Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          XhtlJlTL9zbtw4Alu1I4nyGyxYCO/dhrlQ+Sn7O51Mo=
Subject key identifier:   E7:79:45:EF:AC:DE:97:BE:33:86:21:31:BC:F6:59:48:74:4E:33:6F
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       01973BE341E5D90465F45EF69A591EC86AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          1108
Signing time:             Wed 04 Jun 2025 17:00:38 +0000
Manifest this update:     Wed 04 Jun 2025 17:00:38 +0000
Manifest next update:     Thu 05 Jun 2025 17:00:38 +0000
Files and hashes:         1: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
                          2: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
                          3: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: Wgpymu8gSMD8EEO3tUXXNnzEL5x6rGTPxP4wj+FPj9Y=)
                          4: DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa (hash: uCJntwDZ+cDZxpzZO6MqyTDIkNdtXNsEPYp7HWqPHR0=)
                          5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
                          6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
                          7: vrZXQ7c7SJqTI-Qy746C6GRBzTE.roa (hash: 9B+Vq1Jvk9CfpjDUR+g8aVrltZw5klYMebxf6UUVTtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3b:e3:41:e5:d9:04:65:f4:5e:f6:9a:59:1e:c8:6a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Jun  4 17:00:38 2025 GMT
            Not After : Jun  5 17:00:38 2025 GMT
        Subject: CN=e77945efacde97be33862131bcf65948744e336f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4c:47:1e:46:32:86:4e:4c:df:e1:ac:07:4f:
                    79:fa:20:12:dc:0b:1d:a8:0f:a3:81:12:5b:7d:4e:
                    d6:99:a2:60:25:ad:10:31:8e:66:ac:00:8c:48:81:
                    9d:ce:c4:51:fc:6e:d5:ec:37:ec:08:bc:4a:7d:e0:
                    26:56:04:a1:04:d8:fb:12:fa:31:d7:ea:6b:9a:ac:
                    7b:a1:25:66:38:6a:cd:ff:e7:5d:a5:fa:28:f7:cf:
                    28:9b:4f:74:06:88:10:a7:17:b1:af:9e:61:6e:98:
                    4f:2a:0a:c8:ee:1f:5c:ed:4c:8c:e5:e0:08:be:63:
                    8f:22:2d:78:b1:d3:56:f1:c9:0e:98:62:aa:3c:88:
                    3c:50:6f:2f:d8:1b:13:c0:d7:eb:41:e4:3d:0b:c6:
                    05:26:0d:cf:2c:c0:f4:fb:8d:31:0a:3c:11:58:78:
                    f8:31:92:30:6d:a2:83:bc:b4:93:eb:f3:50:2a:e4:
                    bf:fd:6d:0a:42:93:55:2c:dc:49:0d:d7:49:5c:11:
                    94:a3:16:94:ae:99:b5:83:f2:8b:74:77:c1:1e:87:
                    de:98:be:16:17:f8:06:18:69:cd:a6:0b:f1:45:aa:
                    9f:7f:43:25:9e:a9:e7:44:bb:09:11:d1:3f:b6:2d:
                    76:51:d9:07:b4:98:c9:b1:95:30:29:be:ee:eb:42:
                    2e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:45:EF:AC:DE:97:BE:33:86:21:31:BC:F6:59:48:74:4E:33:6F
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:7e:86:9a:ca:0d:08:8a:da:c8:88:5d:fb:e9:2f:b3:c8:aa:
         3d:60:5e:11:59:57:55:78:20:d2:00:87:d2:bd:ea:22:f0:de:
         7c:27:e7:1e:33:51:a1:50:63:85:2b:66:dc:4f:2e:4a:9b:a0:
         26:43:5f:30:a8:62:44:b4:dc:9b:a5:39:40:82:e4:de:cd:42:
         8d:d5:d0:d3:4a:c6:81:90:11:2e:95:f7:39:ad:90:25:60:04:
         ff:f4:64:30:8d:42:49:ba:02:f2:2b:3e:ef:52:7a:9e:bd:49:
         d8:c4:94:47:93:50:cc:cf:a6:94:28:9e:0c:8e:1e:88:35:97:
         04:f9:c5:2b:8d:b7:17:e2:e1:ba:16:6a:40:4d:50:cf:a1:8f:
         5c:e7:91:ad:56:5b:ab:97:12:1e:61:23:f1:3f:ab:33:9c:1d:
         df:34:46:4f:c7:78:a8:f8:40:cd:22:e7:f8:e9:7a:9b:5d:d2:
         8a:38:35:67:e7:f4:20:22:ba:34:27:62:b0:68:7d:33:66:bb:
         8e:7e:93:8c:17:e6:08:52:0f:92:0a:e7:4d:0b:27:f4:d6:0b:
         83:fc:40:13:94:71:79:2c:0e:ed:38:91:bf:be:0f:be:52:17:
         b9:f5:a2:6c:39:0b:61:26:a5:ac:cd:55:10:23:48:5b:64:57:
         07:7c:d8:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc740Hl2QRl9F72mlkeyGq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz
Yjc5MjYwHhcNMjUwNjA0MTcwMDM4WhcNMjUwNjA1MTcwMDM4WjAzMTEwLwYDVQQD
EyhlNzc5NDVlZmFjZGU5N2JlMzM4NjIxMzFiY2Y2NTk0ODc0NGUzMzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0xHHkYyhk5M3+GsB095+iAS3Asd
qA+jgRJbfU7WmaJgJa0QMY5mrACMSIGdzsRR/G7V7DfsCLxKfeAmVgShBNj7Evox
1+prmqx7oSVmOGrN/+ddpfoo988om090BogQpxexr55hbphPKgrI7h9c7UyM5eAI
vmOPIi14sdNW8ckOmGKqPIg8UG8v2BsTwNfrQeQ9C8YFJg3PLMD0+40xCjwRWHj4
MZIwbaKDvLST6/NQKuS//W0KQpNVLNxJDddJXBGUoxaUrpm1g/KLdHfBHofemL4W
F/gGGGnNpgvxRaqff0MlnqnnRLsJEdE/ti12UdkHtJjJsZUwKb7u60IuMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOd5Re+s3pe+M4YhMbz2WUh0TjNvMB8GA1UdIwQY
MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt
ZDQ0MmM0ZjllOWJkLzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk
LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIH6GmsoN
CIrayIhd++kvs8iqPWBeEVlXVXgg0gCH0r3qIvDefCfnHjNRoVBjhStm3E8uSpug
JkNfMKhiRLTcm6U5QILk3s1CjdXQ00rGgZARLpX3Oa2QJWAE//RkMI1CSboC8is+
71J6nr1J2MSUR5NQzM+mlCieDI4eiDWXBPnFK423F+LhuhZqQE1Qz6GPXOeRrVZb
q5cSHmEj8T+rM5wd3zRGT8d4qPhAzSLn+Ol6m13Sijg1Z+f0ICK6NCdisGh9M2a7
jn6TjBfmCFIPkgrnTQsn9NYLg/xAE5RxeSwO7TiRv74PvlIXufWibDkLYSalrM1V
ECNIW2RXB3zY1Q==
-----END CERTIFICATE-----
Generated at Thu Jun 5 00:01:09 2025 by rpki-client