Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
File:                     BtCToXdsCFomSP94tM4f5BfFY10.mft (raw, json)
Hash identifier:          r6tUgM12lsAkAOawU5N8cqtILc6ykm1u/PsAOl6gMb4=
Subject key identifier:   38:32:3E:68:9B:FB:5B:23:AC:56:FB:15:19:8F:7F:59:23:3E:80:29
Authority key identifier: 06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D
Certificate issuer:       /CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
Certificate serial:       0196B1E9DBABFC075D6F6753A9985981D215
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
Manifest number:          0F29
Signing time:             Thu 08 May 2025 22:00:15 +0000
Manifest this update:     Thu 08 May 2025 22:00:15 +0000
Manifest next update:     Fri 09 May 2025 22:00:15 +0000
Files and hashes:         1: BtCToXdsCFomSP94tM4f5BfFY10.crl (hash: Xm4TDgybhd9uLJA1Znwulwc1gywsOJu2fMiC1alih6k=)
                          2: O_5t5VnCFqXKQyvXfDwSl3tCQrc.roa (hash: LGWIHzKQHKwDqn81Bc/cH47w3yhqK3S50ixaYRYnDVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b1:e9:db:ab:fc:07:5d:6f:67:53:a9:98:59:81:d2:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06d093a1776c085a2648ff78b4ce1fe417c5635d
        Validity
            Not Before: May  8 22:00:15 2025 GMT
            Not After : May  9 22:00:15 2025 GMT
        Subject: CN=38323e689bfb5b23ac56fb15198f7f59233e8029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:c9:67:39:5a:da:19:eb:47:ee:ba:06:e5:
                    68:a6:5c:e8:4c:27:d5:4e:2b:ff:6d:d5:3a:10:84:
                    da:30:1c:33:ab:13:7b:cd:3f:3e:64:69:14:47:84:
                    4d:bd:fd:69:67:8d:10:4c:ed:80:23:36:f7:06:9a:
                    f3:cc:64:1f:12:0a:10:de:0e:2e:17:94:74:72:bc:
                    ad:46:e3:fe:1b:a9:59:98:19:76:2e:3d:03:36:46:
                    87:4f:51:0c:a9:a4:57:51:09:52:ab:09:a4:0d:ef:
                    9c:93:18:3f:d9:a6:8b:7a:7f:9d:cd:b2:be:45:52:
                    be:44:7f:71:4b:3a:6e:ed:40:13:24:e6:e9:d0:62:
                    bd:e0:36:22:d2:98:66:a0:09:38:ac:ab:e2:9f:5b:
                    00:13:14:48:b0:06:8d:45:40:c8:8d:8e:04:e4:c9:
                    c9:f1:ca:57:6a:e8:76:6b:fa:16:c8:75:10:ea:0d:
                    cd:c1:56:97:10:f2:d5:7a:51:7c:12:75:c1:86:0d:
                    12:2e:ae:1b:9d:cb:5d:d7:a7:ce:38:a4:ef:b2:ef:
                    e1:b9:ed:20:6a:f2:7a:60:d3:c7:2f:7d:3b:6f:d0:
                    cc:c6:9e:f2:eb:dd:51:b8:68:95:4a:17:4b:5d:77:
                    bc:d8:45:66:0a:84:ac:30:e2:5a:dc:d9:b1:ae:74:
                    94:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:32:3E:68:9B:FB:5B:23:AC:56:FB:15:19:8F:7F:59:23:3E:80:29
            X509v3 Authority Key Identifier:
                keyid:06:D0:93:A1:77:6C:08:5A:26:48:FF:78:B4:CE:1F:E4:17:C5:63:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtCToXdsCFomSP94tM4f5BfFY10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/062ee4-5186-40c3-a02f-802510945c42/1/BtCToXdsCFomSP94tM4f5BfFY10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:7d:39:47:4b:f8:90:f5:9b:f3:c3:8f:c8:df:84:6a:d0:72:
         76:92:aa:8c:6d:10:58:71:e3:54:fe:74:f8:9a:50:d6:08:1f:
         db:54:73:a9:75:ad:bd:9e:ae:8f:64:83:02:4a:0d:0c:54:16:
         fb:c0:de:16:fb:03:cb:ba:85:22:75:95:46:a0:a1:cd:a1:28:
         b2:09:6b:e2:89:e4:64:e6:be:1e:3d:8b:77:5d:32:c4:9b:2d:
         3a:7e:b2:c3:27:fa:9a:25:30:bf:ce:81:2a:54:d4:25:c8:31:
         21:38:30:2c:1a:04:15:e4:ae:e0:46:de:0b:b9:39:c4:67:bf:
         15:09:4f:52:24:9d:14:63:10:f3:36:92:47:58:c8:8c:2c:ab:
         17:2f:d0:1e:30:b5:f3:72:9d:43:82:2b:aa:a4:8f:c8:95:10:
         bb:51:a4:77:27:c3:e9:33:b4:a1:f1:42:1f:f7:57:6c:4a:10:
         43:73:a9:57:9b:2a:f7:65:61:a6:df:82:2f:72:fc:be:01:23:
         db:34:43:81:c9:f3:c9:c5:c9:76:2b:31:5f:0f:ef:de:7d:37:
         93:d0:d1:e4:ee:02:3b:af:00:0a:6a:1a:f0:2c:1e:28:b0:ef:
         c2:d9:39:9a:e8:73:ad:ec:42:23:fe:87:22:e3:e2:dd:f6:66:
         35:09:29:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:40:56 2025 by rpki-client