Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          BgE2k8uGgJ0Ih/673TbZVGQHIQlOm6ZYDO5QqPLKUWo=
Subject key identifier:   16:4F:6F:F4:9E:DD:33:48:D5:76:54:0B:E6:D6:9C:67:2B:DC:4D:BC
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       01969DF60F2A8064FE923EAB64577D21EA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          106F
Signing time:             Mon 05 May 2025 01:01:10 +0000
Manifest this update:     Mon 05 May 2025 01:01:10 +0000
Manifest next update:     Tue 06 May 2025 01:01:10 +0000
Files and hashes:         1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=)
                          2: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=)
                          3: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=)
                          4: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 7xvuQPjkTJY/Mf1DBkBS6+h/OWaRmneWk/q4pebLW5Y=)
                          5: K_EJriKArevlzfQZbolNDBtx8oo.roa (hash: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=)
                          6: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (hash: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=)
                          7: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=)
                          8: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=)
                          9: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=)
                          10: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (hash: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=)
                          11: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (hash: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=)
                          12: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=)
                          13: i5GppiHBLQmwOIDk0BFsCJHp2Fk.roa (hash: yjCNT9c5vaPwsaCe9fT0EpKbcmfr4jqgrLJp2CjaPGI=)
                          14: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=)
                          15: kWgcOnHE4loB2SO1RafMA_sfxyo.roa (hash: qhX4ZFqSLA0ZjpIXxZoMeER1s51JEQ2ukADkC9RRayQ=)
                          16: mUn4bAz55ffqb0tiJskpWuVtNjA.roa (hash: BAAWKJEZVUELA0qluua1re9Mkphc7hB4/fV/DRwqpfQ=)
                          17: mzesL7b8xDiEMbccrYxwxauUCNo.roa (hash: 9abaQNS2L+ykADnbBlaL9V1O8kjESf/2jjTxMsIC444=)
                          18: vJrm0N8cQ_sGEDAn3qdXTGrylvs.roa (hash: XzRmm2HrHOPW+SyB05FgNMQIJtwXtjkKyIX6XBlbVy0=)
                          19: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9d:f6:0f:2a:80:64:fe:92:3e:ab:64:57:7d:21:ea:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: May  5 01:01:10 2025 GMT
            Not After : May  6 01:01:10 2025 GMT
        Subject: CN=164f6ff49edd3348d576540be6d69c672bdc4dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a4:18:24:6b:c6:08:72:a3:5b:20:2a:52:ca:
                    c4:f7:6e:79:6a:aa:7c:a1:9a:8d:e9:49:e4:8a:d9:
                    18:f6:ae:f5:a9:b9:28:e0:6c:4b:e3:8c:db:e5:17:
                    2a:7b:9c:6e:e9:4a:f6:eb:e1:6f:2b:0f:ba:44:57:
                    8c:7d:c1:e6:cc:f2:9c:2b:eb:fd:5b:66:7d:cb:d2:
                    83:72:c7:46:3e:b1:42:95:e1:7c:a1:78:e4:9c:87:
                    c0:f2:61:98:b0:0b:81:d9:4a:2d:ad:13:f1:5f:9f:
                    3c:cd:b0:23:25:64:92:50:2b:10:d2:ac:95:fb:67:
                    8c:b9:7f:29:38:b7:10:9c:ea:70:49:a0:c6:b2:ea:
                    ec:de:63:82:ef:14:f3:6e:47:0f:f8:20:27:e7:b5:
                    65:bb:e9:b3:09:45:c6:3b:14:77:cd:1d:45:34:37:
                    8c:41:58:3c:c8:5c:2f:8b:e7:8b:72:7d:0c:3e:71:
                    0b:80:62:9a:e4:d1:f0:98:0b:cb:92:41:b7:e6:c5:
                    ac:e1:c9:34:d7:5e:b4:0f:bb:6e:aa:96:3b:1b:ec:
                    f2:54:ac:b6:c2:d9:cc:ae:dc:bf:b1:64:41:8c:62:
                    52:00:70:6a:6f:75:d7:8e:1e:7c:9a:f2:4e:dd:fa:
                    4b:71:24:36:ec:03:86:a7:01:67:e5:e2:de:ff:7f:
                    2f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4F:6F:F4:9E:DD:33:48:D5:76:54:0B:E6:D6:9C:67:2B:DC:4D:BC
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:d1:8d:be:5d:8c:b7:c1:b9:46:dd:f3:72:74:b5:b8:73:
         c2:ce:7a:d3:e2:10:55:55:2c:ba:59:16:49:4f:f6:10:45:05:
         19:8f:ec:c0:e1:9f:f4:4d:89:0f:21:0b:bf:63:63:bc:3e:d7:
         2d:37:14:45:bc:be:1e:e6:de:ef:7a:16:81:cd:7b:1a:7e:72:
         77:bc:ed:61:7e:28:b4:b9:6f:98:ca:6b:fb:52:84:35:5f:64:
         82:66:c3:02:f8:57:fb:54:0c:2a:26:6b:c0:a3:f0:9b:44:91:
         03:6b:75:ca:d9:9e:f0:98:7f:b6:77:2a:5f:4b:e7:a1:f7:ee:
         89:b9:cf:d7:6f:12:2f:8d:78:99:90:6c:45:01:ed:5f:55:c0:
         84:a1:09:4d:f4:b6:12:e6:06:bc:c4:1e:c3:a7:ea:fa:68:a1:
         bb:fc:04:2b:f4:14:90:75:3f:b8:5e:a3:bb:97:1f:c9:16:e3:
         00:f5:7e:63:ce:e6:b7:8c:ab:9f:1d:10:83:52:e9:dd:64:73:
         73:c8:a6:0c:54:08:88:7a:ff:e7:4f:f3:69:1c:19:04:40:9a:
         b5:3a:a6:39:e1:2b:01:ce:96:1a:53:52:3a:c1:8c:2a:21:4e:
         7d:07:c8:fb:d7:99:32:d9:f5:b3:97:b8:c2:56:23:1b:1b:83:
         0d:20:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:06:54 2025 by rpki-client