Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
File:                     t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft (raw, json)
Hash identifier:          ZVGTYXo2RtWk+3rk945en6F/iew4iVy65k6VQS3tinw=
Subject key identifier:   EF:ED:B0:95:B1:AE:F0:74:0F:5E:5F:4D:F4:4E:71:87:FF:38:E6:14
Authority key identifier: B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB
Certificate issuer:       /CN=b7a670e51c96419fc52028b12e45655ef914ddbb
Certificate serial:       0196C2A6C94CE44B19B618C473C83F974DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
Manifest number:          133A
Signing time:             Mon 12 May 2025 04:00:32 +0000
Manifest this update:     Mon 12 May 2025 04:00:32 +0000
Manifest next update:     Tue 13 May 2025 04:00:32 +0000
Files and hashes:         1: NsZjsu2WDCD4J07ujcjp4ji-VOU.roa (hash: VU4MSu0eDWsfOu4NUIfDAf48zntyybA1JsYveD+Po8w=)
                          2: gwXTY0LJ22_8yhfOOeJP7JMePkA.roa (hash: C8Ad/tS32eCjtx+fJLVbrf6IcLPHhfeHNWH2HlHojI4=)
                          3: t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl (hash: KeNM0L5da4SrpiKJ6eDigCtTm7fcRIQhGpszr4ln/jA=)
                          4: tYoEMyoFgANiNY7nw4zfzPaPtkI.roa (hash: PX+Kyq98vaXV0wz8tTuZQEWdK7K2Hq3OD8ndatlexb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:a6:c9:4c:e4:4b:19:b6:18:c4:73:c8:3f:97:4d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7a670e51c96419fc52028b12e45655ef914ddbb
        Validity
            Not Before: May 12 04:00:32 2025 GMT
            Not After : May 13 04:00:32 2025 GMT
        Subject: CN=efedb095b1aef0740f5e5f4df44e7187ff38e614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:f8:cc:be:ec:21:3d:13:f4:46:b9:c8:bb:
                    53:d5:08:b3:2d:cf:a7:3b:1e:a8:d0:01:62:e0:b3:
                    1f:a0:42:41:c4:7e:bc:f9:4c:20:67:3d:62:19:59:
                    4c:89:80:ba:c5:d4:98:00:b3:42:28:52:d3:e1:01:
                    a2:0a:62:bc:5f:ab:a0:36:92:7c:65:57:a1:44:df:
                    36:03:58:e0:5b:a6:83:8e:8a:13:2a:30:8b:b2:79:
                    a3:e3:00:95:bf:72:bf:8d:b6:fd:b4:c5:b2:03:64:
                    05:f6:27:49:c9:8d:5f:9e:b3:ca:73:81:ee:55:4c:
                    7c:43:3d:c1:cc:62:c5:0c:58:41:f1:f8:4d:bd:6d:
                    a8:fa:17:9c:4e:d6:31:84:01:cf:d1:2e:a7:05:2b:
                    38:d3:ca:11:a8:21:ee:ba:7c:e4:34:e8:7b:a1:17:
                    4c:7e:84:f8:0b:d4:28:dd:97:41:e4:4d:ff:05:1c:
                    8c:c9:5e:22:dc:56:42:88:52:05:55:cc:dc:58:ee:
                    09:26:79:49:bf:f4:8b:91:ca:cf:f1:f1:48:b2:c3:
                    f4:17:15:2c:59:fd:77:3b:42:27:73:7b:e5:0c:56:
                    42:aa:6f:8f:90:31:3c:05:90:e7:d7:58:c5:61:09:
                    e8:15:13:b1:2f:25:00:ad:d5:51:27:ae:6c:23:a0:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:ED:B0:95:B1:AE:F0:74:0F:5E:5F:4D:F4:4E:71:87:FF:38:E6:14
            X509v3 Authority Key Identifier:
                keyid:B7:A6:70:E5:1C:96:41:9F:C5:20:28:B1:2E:45:65:5E:F9:14:DD:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6Zw5RyWQZ_FICixLkVlXvkU3bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c4ca9d-5d32-4efd-8e1b-132937d39cea/1/t6Zw5RyWQZ_FICixLkVlXvkU3bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:54:35:18:f5:d4:19:81:3c:de:9a:9c:fd:e5:09:1c:44:ad:
         b5:f6:9a:ab:dd:cf:ac:4b:34:95:28:c4:2c:2a:58:fe:2f:3c:
         3b:ae:e1:2a:a3:21:c1:1d:e6:dd:6c:62:4d:14:94:ce:12:32:
         97:c8:de:7c:50:04:9c:63:3d:a8:fb:82:88:41:98:e0:20:d0:
         0b:1e:f1:dc:35:c9:de:bf:1a:2b:7f:d1:61:2e:89:d7:94:1c:
         7e:97:96:aa:f1:45:38:c1:cd:d0:dc:cd:48:55:3e:4b:1f:c2:
         9a:02:45:e1:f7:96:80:54:e2:4a:93:4c:24:ee:d9:58:34:7b:
         a5:29:ff:5e:5b:77:8b:67:bd:fc:bb:d6:5e:7b:ec:88:c1:cd:
         9f:27:e6:bb:40:60:4c:2a:2f:86:16:1d:f1:cf:f0:64:c5:71:
         e7:da:1b:bc:cd:30:d5:e5:b7:4b:68:9a:b0:7e:99:d0:42:ca:
         ce:d4:56:09:8c:e6:53:67:c8:91:c8:d2:6c:e0:00:bc:0c:4a:
         2f:c6:d1:fc:bc:19:fb:df:a2:7f:01:15:4b:53:cd:78:53:e6:
         e4:6a:06:2e:da:c0:f6:ae:4e:3b:60:5f:2b:e0:9a:bc:41:57:
         b8:d9:4f:a5:f6:57:49:af:4f:b9:b1:d1:be:0d:4d:53:51:58:
         83:2f:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:23:32 2025 by rpki-client