Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          CqS0CpSrxBMrdekG5We2OmK+4/I38f/+dYohikRbjLE=
Subject key identifier:   44:FA:3E:EB:61:8C:0F:94:1A:D0:B9:CF:C5:9F:F5:07:F4:B8:9F:59
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       01963A2E77F3E67DD100BEC9E5796DA6DF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          1081
Signing time:             Tue 15 Apr 2025 16:00:45 +0000
Manifest this update:     Tue 15 Apr 2025 16:00:45 +0000
Manifest next update:     Wed 16 Apr 2025 16:00:45 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: wcHOWUEIG+BdF4Fl64solsTN6ISQEzBgsN4If84416Y=)
                          2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Apr 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3a:2e:77:f3:e6:7d:d1:00:be:c9:e5:79:6d:a6:df:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: Apr 15 16:00:45 2025 GMT
            Not After : Apr 16 16:00:45 2025 GMT
        Subject: CN=44fa3eeb618c0f941ad0b9cfc59ff507f4b89f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:09:fa:91:b4:a2:c8:4c:5b:40:c5:20:d5:d2:
                    f3:11:5a:9f:a6:bf:8b:83:b7:8e:07:30:5b:30:ca:
                    85:8f:92:04:4e:f3:4d:ca:de:61:fc:8e:fe:4e:8a:
                    24:f6:de:ec:25:84:02:72:1c:83:e7:6c:50:c9:1b:
                    1f:26:63:e3:0a:09:90:62:4b:12:56:9e:10:7f:2d:
                    ef:b8:13:50:a2:0d:f4:78:19:c4:9f:67:bf:4b:ca:
                    36:70:84:2a:3c:0f:72:ca:0c:14:e9:23:5f:5b:02:
                    14:42:5f:67:6f:bd:d8:03:da:4d:d4:21:85:ee:c8:
                    cc:61:63:b8:00:f2:b4:c4:01:0f:b3:27:e5:fc:2b:
                    da:b8:dc:a4:4e:19:12:77:57:83:88:ce:bd:93:48:
                    a3:00:44:da:f4:4c:5e:4f:30:e4:ab:5f:55:c3:04:
                    4c:b8:19:ff:a1:7f:f2:f5:b2:24:0a:97:7e:a7:79:
                    3a:0a:98:21:01:ae:1e:20:e1:43:6d:a4:66:27:c9:
                    f2:3e:3f:73:2f:a5:b9:6e:81:d2:75:9d:36:3f:84:
                    a3:bd:b0:23:8e:7f:02:fe:a8:1c:4b:8b:2f:ea:9c:
                    a5:50:df:0e:23:a5:d4:45:49:00:a9:5c:1b:82:5e:
                    ee:c1:7b:9e:17:0e:86:18:ee:be:c7:fd:6b:2e:c1:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FA:3E:EB:61:8C:0F:94:1A:D0:B9:CF:C5:9F:F5:07:F4:B8:9F:59
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:db:f8:1b:77:a1:6e:4a:6d:6b:a4:51:6b:75:cc:3c:a8:2f:
         74:9a:c2:22:79:22:3c:26:27:38:bb:21:a2:0a:20:22:87:77:
         d3:09:65:34:db:15:1f:8e:1f:fc:7c:b0:26:ab:3b:e3:64:5f:
         63:e1:14:eb:e9:4f:0d:f4:bd:4c:c9:76:1e:d4:82:cc:d8:d7:
         94:fd:09:8e:cb:0a:3e:87:2c:25:2f:dc:9b:0c:da:c0:ff:a3:
         13:86:3e:77:9b:09:c5:98:b0:a4:db:81:55:2c:09:8c:5e:b2:
         d6:6f:eb:00:4b:70:9d:f3:b6:cc:82:a8:4b:7b:aa:b6:cf:9a:
         82:44:44:13:d1:55:42:04:ec:32:dd:9c:7e:81:1a:da:c3:e3:
         39:0d:76:b0:3a:ca:b1:f7:50:7f:3c:76:89:32:22:7e:d2:89:
         e0:80:56:09:eb:45:44:eb:58:d7:21:27:09:30:fc:c7:c3:1b:
         a9:04:3c:bb:c1:e1:dd:53:74:1e:06:97:28:f2:28:de:91:0d:
         1a:79:89:27:ea:72:eb:79:b7:03:7a:59:fe:1e:8e:a5:f2:de:
         10:3e:e3:f4:f3:6a:ae:19:96:26:19:9e:52:7a:db:60:a9:4d:
         4b:49:62:e8:b4:c3:ed:4b:79:6c:6e:2e:15:9c:4a:f1:b3:14:
         df:6c:c9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 17:09:35 2025 by rpki-client