Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File:                     C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier:          QMkPFCfxAnVgJcq+TVqqNKtaWChTbgpElyiF4EDXtb4=
Subject key identifier:   C2:A8:9B:46:0C:84:80:34:F7:55:4A:8D:DB:02:E1:0C:63:41:F5:5C
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer:       /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial:       01964C6B3165B3780B44190C436E17EFB2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number:          14F9
Signing time:             Sat 19 Apr 2025 05:00:15 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:15 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:15 +0000
Files and hashes:         1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: MH7iAaoOjb1jDBaGoufhXIZGGTfCY3Lox8pQ+yNX3MI=)
                          2: YZzAhQaL88-jCpJ3mBWG-64btDU.roa (hash: RCtjkx1poAnNZoTiswLMPNgLTI2laFXye8HspCS+ElI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:31:65:b3:78:0b:44:19:0c:43:6e:17:ef:b2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
        Validity
            Not Before: Apr 19 05:00:15 2025 GMT
            Not After : Apr 20 05:00:15 2025 GMT
        Subject: CN=c2a89b460c848034f7554a8ddb02e10c6341f55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:14:27:e7:48:72:18:71:3e:e1:3c:0f:44:
                    6f:43:be:01:7f:2e:46:21:71:68:5e:36:d3:ba:64:
                    da:e8:fe:c4:00:19:11:3b:1f:ff:98:c6:11:98:fa:
                    d7:5a:37:a2:3c:90:c7:1b:28:ca:95:a9:a1:c3:da:
                    a2:6e:c3:4c:b9:02:b1:a0:96:f2:d6:3c:78:49:83:
                    3b:a8:59:f4:c6:42:12:eb:e5:d8:d8:c1:e6:06:6c:
                    a5:93:0e:95:ab:00:c3:ec:d7:c5:0c:76:c9:9a:8c:
                    28:99:69:59:c5:ef:78:15:2b:90:ea:d1:e4:e0:4d:
                    f4:fb:17:48:7c:37:04:42:e1:86:23:79:9c:93:1f:
                    d6:06:a8:d1:2e:7c:a9:01:54:ab:f1:71:56:17:19:
                    d3:0e:5d:91:67:b5:ca:5a:2e:07:64:00:bf:bb:bb:
                    d7:32:70:ae:8c:37:92:28:8e:94:39:18:c7:75:a7:
                    28:12:e7:f0:0e:8f:10:4d:05:7b:2d:62:f6:c3:76:
                    de:44:ed:ea:85:b0:3c:4e:62:27:83:79:2e:33:7d:
                    be:03:2f:25:32:95:cb:d5:6e:2f:b4:0a:01:ab:6a:
                    8c:f8:4a:3c:58:61:3c:48:cd:ad:5e:21:90:c1:a4:
                    a0:0f:4a:c3:57:f7:f8:87:15:85:67:9c:fc:72:8c:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A8:9B:46:0C:84:80:34:F7:55:4A:8D:DB:02:E1:0C:63:41:F5:5C
            X509v3 Authority Key Identifier:
                keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:98:c5:41:b2:b3:81:fb:11:b7:c6:84:fa:35:4d:9a:fa:d9:
         9f:09:ef:56:09:23:fb:28:d3:ca:fe:67:7d:f5:e9:7b:f3:78:
         d2:16:fa:32:88:bd:11:01:bf:93:9e:32:10:1f:b1:8a:ef:a7:
         06:c9:34:07:ab:81:2f:6d:ca:d5:c9:a7:07:07:d4:0d:38:b2:
         77:a4:d9:b8:38:73:08:c7:d6:02:ac:ff:1e:35:24:e6:67:72:
         db:51:78:c3:6b:3f:3e:d3:e9:c6:0b:19:c3:da:ff:a9:37:6d:
         69:1e:f0:5e:cd:c2:54:c3:90:9d:3f:aa:e2:89:82:bf:a4:ed:
         da:63:32:2a:91:39:9d:15:61:2c:ff:1a:bd:2a:73:ab:19:f2:
         2b:0e:a4:68:2b:3f:58:51:f2:ff:b6:88:ca:47:32:98:cc:e8:
         e1:c9:05:d9:50:4b:6a:8b:e9:5f:8c:36:fe:ff:80:16:ad:38:
         28:1c:6c:84:60:5e:9a:cf:86:ed:1c:2a:72:bc:45:88:06:e7:
         4f:4c:4f:d2:e1:bb:d0:b4:5f:db:41:83:7e:58:35:b6:c0:c9:
         ae:c4:7d:65:99:d6:6c:1d:60:40:87:17:ca:95:44:ec:de:e9:
         06:b5:85:77:56:90:10:b8:62:6b:3f:db:96:14:e6:88:61:92:
         b1:07:48:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:48:54 2025 by rpki-client