Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          RV9/CJIMNpUsOlqB1po2IgnctkJ6tp9HFKSltI5Ln/w=
Subject key identifier:   D4:2E:F1:77:07:AB:58:0E:50:8D:9E:98:93:5C:5D:89:71:45:51:DE
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       0196BC6DF3EBE929AEE754F731643FE3FF35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          04B7
Signing time:             Sat 10 May 2025 23:00:44 +0000
Manifest this update:     Sat 10 May 2025 23:00:44 +0000
Manifest next update:     Sun 11 May 2025 23:00:44 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: fxF3x83j/kZ/LOS9d4835OsO+EycmIsbYx5VGU8Sbtw=)
                          2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bc:6d:f3:eb:e9:29:ae:e7:54:f7:31:64:3f:e3:ff:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: May 10 23:00:44 2025 GMT
            Not After : May 11 23:00:44 2025 GMT
        Subject: CN=d42ef17707ab580e508d9e98935c5d89714551de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:79:fc:24:e2:16:5d:8b:0b:22:63:7e:0c:
                    a2:92:33:5a:3a:d1:0c:2a:0a:02:97:b1:27:fd:33:
                    fb:38:2d:6a:aa:fe:81:7a:48:16:6e:1f:3f:71:3f:
                    ff:50:75:77:72:8e:be:18:13:2e:07:b9:a1:94:11:
                    8f:48:c1:c5:53:73:d3:6a:2d:4a:3e:63:5d:e5:01:
                    f9:5d:aa:85:73:af:99:a7:f3:08:d4:8f:4f:7e:af:
                    40:c8:b9:bd:e3:80:2a:44:8c:8d:bc:5b:9b:33:e2:
                    2f:a4:08:dc:6c:8f:f5:53:48:b1:f0:e3:ba:d5:16:
                    bd:f7:2e:22:95:8d:b2:7c:42:ac:88:d6:31:87:6e:
                    d9:20:24:80:8b:79:57:97:21:fa:d6:fe:2a:a9:2d:
                    fb:38:42:d1:aa:4c:ed:52:d3:57:dc:63:cc:f5:6a:
                    e7:79:20:a7:3a:52:ab:85:ae:92:2e:30:fe:6d:b2:
                    39:79:3c:0f:e8:24:15:5c:5f:ad:71:16:4a:45:3d:
                    74:75:3a:cc:fe:f9:de:58:a8:a6:e5:38:6a:ad:b1:
                    22:b3:b2:18:32:70:59:54:3c:5f:f3:ab:94:2e:00:
                    22:8e:c9:a4:83:11:33:60:1f:ff:7f:03:37:70:f1:
                    8b:ea:36:0b:3d:a1:43:71:f8:18:0c:ad:f3:cc:90:
                    b5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2E:F1:77:07:AB:58:0E:50:8D:9E:98:93:5C:5D:89:71:45:51:DE
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:b8:bf:70:0a:a2:c2:e2:dc:c0:71:27:3a:13:9c:f7:b6:
         1c:d6:ae:78:db:bd:74:36:e3:4e:c9:34:2d:2d:6f:6e:17:aa:
         5c:2f:e6:ce:95:e9:f6:e6:af:04:a0:23:12:0e:59:ff:ce:d1:
         3e:59:ce:e9:e1:36:32:ce:f6:61:ae:1a:e8:9e:e0:84:a5:d3:
         12:49:aa:24:06:46:b1:a5:bd:f0:7c:75:5b:37:da:c8:7e:3a:
         fb:0d:d8:79:43:72:94:6c:bc:3e:4d:53:9b:1c:52:e6:e8:c0:
         37:8b:a7:43:45:fa:c1:03:41:a0:27:43:8f:74:d3:8e:4b:5a:
         e4:ad:e4:18:17:9e:db:11:39:2a:e6:0f:16:52:f0:2b:7e:58:
         6f:0e:c7:b9:2a:d0:f0:50:a6:21:0f:e2:54:d8:20:e4:c5:a4:
         48:ed:0f:c8:65:ce:2d:36:99:76:b2:a4:74:39:a8:f5:4a:70:
         88:31:45:9e:49:4b:6f:28:e9:1b:56:d6:e9:04:85:48:61:93:
         89:25:9c:12:cc:c5:f3:36:9d:fe:c8:e0:77:07:7e:3c:f6:f2:
         65:3a:97:63:71:81:18:d7:cb:72:f0:df:17:28:3f:1a:ae:4d:
         b3:58:7c:59:cc:0c:99:2e:56:55:ba:91:6b:c7:3d:9f:09:0c:
         03:e4:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:49:09 2025 by rpki-client