Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          eGZ7rT1MIcrTRuL3jhrhtV0fGFLHP3DeniyyNI3Ai3g=
Subject key identifier:   69:76:AC:94:9D:7A:04:F3:3C:BA:17:C6:A7:ED:4F:E4:90:F7:E1:C8
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01963B0A5F25BEEBD4579D3309AE7B0DFCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          14F1
Signing time:             Tue 15 Apr 2025 20:00:57 +0000
Manifest this update:     Tue 15 Apr 2025 20:00:57 +0000
Manifest next update:     Wed 16 Apr 2025 20:00:57 +0000
Files and hashes:         1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
                          2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: vG1Gd/POSmH/2YoU7qaWVIoXB5GLY3fcs8XPY3n9pq0=)
                          3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
                          4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
                          5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
                          6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:0a:5f:25:be:eb:d4:57:9d:33:09:ae:7b:0d:fc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Apr 15 20:00:57 2025 GMT
            Not After : Apr 16 20:00:57 2025 GMT
        Subject: CN=6976ac949d7a04f33cba17c6a7ed4fe490f7e1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:7f:fb:d3:0e:d9:b0:a2:1f:15:c5:17:f4:
                    10:6a:af:e8:2c:53:d3:25:26:1d:09:56:33:20:92:
                    07:50:8f:43:dd:cb:35:c2:ca:94:57:36:08:03:2e:
                    1f:fe:75:2e:90:f0:04:cd:ab:53:86:32:4d:c0:c3:
                    9b:45:38:0a:26:ea:45:ee:44:67:44:1c:41:5e:a8:
                    20:a2:a7:1c:14:ba:9d:f2:b0:d7:0e:3c:cc:af:8d:
                    14:d5:d7:23:08:b9:dc:01:c0:a4:9a:94:7b:6b:45:
                    c0:93:10:ef:4b:85:cb:b8:5c:06:83:96:28:e8:79:
                    7d:5f:c6:16:69:a0:dd:b8:0a:e8:05:7b:71:1a:12:
                    21:b2:b3:f2:70:b2:01:61:cc:ca:4d:bd:95:1a:c7:
                    0c:6b:85:6a:3b:f6:5f:5f:45:7d:a7:fd:23:e0:e6:
                    68:d4:39:f7:9d:ec:6e:95:82:75:8d:78:39:6e:5c:
                    5e:42:1e:4d:8b:4c:3b:48:98:f3:ab:f3:1a:a2:1a:
                    04:a1:d8:f4:45:6d:43:c6:a1:30:35:9f:4f:37:39:
                    7f:3f:78:72:4c:79:a1:1c:6c:2b:cb:06:dd:06:21:
                    eb:56:e1:be:93:7f:97:c1:0d:64:66:f7:6f:d7:25:
                    56:0a:d6:e0:90:2d:0d:39:7c:f5:14:f0:4e:b5:5b:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:AC:94:9D:7A:04:F3:3C:BA:17:C6:A7:ED:4F:E4:90:F7:E1:C8
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:87:dc:a7:b0:84:0d:e3:6d:c1:d4:78:ab:64:7a:6f:0d:96:
         0b:c8:ab:b6:fe:77:ad:0b:b3:e3:81:6c:d1:c2:d5:31:2a:32:
         06:b7:b7:35:bd:60:e1:19:b9:23:87:bd:80:17:76:8e:51:d5:
         72:8d:f0:aa:e8:66:63:ef:03:29:37:02:0b:0a:53:1a:a1:ef:
         61:fd:5c:43:45:7e:c0:a9:4b:70:0c:cb:22:68:f2:e6:79:9d:
         fe:5c:6b:93:ee:6f:27:50:27:dc:5b:f9:88:42:56:b3:9f:f2:
         34:96:ae:6c:d6:05:c3:fe:47:7b:dd:4c:4d:3f:8a:bc:48:83:
         8b:3a:67:50:2b:fb:11:9e:69:8c:6e:c4:bd:4c:14:a6:64:71:
         c2:89:84:39:44:76:11:e6:d4:03:89:38:11:8e:bd:01:71:f5:
         95:7a:c8:50:3d:e0:1e:53:bc:99:f0:01:6f:20:c1:8f:df:0e:
         08:8f:d2:38:65:c5:c5:11:bd:e3:88:7b:93:19:aa:d2:fd:e2:
         59:db:d6:60:c8:78:56:40:eb:d9:03:c3:7e:16:fe:1f:56:33:
         7d:24:87:08:e0:23:55:a9:a8:a0:b5:1e:e8:9e:9d:57:bd:2c:
         54:60:34:a5:17:2e:20:fd:d2:d1:33:a2:6c:4f:ad:ae:df:3b:
         37:77:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 00:19:13 2025 by rpki-client