Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
File:                     s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json)
Hash identifier:          aYsRW51Ia629d+gCzsoQNXJPnGkRx8cB7yEYdvbJttw=
Subject key identifier:   BB:FB:1F:BE:0A:9C:C6:03:D8:DF:0D:11:77:C7:EF:1D:F3:AE:FA:FD
Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73
Certificate issuer:       /CN=b3e064e17335fdeb83a09862a735a6e97762d973
Certificate serial:       0196154698AAD0D7CFE36BA2AB62F21D03D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
Manifest number:          104A
Signing time:             Tue 08 Apr 2025 12:01:10 +0000
Manifest this update:     Tue 08 Apr 2025 12:01:10 +0000
Manifest next update:     Wed 09 Apr 2025 12:01:10 +0000
Files and hashes:         1: AWpLE7spKuCZAaiwcgrEYb9HbDE.roa (hash: HqSrJdcOFCUWqqNPEe+PAqwdq/X6tR+SRGcYc+ZwSvI=)
                          2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: D2KGhY11GoOEBUTNCJYUVpZy+EpLI/Fx+a+5y7pd19M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:15:46:98:aa:d0:d7:cf:e3:6b:a2:ab:62:f2:1d:03:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973
        Validity
            Not Before: Apr  8 12:01:10 2025 GMT
            Not After : Apr  9 12:01:10 2025 GMT
        Subject: CN=bbfb1fbe0a9cc603d8df0d1177c7ef1df3aefafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:66:1e:8d:b1:b7:ab:bb:30:16:e5:ab:e6:
                    4c:58:cb:f4:8f:e1:32:a0:55:97:47:65:df:cf:3c:
                    f6:9c:ea:cd:d9:cc:56:fa:59:6d:39:36:9b:19:34:
                    41:89:fb:e7:43:96:61:d6:75:ad:19:12:c7:62:7f:
                    65:51:09:c8:fd:d8:9b:6a:e1:dd:34:9e:5e:d2:04:
                    8c:39:c4:64:96:d4:ec:f5:68:b8:0a:80:08:60:72:
                    bb:af:f0:42:a7:9d:29:d0:a5:00:d2:34:0e:9c:ac:
                    15:b0:27:fc:c9:17:92:90:76:20:22:fe:16:a6:c4:
                    1f:7b:5c:b0:07:2d:18:0a:eb:14:f6:80:f7:68:87:
                    c4:e5:14:ba:13:c1:4e:1a:0a:45:1a:b0:bb:5a:56:
                    a3:26:81:25:e1:44:a7:ec:d1:8b:cf:a9:03:17:10:
                    27:ef:d8:62:be:30:8e:d2:8c:27:92:e7:44:86:05:
                    ab:c6:c8:c0:28:60:f7:c7:d4:0f:e0:2b:84:64:8f:
                    e3:2f:4e:d0:d5:9d:7e:70:e9:13:05:e4:20:ea:b9:
                    c3:43:2f:77:22:88:96:65:4f:6e:bc:6a:65:46:28:
                    ad:2b:2a:03:34:d3:49:e8:e5:89:2f:c7:74:38:d0:
                    e7:1d:25:73:c3:b7:99:65:1c:1d:4a:44:b3:5d:40:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FB:1F:BE:0A:9C:C6:03:D8:DF:0D:11:77:C7:EF:1D:F3:AE:FA:FD
            X509v3 Authority Key Identifier:
                keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:91:bb:9e:92:95:1c:5e:4a:f3:0c:c6:fc:83:98:90:7b:
         14:91:0e:8a:10:ba:26:d8:71:8c:13:fc:d7:0a:d3:d0:c5:21:
         5a:d6:ba:d1:fc:54:a1:32:1d:b0:39:44:d9:f9:42:17:48:78:
         b2:4b:45:d1:15:ba:8f:48:55:62:17:af:0e:ae:1d:e7:7a:9f:
         86:d2:aa:50:3c:af:a6:dc:91:f9:2a:84:41:66:fd:b9:2a:b1:
         41:89:51:54:7a:65:c4:46:97:63:9d:f3:af:19:29:8c:a6:88:
         74:b9:81:1e:1c:ab:fa:00:37:ba:c5:2c:d2:9d:a8:20:05:2d:
         13:ff:e1:a7:21:f6:d5:89:94:db:0b:98:29:cc:c9:1e:c1:d8:
         7b:ef:78:e1:2d:98:52:92:b8:93:01:3a:f6:cb:79:94:e6:58:
         f2:18:51:c0:c8:f4:4e:93:ec:65:09:06:20:fe:ad:17:76:b7:
         9b:a5:69:1d:eb:54:e6:2a:fc:ea:be:1b:4a:9a:bc:92:7e:8b:
         fb:cb:8c:de:97:3c:a8:07:d1:12:38:d7:a9:62:a8:e2:99:c6:
         90:47:8c:98:23:6a:31:d5:78:21:97:42:ff:c8:dd:17:2d:a3:
         2a:50:ce:d7:a4:4d:f5:84:d1:4b:68:be:e7:6a:21:68:66:1a:
         05:b3:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:16:05 2025 by rpki-client