Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          e6h7COND73JCY1Ff928S5AxuEWWZIt9DKRLSKOvPQ+k=
Subject key identifier:   A5:C9:03:F6:6A:A5:7D:27:1C:76:0D:A2:00:1D:27:CE:EC:27:A8:6E
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       01964BFDDD04989ADEFE4936C182D0C3324F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 03:00:50 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:50 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:50 +0000
Files and hashes:         1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=)
                          2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: chgrsuDWjOCRPpdsbLp0qNO8C5P6qVinBFuOBcUlJb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:dd:04:98:9a:de:fe:49:36:c1:82:d0:c3:32:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Apr 19 03:00:50 2025 GMT
            Not After : Apr 20 03:00:50 2025 GMT
        Subject: CN=a5c903f66aa57d271c760da2001d27ceec27a86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b8:da:6c:1c:8d:c3:04:ff:20:c5:07:16:bf:
                    e8:13:24:84:86:3a:e8:f3:d9:73:b4:84:a8:64:a8:
                    92:5d:c4:7e:dc:63:5d:98:52:e9:ea:21:52:a6:69:
                    b6:56:d9:1e:a5:7d:43:3f:5f:20:31:92:97:5d:7f:
                    fc:4f:a7:24:6b:3b:65:d1:cc:c0:72:da:3e:4d:2d:
                    da:41:82:4f:16:90:f9:ae:23:b6:2b:f0:45:01:84:
                    2b:49:c0:c2:56:9a:63:6f:27:57:1a:c3:cb:f0:c4:
                    7e:41:c2:d4:27:63:b5:35:08:51:52:c4:e1:b5:87:
                    05:e7:28:1d:e0:36:23:6a:ba:fa:3a:43:9f:cb:39:
                    83:90:b0:33:50:bc:67:86:25:66:2a:f3:45:01:6c:
                    d7:3c:a9:6e:4c:98:51:2c:34:10:b5:b6:19:98:f8:
                    ed:2b:6b:06:5f:a6:89:f6:cc:5e:95:e8:7f:61:35:
                    31:b0:3c:a5:53:55:dc:a6:57:b4:9f:8d:32:7d:e4:
                    56:6c:72:9b:98:60:75:43:ed:8e:fb:11:8d:d8:f9:
                    e7:22:a1:c1:cd:df:6d:25:2b:0f:c3:a9:cd:f6:80:
                    68:b1:74:c9:81:e7:81:5c:ef:10:0f:da:bd:f6:ad:
                    e0:f1:4d:37:04:27:87:fa:07:d5:a8:7c:45:8f:8a:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C9:03:F6:6A:A5:7D:27:1C:76:0D:A2:00:1D:27:CE:EC:27:A8:6E
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:65:f5:bf:b5:04:dd:27:d1:03:a6:8c:87:07:3e:e9:d3:
         8b:4e:ff:d4:de:83:bc:2c:04:d4:06:b0:00:2f:b7:ae:68:6e:
         93:dc:46:7c:ff:f0:c0:a5:db:d2:a3:29:b7:c5:09:e1:15:11:
         ac:43:1d:1e:84:1c:a3:bc:79:f5:c3:d4:6d:3d:68:c5:6e:3b:
         c6:f1:3d:a0:fe:8a:73:19:65:43:fc:42:a1:7c:17:dd:8a:92:
         03:47:8c:55:20:be:03:56:fc:90:55:c2:96:25:28:89:d2:7f:
         9c:19:3f:09:c9:85:b4:ac:4a:15:44:f1:1c:df:b0:db:a7:ec:
         81:a9:69:be:05:a2:37:1e:48:0f:ca:4a:60:91:42:77:32:43:
         93:21:a7:31:ea:a3:b3:fe:b1:93:9c:c6:2b:87:77:3d:38:6d:
         2d:03:4a:f3:60:50:0e:fa:02:90:52:0b:af:66:c6:34:f1:0d:
         e9:40:02:1f:e5:ab:33:c7:0d:f2:af:28:9b:2d:16:b7:bb:fa:
         ff:51:35:14:7f:ae:cd:bc:00:54:bd:3b:33:23:de:0b:f6:c2:
         b1:e6:dd:4a:60:3a:57:16:8c:39:cb:ab:97:16:80:cf:13:63:
         a1:a9:bf:02:22:51:9a:b4:3d:8b:a9:8a:e7:68:7f:97:89:ff:
         e5:90:aa:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:21:23 2025 by rpki-client