Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          96MisV7wF3Y2vmukI+lplZGZd5T8MdwQbkNmG4eZU70=
Subject key identifier:   79:6A:C9:46:02:63:99:7A:50:2E:7F:47:A4:BB:19:BD:4D:BA:6C:CE
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       0196428CA278B8E30556967CAA2C8189D583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          07B3
Signing time:             Thu 17 Apr 2025 07:00:34 +0000
Manifest this update:     Thu 17 Apr 2025 07:00:34 +0000
Manifest next update:     Fri 18 Apr 2025 07:00:34 +0000
Files and hashes:         1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: Mqb0wXhZhZ3crgke+R3tLPSfyBhKmVH5/QwTB76lYoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:42:8c:a2:78:b8:e3:05:56:96:7c:aa:2c:81:89:d5:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Apr 17 07:00:34 2025 GMT
            Not After : Apr 18 07:00:34 2025 GMT
        Subject: CN=796ac9460263997a502e7f47a4bb19bd4dba6cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:81:e8:f9:7b:6c:17:aa:b7:ec:ec:78:67:
                    e8:77:d2:2c:d1:31:65:68:8d:d9:5a:4d:5e:e0:6c:
                    92:04:b7:5e:ea:9c:7c:01:28:25:65:1f:8e:23:b0:
                    e2:52:49:10:fb:05:2d:59:80:c1:ec:52:11:4e:de:
                    85:48:47:ae:5f:4e:a4:c4:c6:e1:6f:23:42:7d:82:
                    4b:72:af:11:41:81:5d:4d:b8:f2:d5:bf:96:fb:1b:
                    19:1c:9a:b6:cf:b7:ad:64:c7:11:e2:b3:2b:e2:4b:
                    6a:ba:23:0c:73:1c:e3:d2:12:35:08:88:a8:72:f1:
                    df:79:7f:50:08:46:38:bf:9a:99:b1:e9:62:64:52:
                    e8:c8:c3:89:a4:78:a2:13:20:3a:9b:d9:17:d7:0e:
                    89:d3:1d:45:b7:cf:1f:9a:38:dc:64:89:8d:0f:2d:
                    ba:5e:66:2b:c6:9d:e2:96:8b:2e:83:3e:09:d1:35:
                    ba:0f:e6:32:b1:a8:46:c7:d7:b6:70:67:f4:77:5c:
                    c7:0d:1a:bf:6c:a4:14:c1:9d:7d:e4:26:01:7b:f2:
                    17:1b:f3:e8:17:c9:cd:25:db:f2:8d:43:30:94:04:
                    6c:40:81:8d:cd:14:98:b6:20:51:3d:8d:b8:ed:59:
                    19:8e:d4:ac:24:4f:69:ce:12:4b:f9:03:09:ab:4e:
                    09:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6A:C9:46:02:63:99:7A:50:2E:7F:47:A4:BB:19:BD:4D:BA:6C:CE
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:58:5a:52:f5:2a:73:6c:f8:ca:78:df:6c:bc:70:f2:68:fc:
         ec:7b:bc:8a:6b:c8:71:9e:94:fd:9a:e0:14:5d:44:22:f8:7f:
         09:a0:c0:b3:1d:24:b0:29:bf:ad:ef:fa:73:d1:81:cb:f9:d1:
         cf:ae:0f:98:cb:a2:16:8a:ad:e2:87:f3:8f:ce:1c:b8:84:e5:
         a0:ac:58:1a:e8:e6:82:b5:4e:40:81:cd:8e:01:55:e6:63:79:
         b9:d1:4b:2e:51:93:66:b7:86:d6:fb:f1:f4:b8:c9:cd:4d:47:
         8a:f2:cf:36:e0:74:c1:bf:89:45:5c:a9:64:03:6d:51:6c:26:
         d0:1a:b3:10:a3:eb:4e:2c:6c:a0:5a:c9:8e:12:6f:d3:92:80:
         9d:2e:e8:bb:b7:df:96:57:41:16:49:ae:f9:4f:93:bc:0a:2d:
         e1:1c:7c:9d:f8:6a:a7:ab:59:11:34:7a:35:ba:cb:9e:5b:6a:
         3b:86:d5:74:63:71:67:c6:5f:33:6e:12:5e:c6:df:3f:fc:17:
         56:f5:aa:9f:ff:df:40:71:a2:80:0c:1b:f2:a3:43:ea:2c:44:
         73:c7:79:d9:fb:cf:b6:c1:57:82:0a:77:4b:15:9d:3f:65:d9:
         53:ad:b6:7a:cb:14:87:64:a4:49:10:1e:86:4f:5c:a5:93:1e:
         eb:4d:df:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 11:53:01 2025 by rpki-client