Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File:                     btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier:          vJzmb5141ouGa7eRK+qi9B2++NTc0CIl0wd2lgCdipA=
Subject key identifier:   6F:CE:E3:3B:6C:06:7D:0E:FE:5A:63:A5:71:91:36:83:A4:B1:D7:0C
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer:       /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial:       01958FCF262086BB5AF5B2037885A7E6043D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number:          016B
Signing time:             Thu 13 Mar 2025 14:01:12 +0000
Manifest this update:     Thu 13 Mar 2025 14:01:12 +0000
Manifest next update:     Fri 14 Mar 2025 14:01:12 +0000
Files and hashes:         1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
                          2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: 6+TVxmDJrqH43s0YdscytjwdNFYDa8VxudwujzWqAS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:cf:26:20:86:bb:5a:f5:b2:03:78:85:a7:e6:04:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
        Validity
            Not Before: Mar 13 14:01:12 2025 GMT
            Not After : Mar 14 14:01:12 2025 GMT
        Subject: CN=6fcee33b6c067d0efe5a63a571913683a4b1d70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:05:80:c2:f8:77:5c:39:95:85:ce:d1:df:
                    d1:6f:dd:9f:6d:06:35:4f:e0:86:f9:fe:65:a6:b9:
                    82:c5:3b:57:fd:f9:50:22:dc:21:2b:f8:92:7b:47:
                    f8:4d:1a:5f:5f:a9:ed:3a:7e:54:3c:29:1a:c9:e1:
                    44:e3:04:75:6b:4a:2d:db:b6:1b:d7:6e:2d:eb:e5:
                    e6:2e:10:cc:af:8f:51:08:8a:88:73:ba:96:94:64:
                    7e:a4:40:b0:dc:30:8c:96:5b:91:b0:ec:95:3b:ec:
                    c7:f5:a3:2a:15:ab:7a:89:28:b0:02:74:15:9d:aa:
                    5d:6e:dd:d2:66:e6:d1:00:d8:2d:0c:dd:ce:4c:ec:
                    13:26:f3:a9:cf:c0:14:e1:63:c8:37:69:79:70:9d:
                    b8:37:ef:37:5e:d6:88:25:d0:79:f4:1b:e8:08:60:
                    1b:fe:68:f3:a4:f5:49:45:92:55:ef:c6:94:48:bb:
                    6f:a2:eb:a2:ef:ca:0b:89:53:a3:2c:8b:db:c0:0f:
                    46:85:b6:96:30:51:ab:0a:ce:e5:5b:b0:f3:b8:73:
                    49:c7:51:4c:8e:20:24:ba:a2:af:76:78:b0:72:38:
                    c5:7d:b9:fe:d6:86:c8:90:8a:b2:5e:ac:69:cc:fd:
                    0d:93:ed:2a:a1:32:3f:1f:2e:2d:1b:c5:e2:e2:8b:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CE:E3:3B:6C:06:7D:0E:FE:5A:63:A5:71:91:36:83:A4:B1:D7:0C
            X509v3 Authority Key Identifier:
                keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8f:54:05:67:11:f4:18:68:06:42:7c:44:19:84:ee:03:04:
         ed:04:9d:df:8a:b7:c4:6c:81:aa:eb:1e:e6:93:06:3c:c7:ac:
         26:4b:ad:99:6b:2b:bc:72:21:07:2e:0b:17:38:35:52:4a:02:
         9b:84:e1:ad:96:7c:32:82:57:57:23:e2:4f:71:a5:c6:2e:f4:
         34:5a:a3:ba:f6:dd:2f:cf:b4:b5:12:6d:98:42:ea:47:5c:00:
         c9:ff:e5:e8:b1:4b:9b:45:38:31:cd:6b:66:1e:a7:f5:86:0c:
         85:3c:cd:9e:6e:c2:43:44:7b:f0:c0:b4:de:ef:5f:74:d6:c0:
         3e:58:86:2c:f8:46:b2:d6:b5:12:3d:c5:39:1a:ab:8b:08:a5:
         5d:a0:d7:94:7a:dd:f1:a3:5e:dc:00:80:99:00:4c:69:41:94:
         f6:ba:7c:49:36:2e:e0:d3:b9:ee:a2:6a:c7:10:50:7e:a9:f6:
         ec:d1:e3:db:b0:bf:98:66:58:13:20:f3:57:3e:53:f5:58:bd:
         f6:69:5d:90:79:cf:d8:fe:99:3e:33:03:9d:54:1a:ba:77:19:
         af:4c:f4:65:07:8d:50:63:6c:ef:64:60:e8:d8:0a:02:cf:e6:
         4b:7c:80:e7:c5:16:28:db:4a:8e:05:05:5b:08:cd:63:fe:66:
         f0:b2:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:45:00 2025 by rpki-client