Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File:                     BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier:          CLjfVYBqb9wJHWt0JO6IhwIGmHCHIW3hJLd/AcuG4KQ=
Subject key identifier:   0D:E2:9F:41:BF:14:1B:FE:C3:C7:EA:7C:72:E6:86:F5:A4:F7:5B:F6
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer:       /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial:       019659F03609A6D7EC17641010047D9F63AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number:          1500
Signing time:             Mon 21 Apr 2025 20:00:36 +0000
Manifest this update:     Mon 21 Apr 2025 20:00:36 +0000
Manifest next update:     Tue 22 Apr 2025 20:00:36 +0000
Files and hashes:         1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
                          2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: QAE+Llr9+rWztFdQEMvwmcUlm0DPfM2QF0E/0RQz5Po=)
                          3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:59:f0:36:09:a6:d7:ec:17:64:10:10:04:7d:9f:63:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
        Validity
            Not Before: Apr 21 20:00:36 2025 GMT
            Not After : Apr 22 20:00:36 2025 GMT
        Subject: CN=0de29f41bf141bfec3c7ea7c72e686f5a4f75bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:dd:84:c8:4f:d8:98:29:04:82:ad:d1:d3:
                    ab:5d:f8:1d:9b:b5:d4:e4:6a:ae:d9:8b:d0:9a:3e:
                    7b:be:c2:8d:b6:cf:2f:6c:1e:60:06:f4:d9:fa:a5:
                    96:94:a0:26:8b:0c:59:5d:47:b3:35:3c:3f:23:59:
                    16:fe:5d:09:1a:ad:86:98:11:18:9c:81:14:8e:b3:
                    e8:cb:7f:00:56:7c:6e:4a:b0:9f:6f:08:15:41:e3:
                    40:37:d7:7f:24:b1:98:05:41:8e:3d:80:77:b1:02:
                    ea:4f:ab:ed:ee:3e:91:4a:c3:b0:fe:0f:69:10:8c:
                    44:19:23:6c:f9:99:cf:3d:56:bd:d9:85:f5:cf:81:
                    d7:73:ff:08:29:d1:31:f8:1a:24:7e:64:f6:4b:fb:
                    ac:43:71:66:dc:49:53:f5:4a:6a:81:88:2b:87:cb:
                    31:ff:0f:6f:11:bc:f4:b7:f2:bc:02:66:6f:dc:7e:
                    51:f8:44:bf:3d:71:9d:20:c7:2f:f3:5c:9b:01:f9:
                    ab:94:d1:73:dc:4e:f1:97:03:c2:ad:65:3c:df:fb:
                    18:7a:53:95:d9:58:5b:10:c8:9e:54:17:4d:90:4b:
                    6a:e9:cf:cf:95:d9:37:78:4e:a6:36:25:14:58:1d:
                    50:34:60:d4:d6:38:9d:ce:5d:44:4b:74:81:da:36:
                    e7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E2:9F:41:BF:14:1B:FE:C3:C7:EA:7C:72:E6:86:F5:A4:F7:5B:F6
            X509v3 Authority Key Identifier:
                keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:2f:d5:b0:33:cc:3e:e9:55:db:ac:e5:66:30:d0:2d:e0:5f:
         1d:0e:b3:60:6a:b4:88:cd:f4:83:26:bd:89:c7:b1:0b:91:a4:
         de:3d:ff:60:58:80:a2:fd:e1:cb:00:35:cd:44:cd:49:e9:96:
         af:82:ce:bf:2d:d5:21:f5:95:84:ee:37:ec:fc:39:51:86:84:
         a6:e5:96:cb:8c:39:05:53:9b:ac:37:51:ee:fc:0b:18:f4:8f:
         8d:01:15:d7:11:ed:1e:66:aa:7c:96:35:c9:92:70:1d:6e:e0:
         39:87:3c:19:51:c2:3a:be:4e:79:3a:a5:8d:d5:e1:09:92:a1:
         cc:79:99:03:54:a2:4c:b2:7a:80:3c:cf:aa:5b:ae:67:52:6e:
         fb:59:bd:07:0f:cb:c4:68:56:ef:de:71:8a:03:4c:4b:88:7e:
         81:cd:1f:00:ab:a9:a4:65:74:de:46:92:c9:23:55:f1:20:55:
         40:a2:a6:9a:aa:e5:40:ad:68:1c:ee:51:2d:d9:cd:17:73:ce:
         25:52:3e:84:fb:94:12:90:78:2a:ed:8d:ec:b8:1f:f5:fe:cf:
         66:56:c5:06:7a:17:10:a0:7f:a5:66:fe:7c:c5:1f:c5:73:58:
         c6:c7:aa:a8:c2:1e:56:18:2b:e4:ed:93:0b:1e:61:b2:b0:15:
         4a:a7:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:31:40 2025 by rpki-client