Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
File:                     kvfSE_oTcI4yABhP8bw5FXfMJS8.mft (raw, json)
Hash identifier:          ixnWZbc71LKsPKQw0d+MR4rYNLxiVZu+fxD/iEpUIqA=
Subject key identifier:   BF:7D:58:CD:57:73:C7:13:FA:4F:9D:51:DE:01:C4:EB:4B:40:D7:FE
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Certificate issuer:       /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial:       0196B257F7966F2BED8CF04F088E192936AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
Manifest number:          09AE
Signing time:             Fri 09 May 2025 00:00:31 +0000
Manifest this update:     Fri 09 May 2025 00:00:31 +0000
Manifest next update:     Sat 10 May 2025 00:00:31 +0000
Files and hashes:         1: 27IpBxR2D8_iRTp1ZebUJjNMQ7E.roa (hash: M2K4hgMgo9+z2THk8cplkT7mnkDeMqyV1xRhBWixRg4=)
                          2: F9JrVraLyMVnFa5WewWKqEk58Z8.roa (hash: HDM5tx94GGzJitG4z0EFA2VGBpL6vQ5NHJ5bG3Fv7N8=)
                          3: kvfSE_oTcI4yABhP8bw5FXfMJS8.crl (hash: s4e5gQJbUdgb1fT59CzEwhdztiaFNSSALriAwpchjaA=)
                          4: mm_Nb9z81V6NkXEN_XliD4j7rHA.roa (hash: sOGwZzPqCMO2h8qKL02SJARBROyj852YXrPvjJD/tMY=)
                          5: rNpSWTnlV1SjNzY7gYc6fGpCUg0.roa (hash: ogw4H6tz270SkrKMzgOGbWp8o172su6jWT/mKGItQ1o=)
                          6: tgAHftofsUlrut1OVcO8hHTBTbc.roa (hash: tgkhROI0aApXAU3ooNKzzNjHjSmQxJBLSWJU0UDgdqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:57:f7:96:6f:2b:ed:8c:f0:4f:08:8e:19:29:36:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
        Validity
            Not Before: May  9 00:00:31 2025 GMT
            Not After : May 10 00:00:31 2025 GMT
        Subject: CN=bf7d58cd5773c713fa4f9d51de01c4eb4b40d7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:e8:7e:ac:0b:a3:23:ea:23:91:a2:dc:2d:
                    3b:71:f9:a0:5e:e5:49:11:12:85:4d:0e:11:c1:35:
                    f9:d4:85:ad:0c:4d:93:28:a6:53:12:22:c2:63:ae:
                    c1:77:a6:a2:bb:c8:f9:5d:50:67:ce:61:27:ae:cd:
                    f3:d2:06:b0:96:c7:94:8c:6e:a6:1d:73:60:92:b4:
                    07:84:21:ca:f1:f1:37:a0:16:22:38:1c:b8:98:55:
                    9d:1c:64:67:a8:a0:3f:4a:47:92:0d:09:c3:a5:9e:
                    22:96:3f:af:60:8d:17:26:21:e6:16:0d:d8:d9:2f:
                    bb:c8:07:6a:5b:5a:5a:ad:05:90:e5:b0:73:d9:ac:
                    1c:f8:98:3b:74:e8:a9:fe:60:91:6e:b2:4d:3c:52:
                    ce:87:61:3b:ec:c3:35:c8:74:55:8b:c5:68:39:65:
                    f9:cb:7f:12:17:f5:a4:93:5e:ff:31:5a:30:bf:8a:
                    40:55:97:a6:21:30:de:98:9f:7d:96:d6:11:4a:97:
                    9f:ff:37:a9:c7:76:64:61:86:e7:45:63:b1:35:f0:
                    68:71:9d:14:36:c6:ce:ac:95:42:6c:05:42:f1:b4:
                    5d:a5:f3:68:15:54:7d:a9:3d:db:db:7d:ba:27:eb:
                    9a:b0:a3:11:d6:f6:42:73:04:38:89:66:de:ba:90:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7D:58:CD:57:73:C7:13:FA:4F:9D:51:DE:01:C4:EB:4B:40:D7:FE
            X509v3 Authority Key Identifier:
                keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:90:04:b8:1c:5e:0b:45:9d:52:a1:0c:06:01:79:a3:22:d5:
         b0:f7:24:2a:f5:47:28:6c:f1:db:8c:36:24:bf:9b:15:69:5c:
         e3:0d:a9:65:7f:7e:d6:2c:22:39:82:e8:3f:c9:e2:40:61:5b:
         df:4a:d7:58:44:59:b6:46:7c:35:f4:f3:8e:80:be:e9:b9:35:
         6e:93:9f:58:1f:aa:f4:90:5d:34:96:ff:e5:6e:dd:ef:14:fe:
         0a:80:86:6f:76:7b:2f:5c:4b:c8:d4:15:e5:50:4d:d6:00:d1:
         ca:4a:6f:dc:28:1e:c9:d6:70:3d:dc:8c:a9:13:8d:5c:47:a3:
         68:e1:5a:ac:56:2a:ad:f5:5a:85:e0:17:67:ff:7e:56:aa:4f:
         dc:c3:e4:14:0c:31:c5:42:3f:13:5a:55:50:c9:13:39:75:1d:
         3c:72:a1:2d:f4:6a:25:8d:17:18:91:5c:c0:aa:4a:c1:eb:ac:
         f8:0e:83:a0:db:41:57:fc:36:5f:29:2d:63:4f:94:30:b7:d0:
         e9:54:35:6f:a0:de:cc:99:54:40:f9:f5:de:0d:c6:9f:6e:06:
         d4:c8:a8:3f:87:0c:1c:2e:d9:6b:82:9d:0a:6c:5e:6c:5f:be:
         76:43:4f:3b:f4:73:76:1d:96:f8:1b:44:5b:e7:40:bd:d9:f6:
         8a:44:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:57:07 2025 by rpki-client