:49:e8:63:07:77:12:de:84:01:37:
                    d8:18:7b:70:41:83:08:9b:ed:da:e6:3e:0c:0b:21:
                    74:11:90:2a:94:1b:47:c9:55:82:38:80:8d:0f:13:
                    01:eb:4b:0c:66:b3:05:a7:32:2e:da:c4:71:ef:d1:
                    5a:b9:c8:ea:34:1f:15:42:da:f6:8f:6c:89:24:e5:
                    bc:94:6a:6c:15:b9:d7:0d:ca:7d:51:a3:7a:15:40:
                    26:43:27:54:38:3f:e9:c7:99:36:17:54:70:a3:24:
                    6a:93:47:7a:db:eb:8a:00:89:ad:3b:36:af:a5:29:
                    64:7a:0a:08:4a:39:98:35:45:f0:e2:0c:d2:c6:52:
                    23:cc:85:e0:f7:a4:71:51:cd:d6:c7:b7:9c:ca:09:
                    1b:7f:19:a4:72:01:64:5e:33:10:bf:2b:93:eb:e2:
                    62:0a:d1:08:6e:b7:ec:f8:fe:07:cb:df:d6:da:0f:
                    d2:ad:c8:22:36:98:c7:59:06:4a:3c:18:9d:e3:7a:
                    1e:9c:6d:6a:3c:cd:5d:66:81:23:da:76:52:28:c6:
                    ab:46:7a:a9:b8:75:90:4f:45:2d:04:78:95:d2:c0:
                    74:52:f9:9f:bc:14:11:53:45:0f:fd:74:5e:9d:52:
                    1a:6e:32:3d:15:2c:3f:60:8d:fd:f5:41:a9:d3:2b:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E8:7E:9F:42:79:E8:FF:73:21:3B:28:19:AA:0E:8D:9E:4E:B3:A6
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8e:df:65:04:9f:3a:0c:60:e5:6a:06:c4:fe:8a:e9:b7:26:
         2b:d8:c8:6e:97:70:6a:42:96:77:5b:0b:de:9c:02:d5:38:43:
         67:1d:c0:09:b9:51:40:c4:81:d7:fe:04:85:d4:d6:03:73:27:
         32:b4:79:5d:6a:dd:2a:03:3a:b1:ec:54:56:2b:90:37:63:65:
         6c:78:28:d6:0d:87:12:3f:51:ff:16:1e:53:0b:be:12:36:ff:
         88:53:8c:bd:b0:20:bf:39:a3:8e:69:33:50:a9:29:c5:ab:53:
         19:7f:85:36:d0:8d:20:ce:e7:36:48:df:0f:bc:fe:73:7e:f6:
         bd:ec:0f:4a:a9:5c:b2:f5:19:dc:03:5c:0b:45:6b:18:85:be:
         e5:66:6f:d5:2d:a2:39:aa:60:2a:1b:1d:fe:62:ec:30:b4:f3:
         8d:dc:65:b2:cd:dd:15:3b:be:57:62:70:92:51:3b:2f:6a:46:
         59:b7:12:73:5d:f4:37:a7:ff:11:17:f8:7f:c3:f4:10:1b:39:
         6b:62:62:47:21:9a:2b:95:db:58:41:b6:87:87:12:a3:f5:78:
         ef:03:03:e1:d4:3b:bd:6a:95:02:2d:78:29:ba:73:60:a4:d0:
         c8:3c:7f:5d:e2:8e:d8:15:af:34:85:b3:66:9e:e8:08:3a:30:
         20:d5:40:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:36:03 2025 by rpki-client