Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File:                     v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier:          m4syXU45QudbL9Yw10FR8C2xWdANERV1NFeYrCX1Z8Q=
Subject key identifier:   D9:1C:FF:3F:FB:3E:50:5D:F3:E0:90:B2:FD:1C:7A:4F:B1:91:58:D5
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer:       /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial:       01963D9D3F4902445463CA89A5F77BB7BE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number:          11C5
Signing time:             Wed 16 Apr 2025 08:00:37 +0000
Manifest this update:     Wed 16 Apr 2025 08:00:37 +0000
Manifest next update:     Thu 17 Apr 2025 08:00:37 +0000
Files and hashes:         1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=)
                          2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: dVoGw4GRQnRRl6dq3W4Y0WJgCok9vsA+j1wPkiXmY/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3d:9d:3f:49:02:44:54:63:ca:89:a5:f7:7b:b7:be:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
        Validity
            Not Before: Apr 16 08:00:37 2025 GMT
            Not After : Apr 17 08:00:37 2025 GMT
        Subject: CN=d91cff3ffb3e505df3e090b2fd1c7a4fb19158d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:16:47:4c:13:81:a6:c9:48:1e:2e:60:39:cd:
                    ef:32:97:74:ed:1b:52:55:1c:eb:79:92:3d:53:8e:
                    90:e5:48:34:85:3e:21:95:a5:4d:83:5a:9b:b7:7a:
                    b9:9f:d8:5c:15:62:6f:c4:b9:d3:43:b8:91:3a:46:
                    34:60:76:bb:45:33:b5:6a:53:a6:62:93:6c:9e:7c:
                    f8:1e:bc:3d:9b:b4:4b:bf:87:2b:f1:ae:23:0d:a2:
                    48:71:b9:b0:1f:54:7c:32:bf:a9:83:89:29:66:bf:
                    64:87:72:44:76:34:65:d5:58:8a:59:a0:10:0b:8a:
                    fd:52:b1:7f:c8:a9:98:a3:ca:e2:2f:03:70:c9:99:
                    91:fe:ad:57:b9:d3:59:9d:bc:c7:43:50:9b:97:ba:
                    7a:b7:bf:a5:81:66:1d:c0:b5:dd:ad:c9:33:2d:46:
                    d2:87:e0:2f:a9:9e:f6:14:f9:db:5c:12:cb:5f:66:
                    04:55:e9:53:02:5a:a7:c5:88:12:f9:08:80:aa:98:
                    3b:fd:db:85:31:27:64:9f:c1:a4:65:a7:d0:a3:59:
                    b8:d1:55:6c:a1:83:d0:7c:2c:06:55:37:cd:7b:40:
                    97:41:77:37:ee:c8:50:f3:21:89:11:8f:d9:8f:d2:
                    fd:78:fb:cf:0c:80:1d:a2:e6:8b:05:80:18:18:2d:
                    90:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1C:FF:3F:FB:3E:50:5D:F3:E0:90:B2:FD:1C:7A:4F:B1:91:58:D5
            X509v3 Authority Key Identifier:
                keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:83:fe:12:89:d4:48:bb:c3:bc:e0:08:72:d5:73:da:d2:fd:
         bf:7f:88:a4:db:21:16:f6:57:96:7e:2b:c0:66:b2:a1:e7:07:
         98:c9:46:36:0e:2b:e5:52:43:28:55:de:d8:73:6b:66:fc:49:
         ec:db:55:31:47:21:fe:b1:df:b8:0b:71:8c:1d:b1:c7:1e:61:
         4e:cf:0a:7e:61:dc:cd:7a:7c:1d:45:0d:97:f4:3b:dd:5c:f6:
         ef:f8:0b:14:94:cb:4e:3d:5f:07:4e:e6:ba:7b:08:85:cf:95:
         37:1a:b9:bd:2c:e9:7e:fd:01:28:a6:9e:ff:e8:d5:d4:d6:2e:
         5c:34:1f:8e:ae:9e:49:2d:6c:5e:4a:a8:7c:c7:c4:d2:ae:33:
         99:8b:ad:14:bc:68:8f:14:02:3f:51:6e:ff:b5:61:93:7e:b3:
         6a:0c:9e:93:93:bd:22:4f:9b:52:6b:2a:b2:11:44:ec:6e:6c:
         41:36:ef:4f:90:ec:ba:41:94:6b:14:3a:d8:a4:33:f7:c9:b8:
         57:0d:03:8a:18:1a:fe:f0:26:e9:32:1a:06:4d:8b:d1:58:4a:
         eb:78:57:8a:64:15:14:e8:46:9a:d1:b6:ec:45:93:7d:c3:54:
         28:e7:de:04:6e:0e:6a:ce:3a:c5:3a:77:71:46:fe:d8:cb:7d:
         b2:c1:46:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:09:09 2025 by rpki-client