Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File:                     bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier:          PHGTaB8zrFFEulC9JDFtgUS0xcD6vRyKt4JOl0fVOmA=
Subject key identifier:   78:CD:6D:14:B0:03:50:23:5D:5B:FF:E1:CC:C2:ED:2F:8F:FF:9E:45
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer:       /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial:       01965A9509E253FC8A37A27F2EB820C22C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number:          018C
Signing time:             Mon 21 Apr 2025 23:00:38 +0000
Manifest this update:     Mon 21 Apr 2025 23:00:38 +0000
Manifest next update:     Tue 22 Apr 2025 23:00:38 +0000
Files and hashes:         1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=)
                          2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: n+io9gZ4GK+Vj76wcSKDhicmXbp8ALvRXXUzZPu0m/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:5a:95:09:e2:53:fc:8a:37:a2:7f:2e:b8:20:c2:2c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
        Validity
            Not Before: Apr 21 23:00:38 2025 GMT
            Not After : Apr 22 23:00:38 2025 GMT
        Subject: CN=78cd6d14b00350235d5bffe1ccc2ed2f8fff9e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:a8:e4:2f:14:be:46:e7:f3:18:49:90:7f:
                    1c:d1:50:95:a0:95:52:31:67:07:a2:70:85:6c:83:
                    ed:42:18:fd:71:9e:f0:1c:87:bf:77:ec:39:bb:eb:
                    ff:58:46:f2:dc:30:60:50:ec:4b:ea:eb:50:9a:3e:
                    f6:2a:23:ea:a5:f9:de:97:38:66:f9:bf:ab:90:15:
                    29:eb:c1:9e:2e:43:1e:ec:da:20:ca:19:83:59:c3:
                    b4:96:dd:e1:cf:ff:7d:e1:30:54:e1:f6:bd:ce:7b:
                    e6:66:00:6f:74:05:02:26:59:17:ce:43:2a:c3:81:
                    ee:d6:20:03:2a:d1:43:5b:25:06:45:cd:69:79:92:
                    10:84:e9:06:6a:82:3a:06:76:00:69:b1:31:72:c7:
                    89:f6:f8:2b:d5:ee:c6:12:76:ce:14:5b:e2:7e:73:
                    8b:ae:9c:99:d9:e1:95:58:05:5c:c7:e0:f6:1d:08:
                    40:52:ff:7e:c9:83:01:0d:ac:91:c7:22:11:81:4f:
                    fd:73:8e:39:35:d7:9d:37:c5:57:bf:5a:5f:f1:23:
                    ae:e5:82:13:96:24:4b:47:fb:a6:31:7d:c9:03:db:
                    04:01:42:a2:c2:63:dc:29:f7:94:5e:f5:44:41:50:
                    ca:43:bd:fd:66:96:88:f4:88:ca:7c:ae:4c:25:c1:
                    ba:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CD:6D:14:B0:03:50:23:5D:5B:FF:E1:CC:C2:ED:2F:8F:FF:9E:45
            X509v3 Authority Key Identifier:
                keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:11:d5:76:3e:f3:cb:e1:04:35:7b:f3:82:f1:d2:b0:57:54:
         37:5c:11:ee:64:73:ce:5e:b3:cd:2e:0f:a7:86:11:05:ea:de:
         83:34:31:61:ec:86:dd:9c:d2:8d:43:f7:62:1a:9c:10:67:c4:
         eb:ab:c4:25:57:85:83:b6:62:ba:c5:89:e3:05:2e:2b:47:22:
         6f:5b:68:e4:f0:15:14:89:25:5d:55:dc:f3:be:7c:fb:18:e6:
         44:e4:87:4d:92:6a:ac:18:8e:3a:4d:77:ae:3b:98:40:ef:28:
         d8:c6:2d:43:92:d2:92:5f:b8:22:ab:56:57:40:55:65:a8:33:
         09:6a:af:b5:04:9a:58:03:01:55:d0:73:d7:3a:cc:47:73:8f:
         e0:43:7f:30:7e:62:cc:ce:8e:81:97:83:d5:4e:d0:5f:af:d9:
         29:c7:fa:29:24:a0:b2:c4:cd:09:27:c7:19:8b:49:a6:39:a7:
         17:28:fe:3c:23:0e:d1:25:07:10:11:05:b6:55:af:3a:5a:0b:
         12:d8:b2:64:b2:77:c5:27:40:e9:ba:cb:f8:a0:dc:15:a9:b0:
         55:06:2b:be:f3:89:72:e3:f7:65:78:c0:02:d3:b7:c9:94:ac:
         b8:f0:8c:04:a8:13:52:80:5b:32:b5:5d:cf:7f:01:1c:34:a7:
         4e:54:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:32:17 2025 by rpki-client