Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          DUTJ1tewanLWAN4fKdow4qqyP5DHFQpeTBFQG4Ci/Ds=
Subject key identifier:   68:02:60:99:C4:86:57:C5:38:B2:15:89:93:3F:F2:6D:9F:D2:28:D9
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       0196BE5C2ADC6BB4B597B2E418C0A5B21CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          1548
Signing time:             Sun 11 May 2025 08:00:33 +0000
Manifest this update:     Sun 11 May 2025 08:00:33 +0000
Manifest next update:     Mon 12 May 2025 08:00:33 +0000
Files and hashes:         1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
                          2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: uYrBhEv6EEX5rbWPS26fYI7mVPX74EWv1ZZHfAzyKYE=)
                          3: cVY_8rS3kZPDu1e0r3R63BtqpCQ.roa (hash: kfP4tSXYf9NAzPYnY28UC1ftu4NWH1iXr6TiCyzu6Bo=)
                          4: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
                          5: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (hash: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:5c:2a:dc:6b:b4:b5:97:b2:e4:18:c0:a5:b2:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: May 11 08:00:33 2025 GMT
            Not After : May 12 08:00:33 2025 GMT
        Subject: CN=68026099c48657c538b21589933ff26d9fd228d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:98:ea:22:21:1b:83:bc:5a:33:82:89:ea:0a:
                    b1:e3:58:2b:d3:56:16:d4:59:16:b1:b2:a4:35:63:
                    b9:e2:84:47:4c:26:d2:7d:ec:c7:b6:7b:c8:7f:99:
                    5b:54:a1:98:33:6d:e7:4a:49:0c:e3:85:07:35:ae:
                    d8:68:d4:0f:7e:df:32:50:4a:d8:72:dd:a9:a8:36:
                    14:e6:4f:dc:a9:82:ba:0e:b6:14:0d:c9:ef:72:88:
                    5d:63:b3:6f:1f:6b:73:8c:03:7d:e1:55:90:17:f2:
                    49:15:95:54:84:dc:8c:1f:ad:84:45:37:7c:85:b4:
                    47:b0:d7:26:bb:2d:05:19:fc:18:2b:03:d6:04:ea:
                    25:97:e6:2b:e4:d8:87:b7:4b:1e:7a:42:9c:76:fc:
                    4b:65:4a:bd:82:46:26:2b:32:9b:35:6a:09:b7:25:
                    56:ea:9d:07:7c:d3:93:26:e0:57:19:fa:e9:4f:bf:
                    dd:53:b6:93:a4:a6:a0:b0:45:60:a3:5c:52:1a:03:
                    5a:66:6d:f1:99:9b:e6:60:ed:02:08:be:7e:d7:dd:
                    06:c6:2b:62:7b:ce:ba:f7:f1:fa:f4:b7:10:a5:c6:
                    74:9f:f5:f0:dd:31:49:33:6c:24:a9:7f:c6:5d:00:
                    7b:bb:54:89:27:2f:86:e7:84:e6:99:c1:84:41:52:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:60:99:C4:86:57:C5:38:B2:15:89:93:3F:F2:6D:9F:D2:28:D9
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:c2:f1:37:ef:62:66:82:bc:c5:f9:80:98:2c:88:56:84:
         93:bf:ff:e2:3d:12:fc:0b:be:f4:78:0d:3f:a3:f3:75:04:61:
         50:5c:2f:ad:a0:15:cc:f8:73:6d:37:df:f8:9b:ca:50:69:35:
         d6:6d:22:2e:4f:dd:b6:d1:7c:58:3a:b8:cb:72:24:39:ad:40:
         0e:f7:f9:ab:48:d5:39:24:6f:3c:0c:aa:6e:f7:e7:ed:65:f2:
         c1:2b:ed:42:31:aa:06:64:5e:d3:71:d4:88:f5:0c:fa:2a:95:
         4f:6d:01:2b:a2:31:e4:2a:e8:5d:e4:84:bc:0d:e0:f4:aa:7b:
         ea:11:ef:23:56:20:b2:d5:60:85:52:a7:15:e3:34:28:d5:a1:
         91:f5:63:d3:8e:79:73:ad:56:cc:28:de:1e:52:3b:bf:38:3c:
         b1:c9:f1:4a:b8:7c:7f:01:6c:6a:2e:a0:48:e6:ac:0d:65:d5:
         40:b5:39:d6:31:d4:c8:0e:64:de:24:e5:6c:62:64:70:33:30:
         f3:60:80:3f:50:5c:6c:d1:6d:33:1c:8f:7e:b3:a8:a8:6d:b6:
         70:bb:80:4f:f1:b7:e5:fa:05:4d:93:e5:d9:40:97:31:f0:88:
         27:bb:6f:e1:61:23:33:55:d6:97:b8:e8:eb:ed:ae:c6:51:4d:
         13:fc:02:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:45:11 2025 by rpki-client