Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
File:                     BLVuw7rwqesioTYUdj8YFF0M8Eo.mft (raw, json)
Hash identifier:          7oLFfSz32s7cGqGE+0XjOs5epBadVttbfOG6TAza2h4=
Subject key identifier:   60:FC:48:30:0D:2D:A5:13:C2:6B:57:2A:53:F6:62:77:72:2E:43:EA
Authority key identifier: 04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A
Certificate issuer:       /CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
Certificate serial:       01958CCE116245179709B5B4822187D221D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
Manifest number:          018F
Signing time:             Thu 13 Mar 2025 00:01:09 +0000
Manifest this update:     Thu 13 Mar 2025 00:01:09 +0000
Manifest next update:     Fri 14 Mar 2025 00:01:09 +0000
Files and hashes:         1: BLVuw7rwqesioTYUdj8YFF0M8Eo.crl (hash: WNDH27oSg9m+E84lmsUg8fe+5uw7bVeopj70w+5xVxM=)
                          2: CQgo9i7xKCKF-brlO7bOG3BNmVY.roa (hash: X8lPFkVQRlIn745XFiJL9ENZDguoL523rt5LMcrNdrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 19:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8c:ce:11:62:45:17:97:09:b5:b4:82:21:87:d2:21:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b56ec3baf0a9eb22a13614763f18145d0cf04a
        Validity
            Not Before: Mar 13 00:01:09 2025 GMT
            Not After : Mar 14 00:01:09 2025 GMT
        Subject: CN=60fc48300d2da513c26b572a53f66277722e43ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:df:be:e6:e1:f4:11:c2:86:20:84:62:25:
                    e4:ed:b8:6d:2e:34:3f:35:48:b2:28:d4:09:11:5d:
                    1f:ca:de:b7:83:37:40:55:86:4f:34:3a:16:26:a7:
                    e7:e7:a2:f1:2a:84:9d:93:4d:4b:a0:c8:ea:e9:8e:
                    ef:06:44:59:49:94:11:43:82:00:d2:31:0c:c4:06:
                    68:f8:0c:85:d4:6d:50:60:65:e6:7e:bc:18:c8:fc:
                    ff:2b:f2:c9:25:14:4b:69:2f:73:7d:75:4f:48:b9:
                    65:30:22:69:07:eb:b1:d8:6f:87:59:ce:9c:3a:0e:
                    0c:bb:78:48:b9:b4:46:5d:81:f4:6b:c8:ba:ad:20:
                    82:57:e4:c6:d5:eb:94:b3:3a:8a:8a:e0:8b:59:51:
                    9a:f8:1c:dd:d7:14:63:5c:24:4f:32:58:d7:72:d5:
                    20:db:6f:48:0f:9c:39:34:55:a6:77:e9:64:74:9b:
                    e5:b0:7a:38:69:31:b9:67:12:53:5a:68:e4:a3:fe:
                    22:61:25:28:0b:4a:d2:f6:6b:bf:ce:cb:64:87:d4:
                    ae:eb:23:cc:d6:65:41:09:6d:aa:9f:c2:47:66:ad:
                    e9:8b:2a:34:95:80:e1:71:dc:83:de:6d:af:ae:08:
                    ea:88:8d:d4:f6:67:05:20:0d:7d:c0:78:56:0c:7f:
                    12:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:48:30:0D:2D:A5:13:C2:6B:57:2A:53:F6:62:77:72:2E:43:EA
            X509v3 Authority Key Identifier:
                keyid:04:B5:6E:C3:BA:F0:A9:EB:22:A1:36:14:76:3F:18:14:5D:0C:F0:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLVuw7rwqesioTYUdj8YFF0M8Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fc60cd-d0b4-4c8b-8a4d-695d8299926e/1/BLVuw7rwqesioTYUdj8YFF0M8Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d0:ad:9a:d2:d4:7c:31:22:7b:e7:be:af:3e:af:4f:cb:a1:
         ca:9a:91:a5:61:26:b0:a5:91:e2:f4:11:ad:fc:36:95:95:da:
         ae:2b:d5:3a:8d:8a:1d:9d:b0:20:e3:68:59:07:ca:8f:cb:f2:
         7c:a3:18:dc:a3:75:b2:41:c4:5d:a7:d5:93:75:bf:21:08:1b:
         27:ed:bc:63:da:4e:a0:ff:4e:4b:cb:7c:5a:29:23:b3:0d:9b:
         f8:f6:0c:6c:f4:0e:d0:10:da:42:5b:fd:1d:8b:ff:10:b3:69:
         65:bf:f9:68:d2:10:11:28:d5:5d:f2:24:e2:c0:01:cc:41:a7:
         ce:2d:6f:a5:1b:e7:98:92:0b:99:0a:0b:de:09:56:61:50:18:
         95:5e:aa:ef:47:f5:d8:e0:3a:4a:0e:32:64:82:18:7e:83:ae:
         b3:19:7c:93:6e:ba:36:21:e4:2b:fd:db:38:8f:37:68:52:cc:
         f3:0b:db:09:3a:1c:f0:2a:02:c8:f1:4d:b7:e3:e2:b1:af:d6:
         78:ba:a4:de:51:58:aa:be:72:55:09:89:5f:52:63:47:f3:8d:
         64:78:91:e9:7b:39:7f:c2:4e:35:e4:ff:e0:d8:92:f9:d5:0c:
         ca:50:aa:00:34:64:de:86:2e:75:cf:b6:ea:33:1c:2a:be:34:
         1e:db:7b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:56:11 2025 by rpki-client