Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          iNXGBlAOjyjK7n58vWlODOgW7BpXODBXw+PmUi7VXkE=
Subject key identifier:   6C:FA:D4:60:4F:40:FC:08:5B:9B:65:E3:3E:7E:0B:06:24:74:1A:AE
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       01969DF588E9D712597DA29583FF57ED3441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          1528
Signing time:             Mon 05 May 2025 01:00:36 +0000
Manifest this update:     Mon 05 May 2025 01:00:36 +0000
Manifest next update:     Tue 06 May 2025 01:00:36 +0000
Files and hashes:         1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
                          2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: XcyEQQ4HNbWOWyMXW490naU+erpXR+qtDQXP3oKEhlI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f5:88:e9:d7:12:59:7d:a2:95:83:ff:57:ed:34:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: May  5 01:00:36 2025 GMT
            Not After : May  6 01:00:36 2025 GMT
        Subject: CN=6cfad4604f40fc085b9b65e33e7e0b0624741aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:07:33:0e:29:82:4a:eb:d4:50:1b:89:e7:
                    23:5a:76:78:34:dd:89:5f:70:cd:b7:46:c4:77:5e:
                    5e:69:90:68:b7:ac:12:c1:24:04:1f:5b:95:26:b2:
                    44:71:ff:6a:17:73:94:1d:76:72:d3:6e:e0:9b:c2:
                    16:ef:a2:35:bf:32:5a:24:16:1f:8e:ff:dd:70:14:
                    c3:00:6c:10:f7:9e:18:1a:09:08:f8:72:fc:8a:db:
                    fe:84:2d:78:84:e1:19:a2:65:b8:7b:eb:a3:fa:97:
                    65:ba:d1:f1:00:16:fb:a1:94:79:73:e3:93:44:a6:
                    f3:00:8f:c8:c3:a4:bb:8a:62:6c:9d:b4:32:63:f2:
                    3e:b8:2f:fa:ba:72:ac:eb:ea:de:cd:ef:c7:d5:95:
                    f3:a9:2e:0f:94:d4:4f:6e:1f:95:1a:30:a1:91:b0:
                    39:dd:52:c8:3f:8a:c7:87:e2:40:22:b1:b5:d4:13:
                    df:65:3c:d8:de:a5:97:fd:15:6e:fa:43:e3:d1:ca:
                    30:89:46:15:12:bf:80:19:fe:36:4e:12:e6:a9:c3:
                    c4:7d:fd:bb:f8:71:81:12:fe:21:54:1e:e6:d9:59:
                    ac:84:04:c8:a8:8d:f6:35:23:29:3a:34:fb:ab:32:
                    d7:76:8b:e0:4d:4a:fc:18:63:44:46:75:3a:a0:91:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FA:D4:60:4F:40:FC:08:5B:9B:65:E3:3E:7E:0B:06:24:74:1A:AE
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:ad:6f:54:c1:31:e3:8f:5d:7f:86:67:cf:5c:10:6f:62:
         48:2c:ab:d7:58:78:4e:b4:ca:62:51:c8:af:ec:86:b7:79:48:
         69:0a:61:72:25:9f:d0:52:37:05:99:d8:13:c3:a7:89:15:53:
         1d:42:61:8d:1e:a5:fa:06:e8:73:94:94:34:5b:0d:44:6d:8e:
         12:0b:a9:21:6b:e1:ea:7e:81:bb:01:5a:f7:fa:e6:09:52:dc:
         42:54:58:f5:be:b5:b0:ee:59:ad:ec:2f:c1:34:f3:60:10:15:
         f6:23:3b:17:87:4a:2f:24:d9:46:3c:cb:6d:fe:3d:57:30:f6:
         77:1f:12:ba:5e:6f:c1:63:79:59:27:eb:9f:ba:b7:b3:c8:3c:
         62:f8:32:39:1f:21:95:a6:99:46:0a:9d:cc:5f:9a:23:fd:53:
         f0:d7:50:cd:1f:f1:0f:6a:86:36:ff:7e:4a:98:11:06:9d:29:
         9a:8d:3f:a1:c5:19:88:b1:04:7e:28:f2:52:c3:8e:b8:44:6d:
         47:c3:96:e5:58:ac:9c:f6:66:25:bb:30:4e:00:39:3d:c2:58:
         fd:d2:52:18:67:ff:90:0a:6c:aa:ea:19:83:be:0e:a5:8b:93:
         01:cb:5b:8e:6b:dd:55:c8:66:01:d5:70:05:28:75:d6:74:b5:
         c8:5d:8a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZad9Yjp1xJZfaKVg/9X7TRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj
NmIzNTAwHhcNMjUwNTA1MDEwMDM2WhcNMjUwNTA2MDEwMDM2WjAzMTEwLwYDVQQD
Eyg2Y2ZhZDQ2MDRmNDBmYzA4NWI5YjY1ZTMzZTdlMGIwNjI0NzQxYWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a8HMw4pgkrr1FAbiecjWnZ4NN2J
X3DNt0bEd15eaZBot6wSwSQEH1uVJrJEcf9qF3OUHXZy027gm8IW76I1vzJaJBYf
jv/dcBTDAGwQ954YGgkI+HL8itv+hC14hOEZomW4e+uj+pdlutHxABb7oZR5c+OT
RKbzAI/Iw6S7imJsnbQyY/I+uC/6unKs6+reze/H1ZXzqS4PlNRPbh+VGjChkbA5
3VLIP4rHh+JAIrG11BPfZTzY3qWX/RVu+kPj0cowiUYVEr+AGf42ThLmqcPEff27
+HGBEv4hVB7m2VmshATIqI32NSMpOjT7qzLXdovgTUr8GGNERnU6oJFqyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGz61GBPQPwIW5tl4z5+CwYkdBquMB8GA1UdIwQY
MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt
YTU0ZWMwZDY4ZmE4LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4
LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFStb1TB
MeOPXX+GZ89cEG9iSCyr11h4TrTKYlHIr+yGt3lIaQphciWf0FI3BZnYE8OniRVT
HUJhjR6l+gboc5SUNFsNRG2OEgupIWvh6n6BuwFa9/rmCVLcQlRY9b61sO5Zrewv
wTTzYBAV9iM7F4dKLyTZRjzLbf49VzD2dx8Sul5vwWN5WSfrn7q3s8g8YvgyOR8h
laaZRgqdzF+aI/1T8NdQzR/xD2qGNv9+SpgRBp0pmo0/ocUZiLEEfijyUsOOuERt
R8OW5VisnPZmJbswTgA5PcJY/dJSGGf/kApsquoZg74OpYuTActbjmvdVchmAdVw
BSh11nS1yF2Ktw==
-----END CERTIFICATE-----
Generated at Mon May 5 08:17:10 2025 by rpki-client