Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File:                     bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier:          HbOfBKRSY+s1oC5nDyLWBD4EGb2Q28J3kuxK6vPiZ8I=
Subject key identifier:   F3:EF:1B:E4:86:C4:89:DD:FC:8C:B5:B3:1B:07:E4:ED:90:9A:41:18
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer:       /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial:       01963FF98F23CCD564F5B96608850778409D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number:          0674
Signing time:             Wed 16 Apr 2025 19:00:41 +0000
Manifest this update:     Wed 16 Apr 2025 19:00:41 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:41 +0000
Files and hashes:         1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: C3uvIkr3fVOkiXqrGBup/XHllkAPLjRLhyl13sQsg7g=)
                          2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3f:f9:8f:23:cc:d5:64:f5:b9:66:08:85:07:78:40:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
        Validity
            Not Before: Apr 16 19:00:41 2025 GMT
            Not After : Apr 17 19:00:41 2025 GMT
        Subject: CN=f3ef1be486c489ddfc8cb5b31b07e4ed909a4118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:ac:58:70:45:8d:aa:c0:7f:fd:03:77:b4:
                    21:af:34:6e:c5:b0:e2:14:aa:55:75:91:79:15:69:
                    3a:69:19:75:29:38:7e:3a:bc:f0:04:3a:31:e8:56:
                    1f:d5:d0:1b:d0:1d:96:48:74:c6:ad:52:7c:f9:4c:
                    a3:15:c7:75:40:b7:02:ab:09:bf:80:af:0c:f2:12:
                    cb:0f:9e:3a:b2:b2:a5:30:9b:55:b9:4e:4f:69:da:
                    f5:93:f1:2c:8d:ac:19:61:63:db:38:cd:fe:7b:ae:
                    1c:9e:d5:84:cc:62:d7:4e:45:63:e7:92:c9:5a:2b:
                    e9:61:a2:9b:c6:f9:7b:7f:9d:97:59:a1:ab:6d:38:
                    0d:d7:bd:4e:09:39:b4:a8:91:6e:98:18:53:46:d2:
                    dc:00:3e:58:b7:80:39:e1:ec:55:f7:cb:7f:ed:ed:
                    14:2a:5d:d8:e9:c9:62:fa:ef:be:54:b9:aa:2d:cf:
                    60:2f:da:f3:17:32:d2:c6:28:6d:e2:f0:98:6b:eb:
                    33:8e:57:c7:01:52:2b:1e:63:5c:0d:66:3a:d2:67:
                    dd:3b:a4:34:6f:6a:28:0d:84:91:a5:67:4d:ad:70:
                    7b:fb:77:d2:4a:8c:14:92:bf:92:77:98:bb:ab:e8:
                    2d:38:68:c9:f8:42:5d:cf:28:1c:9c:4c:fc:c5:c8:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EF:1B:E4:86:C4:89:DD:FC:8C:B5:B3:1B:07:E4:ED:90:9A:41:18
            X509v3 Authority Key Identifier:
                keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:f2:f2:a3:5e:f2:e9:4e:13:4a:77:b1:39:1d:e2:c2:20:
         de:f8:20:70:e9:74:24:68:4e:a8:27:3c:3e:c0:1d:b4:b5:60:
         8b:a4:6a:94:af:c1:c3:4a:44:a2:29:8a:0c:68:52:0f:3c:24:
         83:05:be:14:ae:f2:20:20:29:09:05:0c:c9:8c:09:04:bb:e1:
         b2:bb:19:c9:2b:58:0e:99:2a:3c:34:f4:3c:e9:59:a5:a5:b7:
         d6:3a:09:0c:96:a7:8e:cc:58:f1:30:5e:9e:df:f9:2a:2a:6e:
         61:1f:d9:4c:a2:12:7c:89:5d:c5:51:a0:9b:62:c6:5d:50:ab:
         4d:d1:37:d9:16:ac:10:54:4d:c8:c9:ed:ef:ff:c9:2e:3b:67:
         78:61:64:21:f1:b4:bf:79:4d:dd:e3:d3:36:b8:a5:5a:c1:6d:
         7b:8c:91:1c:77:0b:36:44:15:c7:16:3e:d7:d3:e3:4a:10:3b:
         8d:cf:e4:ac:6d:e3:b0:c5:27:a9:f7:66:aa:6d:fa:1f:bb:57:
         03:3b:5a:72:f7:ea:96:c6:9b:37:63:87:6a:dc:09:90:ca:d8:
         e0:12:f0:f3:08:ea:62:08:1e:98:4b:23:be:ff:57:ae:a3:9c:
         6f:52:f9:97:98:d8:9b:f8:30:ef:90:ca:ec:1d:f0:b7:b4:35:
         45:46:72:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:35 2025 by rpki-client