Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          FSqMOz+LyhcylF53EimnUlAPHBFJ7Aj2kmEcqWLJV3I=
Subject key identifier:   B8:1F:AB:DB:20:46:05:16:53:CF:8B:49:53:76:33:51:61:AE:73:F5
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       0196A389D21ADF7E40FC80A39E7D24FE5FB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1529
Signing time:             Tue 06 May 2025 03:00:40 +0000
Manifest this update:     Tue 06 May 2025 03:00:40 +0000
Manifest next update:     Wed 07 May 2025 03:00:40 +0000
Files and hashes:         1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
                          2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
                          3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: bbRpq0wKPHEEeIVYZg/ZT1pZ/TwpHd6CIF25BpeywcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:89:d2:1a:df:7e:40:fc:80:a3:9e:7d:24:fe:5f:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: May  6 03:00:40 2025 GMT
            Not After : May  7 03:00:40 2025 GMT
        Subject: CN=b81fabdb2046051653cf8b495376335161ae73f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:65:c7:ec:8d:da:0c:54:2e:b3:51:a6:38:
                    25:e2:a4:4c:e9:8d:cb:fe:a4:9d:0c:8b:17:11:9c:
                    b5:e6:59:35:30:60:a6:dc:d4:0c:ae:bd:38:ff:51:
                    00:b3:ea:ae:67:b2:0f:eb:3e:4d:43:06:35:fe:3f:
                    58:26:01:3d:29:b7:03:65:a3:7e:5c:34:61:f8:41:
                    ae:88:62:52:10:c1:a2:ea:38:3c:04:e3:38:bc:23:
                    1e:b1:2d:5f:34:71:cd:80:d2:ce:a0:f8:b6:7e:84:
                    fa:c2:23:16:a6:a5:36:3d:d8:5f:c2:e0:f9:98:eb:
                    39:f1:8a:52:cb:ae:01:1e:64:e0:db:cc:55:22:9f:
                    4c:98:93:df:0a:2e:ea:07:3e:80:e7:8a:4e:10:f9:
                    b8:14:6e:da:f1:82:ec:2c:94:cc:a1:24:ac:b0:fa:
                    12:4d:8b:9f:78:d1:93:41:ca:67:df:47:21:61:5a:
                    51:1a:8e:07:14:a7:93:1c:52:cb:e7:3c:87:e9:28:
                    b7:f7:14:3f:df:52:65:8c:9f:bc:ae:3c:c0:c1:bb:
                    b5:fe:26:2a:5d:02:7f:30:ea:bd:43:01:c9:87:d9:
                    04:d4:b9:58:4e:ae:a1:4f:a7:04:fc:a9:2a:77:5e:
                    8d:81:1b:31:a3:da:cb:74:03:13:e0:af:c1:22:a2:
                    61:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:AB:DB:20:46:05:16:53:CF:8B:49:53:76:33:51:61:AE:73:F5
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a7:9f:23:8b:ed:15:6b:ee:dc:ea:44:9b:60:e8:92:83:91:
         df:3b:4e:3c:be:8f:67:78:3c:33:49:91:d4:ed:86:e3:ef:95:
         aa:37:6e:63:df:dd:84:e6:a3:80:19:1f:7c:0f:b1:87:b1:87:
         3d:5e:14:9a:5a:22:4a:f0:ce:be:71:04:12:f2:0e:47:f2:f5:
         e6:22:cf:6c:85:a0:97:5e:45:2f:c6:39:20:a4:92:81:b5:74:
         7e:d1:1f:10:c3:4b:03:29:24:3e:88:2f:9a:3b:fd:e3:3c:df:
         11:66:96:63:76:96:13:93:77:9b:b9:eb:42:17:1a:9e:2f:f1:
         48:6d:4c:21:ff:89:7f:9e:0e:2f:c7:80:c2:2a:dc:1d:7f:32:
         e3:4b:b8:77:bd:ac:18:fa:1a:f6:06:27:0b:2d:64:2b:24:d5:
         d7:4b:2d:0a:74:93:10:fc:4e:ba:60:3f:2d:d6:0b:9a:6a:c0:
         fd:c2:bc:54:c0:c9:17:de:f6:fe:63:c6:b8:77:98:46:59:77:
         5e:ad:86:99:3a:70:3f:f5:1b:ed:da:1e:67:10:e3:60:0b:1c:
         4f:45:f0:1b:ed:e6:e6:2c:d5:5e:25:34:62:29:bf:5d:ce:85:
         80:7e:2c:6e:96:28:fc:51:ff:34:a6:15:c9:52:45:42:50:56:
         b6:94:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:33 2025 by rpki-client