Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          bG+OD+oXDD2yM2c9jUW1oubfUU2KRXxE4PDuKM205bk=
Subject key identifier:   2B:F7:6F:38:C0:BF:DE:C4:EB:78:2E:BD:21:F8:66:F3:60:D9:A5:A7
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       01963C537D022658C445D1EC7A9972AD8A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          11CC
Signing time:             Wed 16 Apr 2025 02:00:26 +0000
Manifest this update:     Wed 16 Apr 2025 02:00:26 +0000
Manifest next update:     Thu 17 Apr 2025 02:00:26 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: X2qeVrM0kU8SgFepVcMi6wWKz1AbBcOVe/XmsYZNG7E=)
                          2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3c:53:7d:02:26:58:c4:45:d1:ec:7a:99:72:ad:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Apr 16 02:00:26 2025 GMT
            Not After : Apr 17 02:00:26 2025 GMT
        Subject: CN=2bf76f38c0bfdec4eb782ebd21f866f360d9a5a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:65:9c:55:6c:a5:a6:8e:76:8d:95:15:ad:
                    48:98:ac:ac:54:35:5a:82:6c:b0:c1:3d:2f:01:59:
                    2a:bb:af:df:2d:70:0c:ec:11:28:32:9f:d9:92:c2:
                    b7:dd:9c:e2:bc:4f:f0:44:f1:09:fd:41:4b:c9:58:
                    31:8b:27:1e:f3:a6:79:9e:fa:91:ae:26:fe:46:55:
                    52:81:af:ad:2f:71:ab:a7:c9:81:d5:11:e6:15:5b:
                    f3:57:87:3f:03:eb:2c:f7:4f:0c:02:45:f9:51:e6:
                    8c:34:e2:3f:0c:82:d1:8f:c4:59:75:3b:d0:79:08:
                    2e:ca:e2:2e:1b:fc:a0:bd:a1:4f:1a:de:5f:05:c6:
                    05:6c:04:0e:3e:61:eb:5e:d2:61:f0:e6:c5:00:3d:
                    a3:c7:bb:2d:2c:2e:c0:c9:e5:8b:c1:1e:f5:13:8b:
                    74:f8:82:0d:33:9d:60:bc:ab:04:7b:c1:fe:99:18:
                    34:45:3d:a6:97:a9:53:e6:a2:82:cf:1e:84:67:d3:
                    ed:2f:3e:de:b2:06:29:0c:11:53:ee:ab:58:0f:db:
                    93:ff:fc:a6:26:94:81:d7:ba:05:6c:a7:63:a1:68:
                    25:9d:6b:39:20:58:42:06:fb:0d:54:5a:a4:27:99:
                    2f:69:c0:a2:36:2a:3d:3e:72:a0:66:fd:e4:c1:7f:
                    09:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F7:6F:38:C0:BF:DE:C4:EB:78:2E:BD:21:F8:66:F3:60:D9:A5:A7
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ec:61:a1:fe:0e:f8:e7:97:ca:2a:78:aa:da:18:f9:af:16:
         a3:f4:4b:31:a3:67:bd:ae:64:e3:2b:e7:f1:98:de:7d:3b:d8:
         b6:05:03:37:52:26:a4:05:93:22:c4:bf:94:c6:6e:e6:27:cd:
         12:42:a9:2c:d5:f7:a4:f8:bf:32:0c:8a:a7:51:5a:97:60:a6:
         6f:a6:8e:15:ce:37:79:d9:99:a5:63:cd:ec:d8:68:22:0b:96:
         42:0f:a2:99:d9:ba:b5:6a:25:7f:f6:3b:70:b6:aa:12:5a:1e:
         0e:33:ac:68:73:bf:97:de:6a:55:95:33:41:a1:5e:e2:75:44:
         ec:41:49:65:c3:76:21:89:3b:67:02:97:c5:f2:0d:98:79:6d:
         08:0d:81:de:03:b6:77:c6:9b:d0:56:77:55:c1:e6:3c:1e:c1:
         ee:54:cf:ab:59:b7:5f:b4:02:ba:66:c5:c4:4a:39:2f:be:34:
         8b:b1:d8:0c:c9:d0:96:ff:bf:d0:5b:70:2d:0c:56:4c:c9:86:
         8e:99:68:89:f8:4d:4c:45:c6:e5:66:36:8e:f8:de:26:bc:ea:
         d0:d9:1a:81:58:6a:93:e4:b8:92:54:9a:26:92:4c:65:7a:cb:
         b0:32:d2:a4:33:1e:db:1a:82:2e:2b:a1:bc:6a:25:32:ff:b4:
         f9:60:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:44:53 2025 by rpki-client