Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
File:                     v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft (raw, json)
Hash identifier:          LEZ/zyGsPCJx8c9mQLhXi2uhXQK8dVZsTBjhD8nXPfs=
Subject key identifier:   20:6C:41:3C:5E:23:E0:70:85:20:53:6F:27:36:E5:2E:84:85:C5:77
Authority key identifier: BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC
Certificate issuer:       /CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
Certificate serial:       0196A2772156A27EBBDBB63518D63F2D9378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
Manifest number:          11B9
Signing time:             Mon 05 May 2025 22:00:38 +0000
Manifest this update:     Mon 05 May 2025 22:00:38 +0000
Manifest next update:     Tue 06 May 2025 22:00:38 +0000
Files and hashes:         1: CwTJXDuwwtXY5lds5AcNMw4m4MM.roa (hash: pkjwfyNy3tBr0gdIHHue6NuT85XueEkqyX3eSoK30mk=)
                          2: v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl (hash: 2jQgEB/HgT999PZsv10XwO6nDzv841tr0IOL2CscZPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 22:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:77:21:56:a2:7e:bb:db:b6:35:18:d6:3f:2d:93:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa0a38f85d2f53053b8c8943d9017b0b8f771ac
        Validity
            Not Before: May  5 22:00:38 2025 GMT
            Not After : May  6 22:00:38 2025 GMT
        Subject: CN=206c413c5e23e0708520536f2736e52e8485c577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:7c:58:e5:c8:28:18:97:e5:79:d1:a1:73:
                    e4:f1:eb:c3:0c:86:89:02:1e:b4:7f:cc:4f:1a:93:
                    fc:3a:f5:a1:8e:b5:c9:2c:50:bc:dd:85:30:f0:70:
                    04:8b:2e:0c:84:d3:07:57:88:70:05:1b:e1:c1:bc:
                    54:6e:b2:0b:9c:20:5f:6e:2f:08:9c:71:3f:d4:5d:
                    f5:b8:16:25:ff:7d:a0:16:d6:55:e1:0e:a1:28:8e:
                    3a:02:3f:ed:fe:7a:04:44:78:5d:39:e5:ce:c9:2a:
                    25:f2:59:25:07:4a:dc:aa:6e:da:e3:ae:bb:fd:78:
                    d1:51:48:e0:4b:7d:6c:e6:59:06:d1:7c:8a:c6:21:
                    08:bf:27:27:c8:15:27:61:42:c6:ec:c1:af:f0:67:
                    ff:bd:ec:09:16:b3:5f:18:5e:f7:32:2a:ec:08:f3:
                    cf:aa:d6:c9:99:28:fa:fd:b7:5b:ba:4f:35:5b:d6:
                    3e:fb:eb:b4:90:a5:b3:7e:dd:15:5b:d8:52:8f:2a:
                    a3:e0:29:4f:d5:51:67:a0:d6:d9:3e:6e:e9:6f:08:
                    b5:6e:00:b8:bf:49:37:8d:44:6f:ab:11:5a:ab:d5:
                    5d:08:fd:00:8a:15:84:a1:fd:4a:4b:bf:99:37:db:
                    99:29:c6:81:7d:f0:24:d9:c8:66:be:d5:f6:30:f6:
                    25:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:41:3C:5E:23:E0:70:85:20:53:6F:27:36:E5:2E:84:85:C5:77
            X509v3 Authority Key Identifier:
                keyid:BF:A0:A3:8F:85:D2:F5:30:53:B8:C8:94:3D:90:17:B0:B8:F7:71:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Cjj4XS9TBTuMiUPZAXsLj3caw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4099d7-c3ce-4721-b0e9-7ab1fa0ba399/1/v6Cjj4XS9TBTuMiUPZAXsLj3caw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9d:62:73:4b:34:bf:a4:d4:39:b5:a4:14:1b:4c:bc:4a:9b:
         1d:4a:28:3b:9e:f1:7b:e2:a5:97:9a:d2:f8:26:0c:bb:40:de:
         24:0a:30:64:ef:2b:f3:1a:28:cb:a4:1d:f9:b4:dc:36:ea:61:
         fa:5a:69:32:db:cd:2e:e3:17:41:2a:22:2f:86:cf:42:5c:ec:
         62:9d:52:39:1b:cc:f3:91:3a:ad:20:1a:f1:96:fe:52:5a:3c:
         db:d5:03:dd:7b:6d:61:34:c6:26:6e:90:9d:79:5b:46:99:99:
         f5:ef:c8:f5:c6:ec:f8:18:00:a8:c1:da:a0:5b:48:9f:56:93:
         25:9b:8c:bb:e6:f7:63:83:5b:20:82:51:8b:7b:8b:2a:54:2f:
         32:f4:56:d1:96:5e:2e:32:ac:b1:b8:f4:b8:2b:61:dc:87:d4:
         30:eb:8b:87:d2:2f:a9:11:60:d1:d4:a4:ad:6f:17:b2:9d:1a:
         6c:a3:cf:b4:06:54:6a:26:4b:91:5b:99:f3:a5:c3:67:aa:53:
         f1:2b:73:f1:c5:4b:16:6b:c4:55:52:e3:46:39:4d:78:65:0f:
         43:fc:9f:0d:39:b4:9d:4b:41:51:77:3b:31:36:1b:2f:20:96:
         eb:67:ed:be:b9:3d:ad:f7:1f:66:e2:7f:31:29:c3:33:60:2a:
         75:99:83:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 06:17:39 2025 by rpki-client