Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          vxLLeeJcm89G8m7swKpLJsv6cLSgFebOr6/VEngqQT0=
Subject key identifier:   43:B9:1D:0A:40:EE:9D:82:AC:37:0F:52:9D:BD:E7:8C:33:A6:D3:81
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       0198496636AADA09B953AEB6D05555461693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          14B1
Signing time:             Sun 27 Jul 2025 01:01:31 +0000
Manifest this update:     Sun 27 Jul 2025 01:01:31 +0000
Manifest next update:     Mon 28 Jul 2025 01:01:31 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: m5QgDG2TbRK0SloBGkxPY6dAXVw5Uq4YkVyEOFIEQdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:66:36:aa:da:09:b9:53:ae:b6:d0:55:55:46:16:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Jul 27 01:01:31 2025 GMT
            Not After : Jul 28 01:01:31 2025 GMT
        Subject: CN=43b91d0a40ee9d82ac370f529dbde78c33a6d381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:59:74:cc:f2:51:6b:fa:47:4b:ae:4b:c5:9d:
                    10:24:ba:91:dc:0d:23:19:29:85:d8:af:1c:51:93:
                    85:fc:01:b4:ad:cf:10:00:a3:ee:da:fe:c6:06:68:
                    c9:e5:ca:c7:2a:14:f5:db:f5:ff:20:27:fc:be:fc:
                    80:71:d3:35:fb:5f:6a:8f:c4:b3:c8:ba:4c:bf:5d:
                    9e:90:29:53:ba:00:7c:9f:a6:16:4e:68:fa:96:f3:
                    cc:1b:66:3d:12:46:46:96:17:22:08:59:99:64:35:
                    cd:0d:78:28:e1:b4:10:36:74:0f:9a:a6:98:d6:44:
                    24:dc:ee:c1:df:61:a5:5c:5e:4e:d8:9d:6b:5f:a2:
                    ff:a8:cf:b1:8a:74:42:87:d1:6e:90:75:20:f7:0e:
                    27:8a:ae:57:41:b1:e5:bb:b2:14:1b:8e:1a:82:ee:
                    94:81:ee:38:87:8d:49:85:44:fd:e6:35:a1:a4:5d:
                    51:b1:be:01:3e:b7:02:c5:20:b0:64:3a:99:e1:3f:
                    14:79:12:af:79:6b:c7:b8:b7:a2:b6:94:da:23:c6:
                    8b:8d:ea:dc:4e:2f:a6:d7:0e:6c:df:79:01:cc:00:
                    46:a5:d7:9c:a5:25:08:1e:37:d5:28:ab:a1:dc:6a:
                    41:a5:79:65:99:b3:d6:cf:47:e3:b9:95:a2:87:49:
                    b7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:1D:0A:40:EE:9D:82:AC:37:0F:52:9D:BD:E7:8C:33:A6:D3:81
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:88:18:48:a2:ee:1c:04:d0:64:b1:54:27:2b:87:fd:9c:
         c0:c0:b2:b2:d0:57:83:ad:64:13:d9:a8:6a:2d:6f:87:4c:d3:
         b6:f6:1e:03:c3:07:0c:f7:a0:a1:a2:ba:64:04:48:77:80:b2:
         28:77:43:3c:ec:34:35:82:af:a4:fd:c5:77:f4:74:07:7b:df:
         50:b0:5e:cf:d4:08:21:6d:d5:d0:ef:92:85:8d:5e:23:d8:ba:
         24:cf:2b:a0:15:c9:8e:91:cf:4f:13:fc:74:aa:62:10:f0:bc:
         f9:ca:52:20:b4:ce:68:70:56:27:39:31:4a:73:45:b6:55:7e:
         d2:10:27:76:a6:2e:83:bf:b9:eb:67:aa:85:1a:01:f6:b5:68:
         15:b8:38:f7:a0:32:8c:4b:c3:96:da:de:ad:24:17:3c:03:f8:
         c8:35:04:9d:01:e8:dc:f7:3e:e6:42:e2:37:a1:26:79:ea:6b:
         c4:05:14:31:c4:95:db:1c:e1:53:18:6a:63:20:56:a7:ac:0e:
         7f:d4:9e:8c:22:1e:cf:40:4f:d5:8c:db:54:9d:dc:93:c1:a1:
         8e:a4:24:1e:e7:17:3d:43:b1:30:7e:83:29:36:73:20:22:91:
         a1:b0:9f:08:6a:4b:f1:a6:2e:02:04:77:22:1b:17:a3:6d:2a:
         d1:84:e1:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZjaq2gm5U6620FVVRhaTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0
MjBmNzYwHhcNMjUwNzI3MDEwMTMxWhcNMjUwNzI4MDEwMTMxWjAzMTEwLwYDVQQD
Eyg0M2I5MWQwYTQwZWU5ZDgyYWMzNzBmNTI5ZGJkZTc4YzMzYTZkMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVl0zPJRa/pHS65LxZ0QJLqR3A0j
GSmF2K8cUZOF/AG0rc8QAKPu2v7GBmjJ5crHKhT12/X/ICf8vvyAcdM1+19qj8Sz
yLpMv12ekClTugB8n6YWTmj6lvPMG2Y9EkZGlhciCFmZZDXNDXgo4bQQNnQPmqaY
1kQk3O7B32GlXF5O2J1rX6L/qM+xinRCh9FukHUg9w4niq5XQbHlu7IUG44agu6U
ge44h41JhUT95jWhpF1Rsb4BPrcCxSCwZDqZ4T8UeRKveWvHuLeitpTaI8aLjerc
Ti+m1w5s33kBzABGpdecpSUIHjfVKKuh3GpBpXllmbPWz0fjuZWih0m3RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEO5HQpA7p2CrDcPUp2954wzptOBMB8GA1UdIwQY
MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt
MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy
LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnweIGEii
7hwE0GSxVCcrh/2cwMCystBXg61kE9moai1vh0zTtvYeA8MHDPegoaK6ZARId4Cy
KHdDPOw0NYKvpP3Fd/R0B3vfULBez9QIIW3V0O+ShY1eI9i6JM8roBXJjpHPTxP8
dKpiEPC8+cpSILTOaHBWJzkxSnNFtlV+0hAndqYug7+562eqhRoB9rVoFbg496Ay
jEvDltrerSQXPAP4yDUEnQHo3Pc+5kLiN6EmeeprxAUUMcSV2xzhUxhqYyBWp6wO
f9SejCIez0BP1YzbVJ3ck8GhjqQkHucXPUOxMH6DKTZzICKRobCfCGpL8aYuAgR3
IhsXo20q0YThlw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:38 2025 by rpki-client