Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          frblu47d/pzDVKpN7S3fRGfByJqGhPpqHqSbL4d9H4c=
Subject key identifier:   5A:68:32:FB:00:C5:09:8D:07:BA:2B:9D:B7:83:F9:0E:D7:FF:D8:15
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       0196B7B534A8FE4590D6368389F308F203C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0223
Signing time:             Sat 10 May 2025 01:00:28 +0000
Manifest this update:     Sat 10 May 2025 01:00:28 +0000
Manifest next update:     Sun 11 May 2025 01:00:28 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: iUOeAsUl4cbnpzl70C5DYLAr2mQgJg3xjfX0f8M9x8o=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:b5:34:a8:fe:45:90:d6:36:83:89:f3:08:f2:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: May 10 01:00:28 2025 GMT
            Not After : May 11 01:00:28 2025 GMT
        Subject: CN=5a6832fb00c5098d07ba2b9db783f90ed7ffd815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6b:08:a5:bf:47:4e:a9:24:59:fe:ff:d2:b1:
                    b7:ac:e6:18:b0:80:e1:15:de:28:68:42:db:2a:7b:
                    e0:92:be:14:3f:e7:10:22:10:10:70:d9:80:b8:d9:
                    1b:14:60:33:34:98:18:fa:f2:db:a4:d1:16:67:5a:
                    ef:6a:77:72:0d:45:3e:af:f3:df:56:fa:eb:0e:05:
                    80:c0:11:b6:5e:8d:d4:7b:7c:8e:01:60:15:ee:2c:
                    97:ec:51:6d:7d:76:75:8c:c3:ec:0b:4c:0f:b4:ec:
                    00:c9:52:ef:19:03:09:d7:68:52:c3:6a:f2:35:b8:
                    04:cf:5c:5e:7a:01:bd:5d:20:a6:85:c5:91:92:78:
                    4d:70:da:16:7f:d7:84:aa:f5:d6:92:ca:99:d8:9a:
                    58:7b:35:cb:ba:4d:63:f8:f8:16:82:01:97:e6:9d:
                    cf:57:92:11:39:87:95:57:ac:a5:07:12:e4:7f:d5:
                    76:2d:99:8a:96:93:dd:77:66:92:f4:85:17:c0:2e:
                    82:21:c2:e7:c0:f9:91:86:a5:a7:7b:5d:c7:1a:2d:
                    97:ff:f1:59:1d:dd:06:a0:c7:a7:b1:76:83:de:70:
                    aa:75:ff:7e:4e:a7:4f:6f:ab:2e:49:d7:88:0d:82:
                    19:1a:46:27:56:91:67:68:96:21:23:7c:55:69:76:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:68:32:FB:00:C5:09:8D:07:BA:2B:9D:B7:83:F9:0E:D7:FF:D8:15
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4e:00:57:0e:3a:a1:f0:8c:05:65:29:43:75:c0:44:d7:86:
         84:7f:ee:5b:74:93:6e:55:cb:b4:2b:95:01:da:aa:b5:8d:18:
         5b:b7:25:5c:11:5b:d1:65:20:d2:69:bd:61:b5:09:aa:05:55:
         7d:b2:fb:79:e9:4e:bf:b1:51:02:4f:5a:90:a3:7c:9b:26:17:
         7c:92:74:a7:fd:87:8c:e8:e0:68:d3:22:d5:68:71:49:10:a3:
         ff:fe:d3:a4:2c:82:f4:c5:62:ec:88:68:4b:df:a2:41:a6:10:
         c7:52:52:f6:df:d1:92:d2:e8:54:29:04:bb:c5:89:a0:3c:b7:
         01:d5:5f:08:0d:70:c1:32:ee:8a:cd:1c:a5:04:9e:10:b9:f6:
         12:5c:be:d0:d3:0f:72:34:2b:21:a0:e9:f1:88:a2:0b:03:18:
         25:e3:f2:66:e5:f9:22:ca:b9:d1:9f:b3:f7:f8:1a:86:9d:04:
         07:92:34:2e:26:b8:a8:b9:aa:66:7b:00:5f:c5:7c:2e:f6:37:
         97:7d:9c:2c:f1:4d:02:65:37:85:dc:58:d3:96:10:cf:a7:c2:
         39:b2:71:ac:07:dc:67:6b:5e:a0:97:a5:61:57:4a:d4:64:5d:
         3a:3e:f4:5d:b0:b1:35:b2:a7:73:25:6c:27:94:81:df:63:3d:
         d2:b2:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:34:21 2025 by rpki-client