Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File:                     B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier:          Gvcp7gESdB+sfgkGV3n6U+LV5TJdFd7higzEehHPDZY=
Subject key identifier:   C0:95:1C:64:15:B7:32:92:E1:4C:6E:C7:15:86:92:77:54:67:8C:39
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer:       /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial:       01974779F781AAEE4C42A4FAF895A3B7B1FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number:          1010
Signing time:             Fri 06 Jun 2025 23:01:04 +0000
Manifest this update:     Fri 06 Jun 2025 23:01:04 +0000
Manifest next update:     Sat 07 Jun 2025 23:01:04 +0000
Files and hashes:         1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: y8R8yrbAIid7+l6JqWkNw4NGJOENiO0ACaj0YB/7nd8=)
                          2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:f7:81:aa:ee:4c:42:a4:fa:f8:95:a3:b7:b1:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
        Validity
            Not Before: Jun  6 23:01:04 2025 GMT
            Not After : Jun  7 23:01:04 2025 GMT
        Subject: CN=c0951c6415b73292e14c6ec71586927754678c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:e2:de:50:0d:eb:5f:eb:33:4c:dc:2d:c6:
                    eb:ed:30:5a:d8:ab:f2:52:60:79:f8:b9:7f:2c:d9:
                    5c:48:2a:69:f2:b4:79:a4:84:22:6a:9d:f6:c0:fc:
                    c7:fd:db:e5:38:6b:23:92:ff:f2:17:54:fa:20:f4:
                    58:79:4d:96:69:a0:ee:e1:24:f3:42:1b:c5:aa:69:
                    ac:dc:e2:11:59:85:27:56:38:02:04:a4:79:f0:86:
                    2b:55:4b:67:a1:39:c5:67:ed:ca:64:f0:e0:e3:21:
                    ef:0c:8a:b6:d7:9d:d2:45:0d:01:4f:cf:1f:d5:56:
                    fa:54:d8:de:77:25:4b:23:5b:ec:b7:7d:b9:36:4f:
                    da:d3:fd:7a:af:e8:3d:0a:4a:6b:84:dd:e0:8a:af:
                    d9:b3:fe:2d:cf:cf:d2:e5:8d:bb:15:ef:4b:53:ce:
                    f4:2a:17:8d:8f:5c:4f:00:08:b9:3f:dc:09:a3:b5:
                    5d:e3:0a:6a:da:ff:ef:c8:d4:6a:d4:ff:23:cd:0e:
                    7d:fa:4e:08:c5:cf:25:ba:75:a2:08:06:c8:0a:58:
                    a4:24:1b:a6:c6:65:39:ed:26:4c:93:41:ea:0d:e6:
                    db:cd:7d:a6:50:c8:2f:01:3f:63:58:b1:21:c2:84:
                    6c:a5:11:08:34:4f:b0:d2:e7:27:a1:de:9e:70:89:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:95:1C:64:15:B7:32:92:E1:4C:6E:C7:15:86:92:77:54:67:8C:39
            X509v3 Authority Key Identifier:
                keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b6:a8:29:b4:d0:cc:50:f3:2b:2c:73:9a:fc:be:35:38:ed:
         63:9b:b0:36:5c:83:44:b8:82:c6:69:ea:08:9b:31:27:53:94:
         97:83:ab:b8:5d:9f:80:0d:d4:4f:75:dd:c7:eb:c4:d6:00:7e:
         cc:01:d7:47:5d:b4:49:a5:69:9c:e8:f9:eb:79:de:b5:fe:ab:
         0f:06:ab:87:4d:77:59:15:87:95:eb:9f:49:c2:91:d3:34:0a:
         1a:33:43:85:e3:92:b4:14:ba:bd:4c:b2:37:03:7a:61:49:bf:
         c9:ef:db:6e:bf:90:c5:0b:68:73:19:bf:93:9f:7b:9a:71:af:
         c2:76:d1:e8:c9:c4:2f:b2:07:17:a1:7c:be:5f:9e:c2:73:be:
         d8:17:0f:ee:d4:c4:24:df:1c:06:cf:e2:93:3d:0f:d9:56:6e:
         2a:11:7f:68:cb:d1:81:b1:0e:22:4f:cf:91:8c:44:9a:20:cf:
         fd:98:0f:ae:84:4f:f7:f9:39:fd:bd:c9:f0:78:a0:fa:78:2a:
         c4:3d:89:cf:1f:fd:5a:98:27:53:3c:ae:92:5a:1f:e8:57:5a:
         28:8d:9f:2b:8b:e5:bd:72:e9:ca:ea:52:e6:a6:00:c5:e5:06:
         df:df:be:2b:10:6a:60:ee:e3:1a:12:d8:6c:28:a7:f9:f9:24:
         d2:c6:93:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHefeBqu5MQqT6+JWjt7H/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NGFkMjNhNGNmYTMxYjZkNTVlYmNhMTZjNWQxNGM0MDRi
YTZjYWQwHhcNMjUwNjA2MjMwMTA0WhcNMjUwNjA3MjMwMTA0WjAzMTEwLwYDVQQD
EyhjMDk1MWM2NDE1YjczMjkyZTE0YzZlYzcxNTg2OTI3NzU0Njc4YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDri3lAN61/rM0zcLcbr7TBa2Kvy
UmB5+Ll/LNlcSCpp8rR5pIQiap32wPzH/dvlOGsjkv/yF1T6IPRYeU2WaaDu4STz
QhvFqmms3OIRWYUnVjgCBKR58IYrVUtnoTnFZ+3KZPDg4yHvDIq2153SRQ0BT88f
1Vb6VNjedyVLI1vst325Nk/a0/16r+g9CkprhN3giq/Zs/4tz8/S5Y27Fe9LU870
KheNj1xPAAi5P9wJo7Vd4wpq2v/vyNRq1P8jzQ59+k4Ixc8lunWiCAbIClikJBum
xmU57SZMk0HqDebbzX2mUMgvAT9jWLEhwoRspREINE+w0ucnod6ecIk0YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCVHGQVtzKS4UxuxxWGkndUZ4w5MB8GA1UdIwQY
MBaAFAdK0jpM+jG21V68oWxdFMQEumytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODkt
YzhjOTkxY2Q4OWQ1LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZDNhNDYtNzI3Yi00NzZjLWE3ODktYzhjOTkxY2Q4OWQ1
LzEvQjByU09rejZNYmJWWHJ5aGJGMFV4QVM2YkswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT7aoKbTQ
zFDzKyxzmvy+NTjtY5uwNlyDRLiCxmnqCJsxJ1OUl4OruF2fgA3UT3Xdx+vE1gB+
zAHXR120SaVpnOj563netf6rDwarh013WRWHleufScKR0zQKGjNDheOStBS6vUyy
NwN6YUm/ye/bbr+QxQtocxm/k597mnGvwnbR6MnEL7IHF6F8vl+ewnO+2BcP7tTE
JN8cBs/ikz0P2VZuKhF/aMvRgbEOIk/PkYxEmiDP/ZgProRP9/k5/b3J8Hig+ngq
xD2Jzx/9WpgnUzyuklof6FdaKI2fK4vlvXLpyupS5qYAxeUG39++KxBqYO7jGhLY
bCin+fkk0saThQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:22 2025 by rpki-client