Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          22BNSbKSVuh3Ys8qKpyOmgB/DM2B42XTe4dMKDyq1OY=
Subject key identifier:   46:2C:62:60:CA:3D:02:69:9D:FD:34:B2:6B:16:48:48:9E:2A:4F:08
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019747E7CCC53540C475C0C15A07EF960357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0DAA
Signing time:             Sat 07 Jun 2025 01:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 01:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 01:01:02 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: ezttSptSD6DOMeM9hHuLpJM5zx2fb+gE92Iom+yzDms=)
                          4: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
                          5: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:e7:cc:c5:35:40:c4:75:c0:c1:5a:07:ef:96:03:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jun  7 01:01:02 2025 GMT
            Not After : Jun  8 01:01:02 2025 GMT
        Subject: CN=462c6260ca3d02699dfd34b26b1648489e2a4f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:c3:f5:48:6b:32:bb:cf:a9:21:92:7f:1b:
                    4d:23:6c:26:6d:14:36:eb:2f:9b:b7:ac:9b:53:bd:
                    2f:3e:01:74:01:bf:c8:db:f4:a8:e9:37:72:86:8c:
                    e7:25:d9:6c:4a:d2:0a:93:e9:9a:b3:bf:e9:b8:e9:
                    23:48:b1:00:aa:8b:5f:d9:e0:d2:5a:fa:c3:13:53:
                    04:98:72:7b:0e:0b:3a:81:9d:ab:b5:79:78:87:c4:
                    fa:53:f7:c0:91:cd:7d:99:b3:05:fc:08:6b:3d:7c:
                    f9:de:08:0a:b3:14:d4:9d:39:56:42:a8:c9:8b:05:
                    4c:5e:f1:88:e8:33:3a:b5:92:6d:0b:23:ba:cc:bd:
                    93:d1:fb:db:c9:31:e6:ea:05:55:2b:bf:11:b2:7d:
                    18:8d:d0:37:f5:fe:0c:fb:9b:92:fd:fa:54:c6:74:
                    01:37:d6:d2:0e:83:1e:3f:6a:2d:45:9b:3c:cd:2d:
                    7c:31:c3:d8:63:5d:40:01:5f:e3:9a:58:1a:78:1a:
                    4d:fd:e3:d3:78:5c:02:12:76:3f:ae:77:6b:59:20:
                    75:04:3a:ee:03:4a:88:0a:6e:b0:2a:ed:d7:f4:95:
                    46:24:34:23:43:97:8c:45:c8:fe:9b:d2:76:4b:9e:
                    b0:7e:02:b3:d4:2b:8f:60:1e:61:20:a8:37:0b:58:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:2C:62:60:CA:3D:02:69:9D:FD:34:B2:6B:16:48:48:9E:2A:4F:08
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:52:38:ed:85:5e:65:ea:c0:6e:7c:66:98:57:81:ed:6b:31:
         ab:84:19:97:97:2b:ce:86:50:17:9d:46:65:3c:58:3c:68:4d:
         67:c6:13:a6:af:4c:80:1e:4b:b6:82:a6:f6:82:cf:4e:c8:d9:
         52:20:03:e6:39:9b:84:bb:c8:82:e6:05:97:d3:f0:c0:0d:a0:
         22:56:ff:57:57:6e:62:40:62:d7:b2:a3:6a:e5:cb:f6:26:11:
         42:a5:e3:bf:b5:35:c5:df:b5:f4:f1:dc:b4:2e:67:96:e4:c6:
         d0:d3:9f:91:ad:99:cd:73:b1:c1:fc:28:18:e8:43:b4:2f:5d:
         43:a4:0b:82:b0:0e:78:cf:4e:0e:47:d3:f8:32:ef:f2:28:9a:
         80:c9:6c:13:99:5c:0c:82:1b:44:ae:6d:7e:9e:32:ea:93:56:
         4f:0b:e0:c1:3b:c6:16:9f:f9:e2:0a:db:65:a1:9f:10:f8:6f:
         62:5a:68:73:af:a6:6f:7a:06:27:f7:23:78:06:2d:7b:47:82:
         44:46:ea:07:c6:ae:47:aa:2c:30:f9:1a:30:f3:99:1d:cd:42:
         3e:da:23:a6:28:3a:27:c4:04:9a:a7:d2:20:c6:a0:92:fa:c1:
         42:1a:d4:7f:81:94:12:24:06:b8:a6:0c:81:2f:9a:64:30:8d:
         f3:86:f7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:37:10 2025 by rpki-client