Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
File:                     B6MpmcR-sx1fvxbsw4curv1Dutc.mft (raw, json)
Hash identifier:          aDeQgh+76IxAs0FCvMb7Vz3HeZrUrXcWT5ueZxS+7ok=
Subject key identifier:   1B:96:68:2E:AD:70:C8:3C:EF:01:00:75:97:A0:0B:85:4D:34:BF:C0
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Certificate issuer:       /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial:       0196A509E343399F912866E4BB2587D659D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
Manifest number:          061A
Signing time:             Tue 06 May 2025 10:00:10 +0000
Manifest this update:     Tue 06 May 2025 10:00:10 +0000
Manifest next update:     Wed 07 May 2025 10:00:10 +0000
Files and hashes:         1: 0X1Ipto9w1nE9eagzvuD9O-P6yM.roa (hash: 4sHYt9ffM1owRIY1+dPqOYaSkh7XHYwPkbzwcWqEjcU=)
                          2: B6MpmcR-sx1fvxbsw4curv1Dutc.crl (hash: EsGBVf1+b3LQ+iRv4U1WMelf4b4tzJP/92da6Qj+kas=)
                          3: SQDJFyKznGtCKVmkEUnYaLhptpU.roa (hash: XEPlk5OXn/XLJYfgloRDlJ7X9N7ypjZHyh9xzsTH0Bw=)
                          4: gfOuYPIFKu1t4LchnV-tiQ23x_o.roa (hash: MaDF2nJtr0HdC25PICF1gfuevH1AQFouYi3XzrLGpak=)
                          5: lJbNpjDeQwgeWqfPEZgDDfSTgqk.roa (hash: XMlSfbRCxrO9BsObz26QxJ616CDdqXCBLUK5IzvxZFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a5:09:e3:43:39:9f:91:28:66:e4:bb:25:87:d6:59:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
        Validity
            Not Before: May  6 10:00:10 2025 GMT
            Not After : May  7 10:00:10 2025 GMT
        Subject: CN=1b96682ead70c83cef01007597a00b854d34bfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:33:4c:e1:77:a1:aa:d4:f1:0a:c1:1d:ed:
                    e7:75:d4:81:fa:6a:e7:74:44:3b:f0:ee:39:fe:20:
                    f6:cc:0e:80:a1:0a:be:0e:e2:ac:a6:a4:27:af:45:
                    a7:58:06:52:d3:18:a7:21:4f:d1:02:03:a8:a0:68:
                    37:2c:37:1c:ba:83:dc:00:07:b6:f8:e7:0f:0a:52:
                    3f:03:18:10:4e:57:2a:99:30:cc:a7:ea:77:3d:a0:
                    e4:ba:be:21:8e:a0:74:4e:32:06:99:eb:49:63:73:
                    2c:bc:8c:ce:9b:00:08:f0:be:d5:ca:22:12:a5:ee:
                    7d:41:3c:b3:ab:04:da:37:c1:9e:8b:7b:40:16:27:
                    c9:9e:1a:eb:96:86:de:92:a5:24:8f:94:12:cc:71:
                    3f:93:f8:55:0f:14:a1:0a:80:8b:95:52:e4:b2:6a:
                    2f:50:c9:0b:c3:29:0d:23:71:07:74:92:82:4b:fd:
                    72:7a:18:1a:a5:c5:fa:eb:52:0c:e9:71:97:8a:e2:
                    77:94:0c:55:e4:31:fc:64:cb:c5:60:81:dc:7f:91:
                    be:23:bf:16:ce:f5:58:6d:93:43:af:e1:b2:e9:78:
                    64:82:0b:66:bd:e5:cf:85:c0:26:28:c2:23:dd:a1:
                    5b:e3:60:d6:23:7a:29:68:a5:5a:ba:1e:84:25:1c:
                    24:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:96:68:2E:AD:70:C8:3C:EF:01:00:75:97:A0:0B:85:4D:34:BF:C0
            X509v3 Authority Key Identifier:
                keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:12:a7:be:16:23:28:4a:33:9c:11:66:49:6a:bb:df:89:
         bd:0b:76:b7:ec:e1:e2:2a:a1:37:26:85:73:7d:58:6e:b5:4a:
         af:5a:87:3a:15:a4:c9:2c:34:ec:0a:d6:2a:fa:28:78:41:56:
         fe:02:50:55:46:a1:3f:be:07:a4:8c:0b:4a:f1:e5:fc:af:bb:
         6c:8e:94:80:be:0a:d5:09:1b:34:63:88:01:a7:31:05:5a:d7:
         e0:9c:e1:ab:94:f7:68:9d:9f:de:f8:33:5e:10:ce:18:83:10:
         08:96:9d:42:b1:91:f5:1d:06:1e:cb:18:b6:6d:4c:bd:8f:a1:
         ec:ef:10:58:58:e7:04:54:a5:0d:91:95:b6:67:d1:b6:cb:c3:
         a8:1e:9d:9c:35:d7:28:53:e3:85:a0:c9:3c:28:d9:e9:4a:e6:
         d8:ad:cc:9f:d0:d0:25:e2:ff:fc:d8:44:cb:20:ad:5c:a6:76:
         ef:11:6a:eb:75:fe:0e:29:49:3e:7c:35:6c:7c:65:bd:83:9d:
         20:18:87:12:b8:f0:65:8e:fe:ae:a1:33:ab:19:9a:47:38:7a:
         20:b0:72:8b:6b:fb:59:c7:8c:0b:b1:3a:00:10:57:7c:f2:bc:
         ef:83:3e:87:3b:8e:c8:4d:be:cb:01:c6:f9:fc:e5:62:74:79:
         a2:e4:1b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:01:37 2025 by rpki-client