Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File:                     bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier:          fsqdsZLQd0dKHBBYdxLdpgf5Iy39XXlkBwUq0ryjwkQ=
Subject key identifier:   4B:EF:C4:23:C9:EF:72:F0:5B:0D:FF:3A:5B:50:CD:A8:AF:3E:88:D9
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer:       /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial:       0196BE2557D95E7DC2329933B40EFA87F5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number:          1533
Signing time:             Sun 11 May 2025 07:00:40 +0000
Manifest this update:     Sun 11 May 2025 07:00:40 +0000
Manifest next update:     Mon 12 May 2025 07:00:40 +0000
Files and hashes:         1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
                          2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: xG322Y4u2pCN5lxOUJR6eqDj1RQn9fMAfYkqMdYSFzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:25:57:d9:5e:7d:c2:32:99:33:b4:0e:fa:87:f5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
        Validity
            Not Before: May 11 07:00:40 2025 GMT
            Not After : May 12 07:00:40 2025 GMT
        Subject: CN=4befc423c9ef72f05b0dff3a5b50cda8af3e88d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4c:4c:e0:83:26:48:ed:e1:60:e5:af:db:46:
                    f0:81:db:fb:72:9e:77:04:35:f7:37:46:49:0d:49:
                    6a:54:ca:55:0d:73:bc:9e:99:8f:97:3c:50:7f:66:
                    bc:17:63:57:76:dc:fe:a0:7b:e6:e7:ac:5f:8c:61:
                    f8:cc:84:d0:3b:e0:af:8b:e6:d4:0b:30:65:a8:f4:
                    5b:b6:69:4d:78:df:4d:07:cf:91:ca:2f:0a:73:75:
                    a6:f5:26:3b:a3:35:f6:ae:a8:56:b7:bf:7f:ec:3d:
                    0e:71:46:6a:c6:57:51:e4:5c:d0:d3:20:47:a2:4e:
                    12:f5:a5:4b:c5:e1:b6:18:b1:c8:3e:e2:7c:7d:7c:
                    36:36:e4:e2:24:3c:ef:b1:be:85:76:b5:fe:48:48:
                    6e:64:bf:a7:71:aa:a9:f0:16:47:78:f6:92:39:35:
                    a3:96:3d:0a:26:22:01:5b:e3:52:2b:81:66:10:3d:
                    0b:31:07:97:5a:90:15:1d:d7:e7:e6:fc:f6:f5:57:
                    0a:4f:e6:02:87:98:67:3e:5a:bb:d4:ff:88:5d:16:
                    9d:13:c3:f2:79:0a:57:c1:77:65:72:93:96:7b:4d:
                    f4:7c:66:05:0c:b5:8a:7f:96:b0:ba:ce:6b:d8:64:
                    38:92:91:03:90:7f:bf:1d:b9:be:b9:96:1e:73:59:
                    e4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:C4:23:C9:EF:72:F0:5B:0D:FF:3A:5B:50:CD:A8:AF:3E:88:D9
            X509v3 Authority Key Identifier:
                keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:12:e3:9b:26:3f:08:f3:e4:8f:b4:39:46:5c:5b:a4:6b:
         67:2d:70:9f:f4:68:1f:15:49:74:ee:c0:f2:be:ff:a6:d5:cf:
         68:3d:c5:cc:74:d8:31:0d:35:5a:60:5a:1e:00:50:2d:56:95:
         5e:1b:38:9d:bf:d1:6b:0a:ce:9f:86:34:9e:20:6c:28:17:94:
         cf:6a:57:2e:07:fa:44:bb:3e:dd:f2:21:24:46:dd:bd:ef:3f:
         5d:1b:0e:c7:ca:69:e8:e3:5f:d8:1c:13:4c:12:21:14:ea:3d:
         d4:35:cf:47:f7:e3:26:2e:66:3c:64:9d:05:95:99:15:2c:d6:
         d2:49:d8:2c:0e:95:66:f3:4d:32:04:cc:19:08:61:74:68:5d:
         e3:e7:cb:d2:5c:df:69:e1:ed:e1:86:4d:8e:30:ce:f2:fc:01:
         6f:e0:49:59:42:d7:26:6f:d7:0f:ca:0f:09:4c:86:7d:c9:a5:
         f1:c0:7b:14:02:86:88:e4:52:cb:82:6e:c4:4b:44:b6:89:e1:
         75:a4:89:f0:ce:8f:94:a3:6b:39:b7:f3:60:c2:fb:6c:9d:21:
         87:b3:87:5e:67:5c:65:ae:7f:0b:54:90:9c:6c:0d:56:38:20:
         13:2f:6f:29:96:a0:0f:91:ff:28:f4:9d:16:f0:db:04:85:46:
         32:ce:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:02:19 2025 by rpki-client