Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          GMcgcIy0jRgt3iIvVFgc1D8jncp9QTM890qTm3ey2EI=
Subject key identifier:   23:8A:B1:B9:0D:E8:97:56:FA:3B:37:D8:E8:36:AD:9A:4C:5E:41:8C
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       01963B0A7766DF1E71F8B5AACE4C6AFF496E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          0474
Signing time:             Tue 15 Apr 2025 20:01:03 +0000
Manifest this update:     Tue 15 Apr 2025 20:01:03 +0000
Manifest next update:     Wed 16 Apr 2025 20:01:03 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: ewJansrgMbQFFBl6IUvR2oRiO3VZx46Gdg2Dh2WTQ0A=)
                          2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 15:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3b:0a:77:66:df:1e:71:f8:b5:aa:ce:4c:6a:ff:49:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Apr 15 20:01:03 2025 GMT
            Not After : Apr 16 20:01:03 2025 GMT
        Subject: CN=238ab1b90de89756fa3b37d8e836ad9a4c5e418c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:bd:bf:bf:79:0a:05:8d:6b:48:d8:a9:d0:
                    62:66:b0:2e:b2:fd:b7:d8:b4:0b:5e:d8:6d:d6:c4:
                    d4:c6:c6:df:ab:d6:35:59:2d:e7:fd:2c:fb:27:ab:
                    03:9e:b0:83:41:14:2f:96:99:df:f9:c4:31:d8:1c:
                    6b:21:44:ce:a3:f2:48:38:c5:8d:9b:c4:6c:ee:2c:
                    d6:32:1c:b9:bb:0b:04:7c:82:e6:a1:00:ea:b4:d7:
                    1b:ba:01:6c:00:75:05:76:39:62:d0:e6:7a:66:ae:
                    eb:18:e6:96:e3:67:5d:88:96:cc:6b:34:5b:62:8c:
                    20:f6:70:ec:2a:b7:e9:07:26:f3:19:f0:7e:ea:30:
                    80:ac:bc:22:9f:e1:07:b0:9a:e8:1f:01:32:b9:bc:
                    db:f0:55:b3:31:d2:3d:ad:95:f7:29:3b:fd:e2:a8:
                    89:f1:c8:62:b4:e2:fd:66:fa:fa:d0:6c:29:4e:f7:
                    f7:0f:9d:63:68:db:b1:13:36:6c:bc:0c:75:45:eb:
                    eb:f6:ee:44:dc:d7:54:3d:8d:e4:6e:75:3d:a2:be:
                    02:ce:c9:be:79:a5:c4:c4:60:81:4c:22:63:2a:3d:
                    de:6f:66:5f:41:56:17:97:00:49:d2:ff:94:68:02:
                    b1:d4:96:97:4d:1d:4b:82:15:8a:67:fc:97:db:af:
                    b8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:8A:B1:B9:0D:E8:97:56:FA:3B:37:D8:E8:36:AD:9A:4C:5E:41:8C
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:56:b9:7e:cd:de:92:3c:28:09:5f:27:25:df:ad:c8:44:
         2c:85:f7:e5:ec:f7:3f:b1:bb:02:33:6c:06:a2:66:e5:6a:f9:
         c1:ce:b6:b4:5b:fa:f3:34:c0:df:1d:21:3c:b9:dd:3d:0d:5d:
         17:9b:49:aa:7b:f8:16:94:c1:40:09:a5:6d:bc:a7:16:ee:75:
         7f:f1:fe:da:28:ab:ed:5c:0d:96:e9:5e:cb:f6:d5:3d:ea:db:
         94:01:61:91:9f:de:3d:44:90:3e:2f:97:04:85:c5:0c:95:d3:
         81:6a:5d:fe:8e:15:b2:c4:bd:dc:9c:04:5c:b0:38:93:d3:3c:
         63:56:61:36:5e:eb:98:69:47:81:72:15:78:a7:83:20:89:3d:
         73:eb:1e:46:4a:01:61:05:f7:78:90:8b:5f:b2:23:64:a9:63:
         33:fc:80:5a:56:0e:54:19:3f:fa:88:e5:12:94:45:d2:f3:16:
         2e:eb:db:21:01:98:89:86:4f:91:dc:55:e0:d7:d8:92:cb:d7:
         29:0f:5c:42:c4:68:88:9f:b0:ed:c4:e3:72:30:f3:b6:33:a4:
         3f:dd:a9:5c:fd:e0:d5:ff:ad:8b:b3:ac:13:28:26:7a:72:3b:
         f5:62:b2:a4:9c:ef:66:1a:cd:1f:0c:a5:e3:99:9d:3d:64:db:
         c2:1c:d9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 23:53:41 2025 by rpki-client