Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          Yv7ftmw06CrCqwtLfZAkSompXqgfYGILkOVPoRoOCrY=
Subject key identifier:   3F:4F:A2:8D:10:C8:B8:DF:3A:F9:28:32:2B:1B:91:BC:05:9D:5A:07
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       0197C75CF64774708290E3DA69F040A6A266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0DEC
Signing time:             Tue 01 Jul 2025 19:00:47 +0000
Manifest this update:     Tue 01 Jul 2025 19:00:47 +0000
Manifest next update:     Wed 02 Jul 2025 19:00:47 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: ld9m45EtEO0w29p9JZGvOhPxx+loPqD+xv2cAt+Nvyc=)
                          4: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
                          5: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c7:5c:f6:47:74:70:82:90:e3:da:69:f0:40:a6:a2:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jul  1 19:00:47 2025 GMT
            Not After : Jul  2 19:00:47 2025 GMT
        Subject: CN=3f4fa28d10c8b8df3af928322b1b91bc059d5a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:a4:1a:5d:32:0b:03:59:0a:46:49:63:4f:
                    a5:2b:c9:d7:c0:6f:a8:3e:0e:81:45:0e:cc:38:19:
                    01:27:de:77:97:0d:f8:49:c2:d2:e4:9a:90:be:af:
                    2e:fe:49:e9:41:27:d7:b2:1d:ef:f6:66:f3:9e:a8:
                    06:81:19:bc:4f:cb:b7:e0:d6:63:14:9d:e6:48:f8:
                    58:e1:ac:93:90:db:4a:82:89:32:38:63:03:0d:cc:
                    c6:63:f7:92:0a:7a:ee:89:94:d0:8b:ba:43:b7:cf:
                    1c:a6:54:0b:2b:aa:06:df:ce:e5:d7:dc:f1:37:9b:
                    a4:b4:1d:44:d6:04:d7:15:3e:4c:47:0c:6f:40:1f:
                    5d:62:ad:85:8e:33:c5:81:51:86:ad:3e:c7:22:30:
                    7b:73:0f:dc:08:55:9a:eb:19:58:73:ed:25:b6:62:
                    85:6e:5b:07:af:fe:cd:60:b2:5d:74:d7:c2:44:c9:
                    7d:1a:63:a9:3e:e1:80:ac:80:61:92:d5:c2:d5:95:
                    1b:71:f5:74:21:dd:1c:42:06:d5:3f:37:08:2e:65:
                    8c:06:79:b6:a5:2c:a6:7d:6d:7b:f5:e7:47:5e:fd:
                    96:e4:e9:c0:4f:75:05:f2:cc:22:3d:c6:05:28:c1:
                    fc:b5:fa:3d:2b:2b:7b:c6:fd:e8:7d:85:96:78:cc:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:A2:8D:10:C8:B8:DF:3A:F9:28:32:2B:1B:91:BC:05:9D:5A:07
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:5d:14:d9:9e:b9:1a:ac:89:7a:e3:98:0c:49:00:d3:17:10:
         10:a7:3a:9e:97:ba:c8:4c:43:2d:67:5a:c2:46:86:2b:8d:09:
         82:81:40:d1:ae:08:0b:d1:89:5a:fe:ba:16:df:c5:72:9d:f3:
         03:91:47:ae:33:08:8c:b0:62:5c:b1:ff:87:44:65:bc:d9:de:
         a7:19:39:87:4c:95:18:a9:8a:2d:90:17:fc:30:2e:64:ff:23:
         a5:46:53:96:b2:cc:24:b0:6a:33:1e:7d:29:03:eb:d8:ce:8c:
         8b:89:1d:ed:95:56:7e:da:3a:fa:6c:7a:a1:f4:c9:cb:05:12:
         b3:d9:f3:83:8e:aa:96:7f:8e:1b:3a:7a:37:a1:4d:ae:ff:8c:
         62:9e:a3:6a:e9:9c:ac:62:99:29:53:17:39:75:a3:9b:6a:48:
         f9:a1:37:88:73:01:32:18:88:c1:84:c5:85:d4:85:0e:a9:93:
         35:f1:bd:cc:9c:45:19:26:b0:41:e5:27:42:b2:b0:ff:63:f4:
         9f:2e:d0:30:dd:4c:0e:d1:05:ad:91:a6:00:1e:e9:7d:68:a1:
         4a:ee:05:a6:34:c4:9f:bb:49:68:65:9d:91:ee:c7:03:25:b3:
         ac:b0:51:9c:07:2f:aa:70:a4:95:78:4b:5f:95:73:57:28:22:
         ef:31:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 01:00:27 2025 by rpki-client