Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          NcgR53jhTDEG0tnXfEKl2zN2IFEDGa2YTYErzS6G2wE=
Subject key identifier:   05:0F:16:E0:C9:E6:5E:C1:40:0D:7E:75:49:4C:74:CD:96:ED:1A:DB
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       0196255E705B4BD837EB34376F80FA2778FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          0F18
Signing time:             Fri 11 Apr 2025 15:01:08 +0000
Manifest this update:     Fri 11 Apr 2025 15:01:08 +0000
Manifest next update:     Sat 12 Apr 2025 15:01:08 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: ZT2LSr7203q7uGafuR3MGi/c9xa/HbjZpO8wO9QcKBI=)
                          3: LBR7RpZCmjGvt1v9tbRFpwkQMaw.roa (hash: AoRhTxCocworcFcJEn7HIkWysaUCbOeg9SCDarPfLio=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Apr 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:25:5e:70:5b:4b:d8:37:eb:34:37:6f:80:fa:27:78:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Apr 11 15:01:08 2025 GMT
            Not After : Apr 12 15:01:08 2025 GMT
        Subject: CN=050f16e0c9e65ec1400d7e75494c74cd96ed1adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:ae:d6:0b:21:a4:fa:4b:74:4c:82:05:bc:
                    71:e3:c9:1c:1a:82:5f:e9:76:4e:64:88:d5:99:7b:
                    c2:76:7e:ad:9a:ad:cd:99:77:b8:ec:3d:72:75:6a:
                    ee:8d:14:83:d6:21:e8:c0:6f:fc:17:94:05:f3:33:
                    16:c1:c6:ce:36:a1:80:91:2f:65:36:26:07:51:82:
                    60:8d:ec:9c:bc:8b:11:28:1e:c3:a9:67:b4:53:d5:
                    37:64:ca:8f:aa:75:ba:35:71:35:b1:6a:7b:7c:9f:
                    c7:b9:04:34:c4:5b:32:eb:38:98:54:a1:8e:ab:41:
                    05:a5:46:5b:33:15:61:8e:80:71:9a:40:46:7f:a0:
                    5f:5a:d5:95:3a:26:4b:c6:32:36:ae:2b:d6:68:a4:
                    70:50:69:c3:3b:8e:33:62:67:44:fd:3d:12:d5:8f:
                    b1:79:c1:39:7f:20:73:0b:3a:34:79:b1:91:ef:18:
                    69:9f:d3:75:13:ee:e7:df:98:83:fa:70:78:77:6a:
                    1b:27:e9:1f:46:1b:57:35:82:a2:ec:1f:f1:5e:1e:
                    23:54:8e:f6:05:73:62:3f:c0:5d:3a:76:ce:f5:1f:
                    84:50:ae:f7:37:dc:d8:60:ba:f1:d4:08:47:6b:cb:
                    58:22:19:70:0c:ce:48:8d:5a:d5:c2:79:ed:f8:54:
                    5e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0F:16:E0:C9:E6:5E:C1:40:0D:7E:75:49:4C:74:CD:96:ED:1A:DB
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:31:3e:e0:b6:36:d9:20:a2:5e:4c:fd:a3:2a:bd:3b:b2:bb:
         13:e1:d2:dc:5b:93:23:37:f2:ee:f0:8e:94:61:8b:0e:7b:37:
         04:68:c2:a2:7e:ee:02:b9:97:df:be:e8:a4:d2:9b:79:0a:dc:
         0c:c9:06:9f:32:35:92:c2:a0:22:ee:9a:eb:e6:97:a0:da:34:
         75:a4:ef:21:7e:e0:1b:d6:fd:da:c3:30:dd:7c:60:f3:f1:0e:
         f8:5d:2f:02:cb:da:be:68:29:9d:b8:50:1b:7e:85:2b:5d:61:
         77:fb:59:43:02:cd:cb:14:fd:8d:19:f5:ff:a3:57:87:95:a1:
         72:c7:c9:b5:ef:d0:4b:f9:ac:92:c5:6b:b6:29:e8:f6:33:f1:
         10:63:45:bc:19:5d:83:8d:21:25:ac:da:ba:46:cc:9d:7f:a9:
         ed:67:08:12:f8:d1:2a:67:08:83:55:d1:f9:65:0d:09:be:d0:
         e9:03:30:7e:57:fc:77:71:e6:ec:21:83:97:2f:f1:40:f4:97:
         2b:b1:11:72:7c:e9:9c:e2:0e:2b:40:97:40:95:56:df:c3:e9:
         c2:f5:e1:c7:92:9b:4b:62:a8:0f:60:5a:1e:80:86:11:1c:ea:
         39:df:3c:42:9d:5f:e8:d7:37:2c:07:33:57:e2:f0:28:dd:8b:
         3d:09:3f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:55 2025 by rpki-client