Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
File:                     bVbe-EWP2Osu11SsLpDTUFoyqoI.mft (raw, json)
Hash identifier:          PEzRqk+CK5FmqLp2/Okg9xMylp+Ohaw4ZC//HDVOxjo=
Subject key identifier:   1E:BD:49:18:A2:3C:99:69:CD:41:0A:86:34:FE:27:B7:18:46:96:12
Authority key identifier: 6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82
Certificate issuer:       /CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
Certificate serial:       019749316ABE5504205CB75ABC722C233100
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
Manifest number:          053E
Signing time:             Sat 07 Jun 2025 07:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:04 +0000
Files and hashes:         1: SBebfO-JEiTLVku7wA-Q7NJY9QI.roa (hash: iiLUe1+ewBfgZMamdKFXLL2gnvfWWm7luTyA1wiqfW4=)
                          2: bVbe-EWP2Osu11SsLpDTUFoyqoI.crl (hash: onnNEBE9y4OUXKTaPwX6SUDZWF1EZ7GEM0xLqVL8t4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:6a:be:55:04:20:5c:b7:5a:bc:72:2c:23:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d56def8458fd8eb2ed754ac2e90d3505a32aa82
        Validity
            Not Before: Jun  7 07:01:04 2025 GMT
            Not After : Jun  8 07:01:04 2025 GMT
        Subject: CN=1ebd4918a23c9969cd410a8634fe27b718469612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:e0:b2:1c:7e:57:f5:ef:60:01:1a:22:60:
                    7c:d8:86:1a:85:ba:d0:4b:51:e0:42:7b:93:a0:82:
                    63:4e:f3:66:ad:c8:db:19:8d:0c:3b:2f:60:20:ff:
                    6c:a3:d4:62:eb:f4:4b:00:7d:70:f3:26:3e:80:a1:
                    25:2a:aa:2c:38:8b:10:56:f6:35:02:c1:9c:b4:8a:
                    7f:1a:d1:4a:b3:db:df:8b:eb:b2:56:a2:8b:57:9c:
                    5d:09:ac:50:5f:a5:5c:96:ba:bc:e9:bc:4f:08:2c:
                    b2:41:75:72:ba:4c:84:ef:4c:8f:de:53:dc:b6:91:
                    12:ad:df:bf:66:fe:0f:0a:23:35:fe:71:b1:25:07:
                    dd:84:79:16:97:b8:c6:5d:57:35:89:e7:5b:41:6c:
                    08:dc:49:1c:db:62:74:ce:d3:7f:3c:4f:fb:fa:c1:
                    1c:ec:04:59:9c:ce:6c:bc:58:9d:3d:dd:5c:78:c9:
                    6a:26:ca:ca:ad:d6:9a:37:1a:8b:57:52:14:39:25:
                    d3:a0:16:44:95:22:d2:72:53:b5:27:40:75:2a:df:
                    5b:de:dc:6d:b3:b8:ba:0f:29:5d:80:30:d0:a6:89:
                    58:c4:ec:9f:46:13:37:e4:46:1c:0d:6a:ed:da:e9:
                    a7:8e:b9:39:e8:d5:06:2c:d3:50:62:18:df:5f:21:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:49:18:A2:3C:99:69:CD:41:0A:86:34:FE:27:B7:18:46:96:12
            X509v3 Authority Key Identifier:
                keyid:6D:56:DE:F8:45:8F:D8:EB:2E:D7:54:AC:2E:90:D3:50:5A:32:AA:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVbe-EWP2Osu11SsLpDTUFoyqoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/36e79c-8472-467b-9c14-8281f77ebd22/1/bVbe-EWP2Osu11SsLpDTUFoyqoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:76:34:f2:95:c2:c9:5d:59:60:1e:66:78:ff:96:bf:ad:90:
         06:96:0a:be:e7:0a:82:a9:c9:aa:9d:89:7f:d9:ee:a3:bb:89:
         b8:73:53:a0:a7:56:01:c5:12:d4:7e:1f:f6:7e:fb:4e:25:80:
         7c:f9:41:b6:54:f5:c6:c8:15:8d:0d:a2:54:50:15:5b:94:e9:
         b8:fb:72:61:eb:d4:49:41:94:6a:4e:2a:05:ad:af:ab:a4:ae:
         7b:58:44:a8:2b:2f:fe:54:52:9f:58:ee:a3:3c:44:1b:89:4c:
         ce:b7:d5:02:b7:8d:ea:66:f9:f5:56:f7:73:06:e7:0c:49:70:
         79:8e:bb:18:54:8b:36:64:fd:af:91:d0:c1:84:ff:33:30:9a:
         d6:47:1b:ab:9c:7e:29:4e:4b:87:72:9d:f2:ca:5b:df:4b:de:
         f1:b1:51:60:26:d1:41:e3:df:d3:b6:0b:90:8d:f4:9c:ec:2a:
         6a:ec:77:3a:1b:52:1e:fe:07:8f:c7:b9:ad:c4:ec:fb:e6:e4:
         05:97:61:79:fe:91:bf:34:3c:4c:7c:49:59:a5:f0:61:ac:20:
         3c:dd:2e:6d:1a:10:3f:03:eb:30:37:32:63:49:0a:c0:cc:ef:
         43:4c:2b:82:16:77:ec:25:ea:c9:0a:96:64:ea:fa:b8:84:29:
         b6:7f:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:41 2025 by rpki-client