Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
File:                     BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft (raw, json)
Hash identifier:          3zvuoRz339hmjGRUS3+wunPeIwghz4zPOzmOTdhguOI=
Subject key identifier:   37:93:B8:88:3A:1E:23:0B:2E:DA:79:F7:E7:22:26:AC:3D:14:66:DC
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Certificate issuer:       /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial:       0196B7EC76E6B8E5145622C629CF8189EE7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
Manifest number:          1530
Signing time:             Sat 10 May 2025 02:00:49 +0000
Manifest this update:     Sat 10 May 2025 02:00:49 +0000
Manifest next update:     Sun 11 May 2025 02:00:49 +0000
Files and hashes:         1: BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl (hash: GDRd8hj5ewkZgbapaN2jnQ1/sP9TFXNRe97gpUhfMz0=)
                          2: lTisVzPeiPslXlhHYnIYv10zoj8.roa (hash: nI5Tne3/W5S4/3jqutx+PLa3bngqaYEDH1hjjV/uGx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:ec:76:e6:b8:e5:14:56:22:c6:29:cf:81:89:ee:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
        Validity
            Not Before: May 10 02:00:49 2025 GMT
            Not After : May 11 02:00:49 2025 GMT
        Subject: CN=3793b8883a1e230b2eda79f7e72226ac3d1466dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:cd:97:a9:75:bb:0c:f3:78:00:3d:90:3b:
                    80:a3:d6:b0:cc:16:17:2f:70:24:5b:ab:34:7b:26:
                    50:8b:0c:b3:42:6e:1c:f6:77:7d:e7:3d:27:9c:f1:
                    ab:63:b9:f0:f1:69:40:ee:85:c8:2b:42:7c:ae:f8:
                    97:e5:75:43:1d:63:05:93:b5:a5:d3:02:d5:47:fc:
                    f4:ed:35:e0:e1:a2:29:05:27:4e:25:b6:64:b8:47:
                    4b:6a:58:11:f0:17:f2:e4:e8:7e:fa:f2:09:73:4e:
                    1b:34:e5:0d:3f:bd:77:c8:d1:fc:8f:5e:90:32:68:
                    d6:ab:f8:e0:1b:d2:11:7f:ea:a2:44:4a:cf:20:f1:
                    bf:d0:c7:27:e6:c3:6a:39:61:45:ee:62:a0:a9:ee:
                    67:f9:dc:a6:85:8b:72:a4:40:2e:29:a2:38:38:b4:
                    ac:fb:2a:e3:b5:a1:3d:4e:6a:6d:bc:99:3a:cc:38:
                    ba:53:29:62:36:f2:58:ff:39:51:d7:a9:e4:d0:4b:
                    ad:10:ad:99:f7:95:17:c8:d2:15:c2:5d:7d:dc:23:
                    d8:0a:3a:32:50:20:fb:74:c1:cb:1b:2c:05:f8:fd:
                    e5:d7:07:eb:c0:6a:b3:2e:65:d3:19:4b:20:08:05:
                    e9:6c:2b:86:e5:33:93:c3:cf:91:73:b0:fa:07:0f:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:B8:88:3A:1E:23:0B:2E:DA:79:F7:E7:22:26:AC:3D:14:66:DC
            X509v3 Authority Key Identifier:
                keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b9:2f:61:39:89:ff:f1:ae:4a:14:af:81:e2:16:e1:67:e1:
         cd:48:65:57:8b:14:c8:90:f1:54:c0:9c:f8:dc:a3:5b:ba:69:
         81:4c:64:c8:b6:a3:a1:76:07:8b:f4:63:0f:cd:39:79:a9:f1:
         63:1d:7a:74:53:1a:85:56:cc:32:f5:c0:e8:c6:26:37:43:79:
         f8:ff:93:37:95:9b:e5:a0:33:84:60:97:26:1a:ed:d8:c2:73:
         8b:9e:03:d7:0d:b6:d4:17:86:08:66:3c:48:1c:bf:9c:bb:2a:
         ff:22:2f:6a:a5:7b:b7:61:88:f3:97:eb:ce:a2:f6:46:c5:4a:
         c4:38:7f:4e:33:78:ed:bd:c2:32:39:57:6c:6a:bb:7e:bf:60:
         74:63:b9:59:5a:82:ce:ea:c0:07:dd:60:b5:90:da:3c:dc:88:
         02:fb:1c:01:88:e6:8f:36:aa:ab:36:79:7e:54:ad:ed:b0:1c:
         5c:05:0f:92:a6:65:a6:f1:eb:3c:ae:47:a6:7f:b1:2c:8a:52:
         9e:07:2f:26:91:10:37:02:1a:ca:82:d7:b8:34:ee:ab:72:e8:
         37:fa:7b:8a:66:1f:c6:e1:b7:24:62:1b:c0:d6:47:e4:4c:0d:
         e7:d2:52:ff:38:45:7c:b3:61:67:c0:e9:8b:b5:10:3c:74:4e:
         41:7a:27:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:46:25 2025 by rpki-client