Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
File:                     BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json)
Hash identifier:          7HgLqcGeJmzjdmKJo6XlbQkgL6oHy8hDhplm7JR1OO8=
Subject key identifier:   B0:81:B6:B7:89:EF:9A:35:D5:A5:BD:48:4F:EE:70:93:04:26:35:B8
Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8
Certificate issuer:       /CN=055d784b9012663c340bf67facb61bfbe10871b8
Certificate serial:       01974A7AFF92F2D4E79922FA04C627CB03D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
Manifest number:          0A84
Signing time:             Sat 07 Jun 2025 13:01:04 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:04 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:04 +0000
Files and hashes:         1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: FN/S5QzwPOhKt9hntZKO06yigJccxRiumzjRoxaz7YE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:ff:92:f2:d4:e7:99:22:fa:04:c6:27:cb:03:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8
        Validity
            Not Before: Jun  7 13:01:04 2025 GMT
            Not After : Jun  8 13:01:04 2025 GMT
        Subject: CN=b081b6b789ef9a35d5a5bd484fee7093042635b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0f:49:2a:6b:ea:8a:c7:97:91:6b:2d:3d:f0:
                    fc:17:c2:93:44:bb:71:cd:9d:aa:0a:13:02:b3:ca:
                    f9:49:4b:ed:e7:04:31:34:cb:b7:7f:ae:be:a4:e5:
                    01:87:b4:c0:95:ac:5a:e8:dc:41:b3:72:26:d0:c7:
                    81:25:5a:df:7e:66:17:2d:d0:5e:aa:f9:62:cc:ac:
                    68:02:9a:4f:96:78:92:80:93:0f:d6:42:e0:cf:8a:
                    5c:5c:2f:74:06:90:be:89:f5:c9:ed:6a:11:7a:67:
                    bd:c2:27:2b:49:15:06:76:f2:be:57:11:9f:1e:b7:
                    4c:a7:fd:26:01:62:d7:3a:8a:f3:21:10:a6:19:44:
                    7c:23:9e:3a:27:54:49:06:83:05:80:75:94:0a:83:
                    b5:ea:9d:74:b3:38:fc:a8:56:e1:44:96:ca:18:da:
                    63:6b:a5:84:c7:fd:13:f3:fe:d0:1a:2c:39:cf:c5:
                    96:cc:c3:0c:61:a4:bc:64:1b:62:08:9e:51:89:15:
                    9a:f4:d0:93:7e:6d:e5:c0:07:c0:04:df:ea:a4:a0:
                    a9:4d:f2:cb:2c:3f:34:f7:8e:f6:aa:a5:82:95:39:
                    57:57:69:ff:59:51:d1:ab:d8:16:89:74:de:78:b4:
                    7b:c0:02:b1:31:36:1a:6f:59:78:d3:c8:07:7e:d9:
                    4c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:B6:B7:89:EF:9A:35:D5:A5:BD:48:4F:EE:70:93:04:26:35:B8
            X509v3 Authority Key Identifier:
                keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:38:f4:e5:92:a0:c2:b6:59:cd:cd:b5:34:14:29:0d:23:
         de:bb:ea:16:c0:98:db:60:bc:a1:76:4b:1d:58:3c:cf:04:87:
         52:b3:af:0d:53:f4:1f:25:0e:36:f4:c5:bc:e5:d4:ea:b4:e2:
         aa:33:8a:19:1d:a6:6a:22:4a:6b:ba:19:99:5e:f9:ee:32:11:
         83:40:f7:b7:8c:c4:16:14:4b:49:03:16:7f:bb:8b:6c:cd:97:
         53:11:fa:4a:3b:83:ad:ff:70:f4:c3:97:67:04:ee:54:8d:5b:
         87:7f:93:19:38:5c:44:6f:c1:96:70:de:77:4f:11:c3:eb:f0:
         22:69:74:be:b8:5e:48:69:2d:3e:b5:fe:41:03:ed:aa:f7:cf:
         95:7c:13:43:05:1e:f4:7e:ca:35:3a:9a:91:48:fc:41:a7:28:
         3d:18:03:89:6f:6f:c9:d6:a4:02:1d:80:2c:d1:c9:84:4d:a7:
         c7:0d:ed:b7:29:aa:c4:36:6e:9e:ff:e4:a7:18:b2:14:67:b6:
         db:6c:c8:4b:58:15:c0:28:87:71:04:fb:a6:5a:08:08:7b:0c:
         32:d9:b3:50:67:26:dc:7d:b5:27:19:17:a1:9d:8c:6d:42:54:
         8a:74:3f:16:48:06:dd:1b:a8:b8:c1:f0:88:28:9b:7c:42:93:
         01:d3:2c:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKev+S8tTnmSL6BMYnywPVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw
ODcxYjgwHhcNMjUwNjA3MTMwMTA0WhcNMjUwNjA4MTMwMTA0WjAzMTEwLwYDVQQD
EyhiMDgxYjZiNzg5ZWY5YTM1ZDVhNWJkNDg0ZmVlNzA5MzA0MjYzNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw9JKmvqiseXkWstPfD8F8KTRLtx
zZ2qChMCs8r5SUvt5wQxNMu3f66+pOUBh7TAlaxa6NxBs3Im0MeBJVrffmYXLdBe
qvlizKxoAppPlniSgJMP1kLgz4pcXC90BpC+ifXJ7WoReme9wicrSRUGdvK+VxGf
HrdMp/0mAWLXOorzIRCmGUR8I546J1RJBoMFgHWUCoO16p10szj8qFbhRJbKGNpj
a6WEx/0T8/7QGiw5z8WWzMMMYaS8ZBtiCJ5RiRWa9NCTfm3lwAfABN/qpKCpTfLL
LD809472qqWClTlXV2n/WVHRq9gWiXTeeLR7wAKxMTYab1l408gHftlMjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCBtreJ75o11aW9SE/ucJMEJjW4MB8GA1UdIwQY
MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt
M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh
LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7Y49OWS
oMK2Wc3NtTQUKQ0j3rvqFsCY22C8oXZLHVg8zwSHUrOvDVP0HyUONvTFvOXU6rTi
qjOKGR2maiJKa7oZmV757jIRg0D3t4zEFhRLSQMWf7uLbM2XUxH6SjuDrf9w9MOX
ZwTuVI1bh3+TGThcRG/BlnDed08Rw+vwIml0vrheSGktPrX+QQPtqvfPlXwTQwUe
9H7KNTqakUj8QacoPRgDiW9vydakAh2ALNHJhE2nxw3ttymqxDZunv/kpxiyFGe2
22zIS1gVwCiHcQT7ploICHsMMtmzUGcm3H21JxkXoZ2MbUJUinQ/FkgG3RuouMHw
iCibfEKTAdMswQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:15:17 2025 by rpki-client