Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File:                     c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier:          tCFkduwRz0DaR/bqpn/JHoQkKsNswv5rEFiSZ6MvW+U=
Subject key identifier:   86:80:E3:AF:5F:51:AB:42:79:A3:A4:A6:13:DF:80:4C:C2:82:28:73
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer:       /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial:       0196B9DA75EFB7E6F1D81B8920493C9D2084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number:          09E5
Signing time:             Sat 10 May 2025 11:00:24 +0000
Manifest this update:     Sat 10 May 2025 11:00:24 +0000
Manifest next update:     Sun 11 May 2025 11:00:24 +0000
Files and hashes:         1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
                          2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: cP60Ie0Pcn9DgM+Dv9V2hDBpbT0BawTlcgS/0kJqG5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:da:75:ef:b7:e6:f1:d8:1b:89:20:49:3c:9d:20:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
        Validity
            Not Before: May 10 11:00:24 2025 GMT
            Not After : May 11 11:00:24 2025 GMT
        Subject: CN=8680e3af5f51ab4279a3a4a613df804cc2822873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:09:3b:8f:b2:07:96:52:5d:96:a2:76:56:8f:
                    a9:b7:7e:43:26:4c:b8:01:69:d9:e7:a7:34:ca:23:
                    ed:02:73:95:52:8a:c8:bb:60:e0:59:6a:c2:41:56:
                    26:ba:0c:46:98:6a:98:90:e2:42:6b:9d:f3:36:55:
                    ab:17:74:89:b0:ce:ad:f2:33:3d:a3:3a:89:23:67:
                    66:18:c0:7e:e1:96:5f:0b:03:42:ed:cd:45:64:ff:
                    bd:1c:60:54:43:8a:a1:ac:b6:37:5e:eb:ac:03:e6:
                    4f:35:1b:09:8d:52:ff:05:e3:e1:b4:9e:c6:c3:af:
                    21:38:f2:c3:a1:43:b2:2d:fb:3f:ea:1d:51:dc:84:
                    d5:3b:4a:d1:05:8e:f6:74:1c:69:90:ff:34:e2:96:
                    2a:a6:ee:a4:9a:db:09:a6:43:e1:b8:7f:6a:06:16:
                    0c:f1:c8:52:4d:2d:46:3f:bb:37:35:47:7b:06:53:
                    e2:a7:e1:84:5a:89:b8:a5:b2:67:d2:bb:ba:30:17:
                    0d:8d:fa:ae:aa:d4:09:8a:24:11:82:62:31:29:ba:
                    62:8b:68:a2:66:d8:29:80:c2:fc:69:16:3e:89:d8:
                    37:3a:42:44:38:6b:c3:b8:7c:ce:09:6b:2d:03:25:
                    c3:e9:07:c3:8a:fb:a1:7a:5c:35:cf:4d:5a:c1:f2:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:80:E3:AF:5F:51:AB:42:79:A3:A4:A6:13:DF:80:4C:C2:82:28:73
            X509v3 Authority Key Identifier:
                keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:62:db:05:f2:85:87:c1:27:47:0d:96:31:d9:d1:62:46:e8:
         a7:5c:73:1a:97:2f:e9:85:e7:6f:bf:d7:32:f8:3c:25:bd:f7:
         c3:60:bd:41:60:26:31:d7:e4:61:5d:2a:54:8a:97:43:6c:16:
         24:8b:64:e8:73:c0:7b:5c:41:4d:e2:00:82:a6:13:e7:bb:3f:
         81:77:58:c7:c8:bb:10:69:23:e9:56:6a:4d:b0:b5:b9:47:f3:
         7d:87:7d:06:fb:14:9b:e3:4e:a9:f2:ac:0f:ee:c4:ba:67:aa:
         eb:36:ee:64:97:84:13:30:3a:ec:47:3d:31:e1:0e:a9:1b:b1:
         80:cb:06:6f:3f:f7:72:4e:f6:f8:68:2b:19:fa:1c:0e:55:43:
         10:e3:ce:8d:4e:08:a6:37:91:19:12:30:d7:ac:f9:18:9f:1e:
         45:fc:40:15:86:18:ab:02:79:cb:d0:2a:53:e1:7b:90:b2:11:
         6b:43:64:27:f0:cd:80:d7:b4:4e:10:1b:c0:9f:51:14:a6:9f:
         c4:86:91:58:99:12:d1:e6:1c:df:36:96:75:90:37:46:d9:c1:
         ca:2b:c0:b1:75:6d:0c:c8:68:2f:21:26:ac:de:0e:a0:0f:42:
         a0:8f:05:0e:d2:36:91:25:8a:a1:11:e7:ad:84:db:db:59:fb:
         61:76:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:50:25 2025 by rpki-client