Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          0llvxCGWJ1dpDLZwOowrQiZ5q2L2rBSMTnHHVfbBRtw=
Subject key identifier:   69:EA:35:51:EC:DE:03:F9:B8:1F:2B:F2:C9:73:71:A4:1F:3C:52:65
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       01964F6C4CCF6CCDF18C84F016CD8A25708C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          083F
Signing time:             Sat 19 Apr 2025 19:00:19 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:19 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:19 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: GaXm9GjBlvkW+YmSXWVHTdVVZ+kOLqqfSJn3wK1b1oc=)
                          2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
                          3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:4c:cf:6c:cd:f1:8c:84:f0:16:cd:8a:25:70:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Apr 19 19:00:19 2025 GMT
            Not After : Apr 20 19:00:19 2025 GMT
        Subject: CN=69ea3551ecde03f9b81f2bf2c97371a41f3c5265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:9e:85:30:44:3b:f9:77:a9:8b:aa:5d:87:
                    9d:a4:30:97:cd:9b:b9:0d:94:50:97:d8:e1:58:7a:
                    95:fb:b9:c0:ac:a2:65:ee:34:78:e1:11:c8:a3:b6:
                    af:f9:2a:c9:d3:f4:3b:8a:97:cf:b1:d1:d1:27:a4:
                    e6:f2:74:d7:59:59:ab:87:30:87:27:3b:eb:fa:4c:
                    1a:62:8c:c9:5b:4d:50:6d:12:07:ba:0c:15:d7:d8:
                    1f:55:b8:ae:cf:66:84:09:79:7e:84:f2:94:00:39:
                    71:b2:6d:72:e5:12:64:a9:26:db:f8:86:45:af:dd:
                    12:3e:27:6f:b4:4b:d5:b7:4b:0c:7e:73:f3:c7:bf:
                    bb:92:cd:0f:d2:31:a7:2f:1d:c3:dd:42:f9:26:a5:
                    3e:cb:c8:be:81:87:5a:9e:2c:2d:52:68:bf:dd:5e:
                    31:cb:bf:1f:66:fe:c1:29:55:9c:a5:fe:73:5c:4a:
                    00:7b:39:41:2b:1f:2b:8b:a2:f0:26:06:03:c4:96:
                    6d:b8:b1:17:3b:8b:b3:cf:78:4f:d6:9e:24:76:36:
                    da:ea:58:f5:8b:a0:27:ce:80:18:a0:ce:86:1b:1a:
                    af:6b:07:4a:a8:c5:97:59:24:81:69:81:39:53:45:
                    78:13:53:47:79:22:71:06:33:c6:98:61:c9:45:f0:
                    2b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:EA:35:51:EC:DE:03:F9:B8:1F:2B:F2:C9:73:71:A4:1F:3C:52:65
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:c0:33:3a:4b:10:c0:fb:0d:55:da:30:52:d7:7c:5f:2a:
         99:4e:9a:7c:34:8c:e1:4e:d5:0a:09:5f:28:7f:66:45:51:bc:
         91:32:a9:f3:a3:d3:45:ed:c4:40:53:82:ad:6a:eb:b2:b5:70:
         d2:d7:9e:58:2d:0a:0d:ec:33:ba:51:72:87:25:71:98:c3:a4:
         15:1b:f5:78:5e:1b:17:1c:97:3f:88:00:e9:ec:d2:cd:cf:ee:
         cc:a3:37:6f:8a:af:e3:34:66:00:12:73:e3:6b:f3:92:a1:17:
         49:d1:c1:44:45:6c:54:6c:d4:83:06:e9:fa:33:1d:27:f8:a4:
         7e:10:72:e4:3e:52:8f:4e:04:d3:8d:8d:04:b4:39:2f:96:30:
         ba:e0:6f:0c:e7:b4:60:49:5d:18:c4:5c:2f:03:72:c4:88:02:
         29:33:a2:7e:98:47:70:7c:cc:28:47:ae:93:2d:2d:e8:e8:45:
         2a:be:8a:e3:a4:21:23:50:44:4b:4f:70:9d:91:8d:eb:db:75:
         50:1b:63:4c:03:be:0c:30:27:15:6b:b7:51:e1:3a:f9:57:fc:
         fd:39:12:56:47:c0:1d:39:53:ce:5e:97:5d:0b:86:0c:ad:8b:
         70:30:b0:3c:3c:44:9c:68:f2:d5:c9:33:38:fb:be:ae:d1:ec:
         59:8d:55:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:31:38 2025 by rpki-client