Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
File:                     BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json)
Hash identifier:          LADqHPQ7u7tEQoOYaFmOYHEl9eYiGVzqZE4pddIaf14=
Subject key identifier:   16:46:0C:68:AA:D3:A3:F6:44:F5:75:0E:F9:63:D9:F3:8C:F0:5D:80
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Certificate issuer:       /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial:       01976BF48BE609C88928698811ED8F7C6736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
Manifest number:          04F2
Signing time:             Sat 14 Jun 2025 01:01:18 +0000
Manifest this update:     Sat 14 Jun 2025 01:01:18 +0000
Manifest next update:     Sun 15 Jun 2025 01:01:18 +0000
Files and hashes:         1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: igvvGekj/RoYVeCNS9reCQJdE2Ub4aHCuLV5MNYE+es=)
                          2: gWxtw4ZWlclsFDoK9_z8YzvsRBM.roa (hash: Q3hqFT8VcOBOjGEi5qKDmuRuKylU6JzGGHfWbsdZjmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f4:8b:e6:09:c8:89:28:69:88:11:ed:8f:7c:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
        Validity
            Not Before: Jun 14 01:01:18 2025 GMT
            Not After : Jun 15 01:01:18 2025 GMT
        Subject: CN=16460c68aad3a3f644f5750ef963d9f38cf05d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:b7:33:58:53:f6:b8:84:c5:2e:4a:9c:ca:
                    43:90:c5:6c:2e:b6:0f:ce:c9:02:db:51:25:98:0e:
                    31:b3:8e:6c:75:d6:38:50:fa:8e:5e:de:eb:53:af:
                    0f:7a:bf:f1:df:52:38:d6:0d:49:45:85:7a:94:c1:
                    66:58:51:1a:26:82:6b:63:c4:51:66:f2:4b:28:2e:
                    6b:0d:60:de:b1:0b:f1:a0:ee:5b:7c:c2:23:56:d1:
                    9d:d2:82:51:d2:d6:d4:82:7a:27:db:a5:fe:84:1c:
                    6f:99:77:83:8f:40:18:10:ad:d8:3d:6b:53:67:05:
                    43:84:fc:68:05:2b:1f:5f:49:48:f0:c9:f6:5d:3c:
                    df:29:43:0b:8e:d4:a2:16:17:84:6c:91:cf:6d:74:
                    c8:83:43:b1:32:f6:27:81:45:68:da:0a:23:3b:d9:
                    70:ed:fa:c8:b9:dd:e1:f9:55:f6:6c:c4:d6:9a:3d:
                    9e:56:54:7f:f3:03:8c:bc:8b:00:e2:59:71:44:06:
                    6f:55:ef:72:55:f8:2e:88:1f:14:12:9d:b9:9c:d8:
                    08:6f:6a:14:5b:17:cd:4e:09:5e:29:3b:f7:2b:0c:
                    7c:f3:e5:4c:92:70:9b:96:51:90:f3:97:47:48:11:
                    67:82:eb:1f:4e:45:6b:3d:4a:7a:73:ae:42:87:e3:
                    87:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:46:0C:68:AA:D3:A3:F6:44:F5:75:0E:F9:63:D9:F3:8C:F0:5D:80
            X509v3 Authority Key Identifier:
                keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:97:92:16:68:e5:e6:7b:40:de:de:de:04:73:c7:1f:30:91:
         5b:3f:28:5b:17:e9:43:42:9a:51:f6:da:49:ee:0b:62:3f:45:
         b5:c6:42:ae:b6:e8:71:dd:5c:2b:ce:0f:d5:5a:49:df:3b:2f:
         15:1a:45:db:e8:3f:98:4a:d8:8e:f5:50:38:55:dc:15:91:7c:
         90:ac:78:41:db:34:75:6c:62:76:59:64:f4:48:ef:21:18:b0:
         8f:cf:1b:90:15:e5:ff:1c:1e:34:ea:2f:28:b3:13:b1:fb:04:
         25:5d:4a:a6:72:6b:5c:a9:aa:91:9e:95:11:94:65:2a:8e:ae:
         bd:14:71:5c:53:ed:d1:39:ca:5b:81:56:28:2b:cb:89:2c:85:
         64:76:03:cd:c4:3a:a5:99:04:4d:bd:39:6d:96:9f:20:01:78:
         e2:b2:db:f4:df:b7:9a:20:73:f0:d5:e0:2d:91:09:b6:6f:0a:
         15:f5:e0:ac:ae:ff:9f:30:75:02:e0:05:bf:57:8d:e0:ac:8a:
         fe:79:b5:d6:66:46:11:ec:82:a7:8d:9d:ce:89:47:75:3b:67:
         7c:82:48:fa:a6:21:e4:71:0d:e6:31:0e:ce:eb:44:b6:fc:93:
         c5:a4:f9:e5:2a:24:27:af:0a:da:e2:48:b5:25:71:7e:6a:2a:
         70:30:3b:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9IvmCciJKGmIEe2PfGc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx
MDYzZTIwHhcNMjUwNjE0MDEwMTE4WhcNMjUwNjE1MDEwMTE4WjAzMTEwLwYDVQQD
EygxNjQ2MGM2OGFhZDNhM2Y2NDRmNTc1MGVmOTYzZDlmMzhjZjA1ZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqa3M1hT9riExS5KnMpDkMVsLrYP
zskC21ElmA4xs45sddY4UPqOXt7rU68Per/x31I41g1JRYV6lMFmWFEaJoJrY8RR
ZvJLKC5rDWDesQvxoO5bfMIjVtGd0oJR0tbUgnon26X+hBxvmXeDj0AYEK3YPWtT
ZwVDhPxoBSsfX0lI8Mn2XTzfKUMLjtSiFheEbJHPbXTIg0OxMvYngUVo2gojO9lw
7frIud3h+VX2bMTWmj2eVlR/8wOMvIsA4llxRAZvVe9yVfguiB8UEp25nNgIb2oU
WxfNTgleKTv3Kwx88+VMknCbllGQ85dHSBFngusfTkVrPUp6c65Ch+OH2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZGDGiq06P2RPV1Dvlj2fOM8F2AMB8GA1UdIwQY
MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt
NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh
LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJeSFmjl
5ntA3t7eBHPHHzCRWz8oWxfpQ0KaUfbaSe4LYj9FtcZCrrbocd1cK84P1VpJ3zsv
FRpF2+g/mErYjvVQOFXcFZF8kKx4Qds0dWxidllk9EjvIRiwj88bkBXl/xweNOov
KLMTsfsEJV1KpnJrXKmqkZ6VEZRlKo6uvRRxXFPt0TnKW4FWKCvLiSyFZHYDzcQ6
pZkETb05bZafIAF44rLb9N+3miBz8NXgLZEJtm8KFfXgrK7/nzB1AuAFv1eN4KyK
/nm11mZGEeyCp42dzolHdTtnfIJI+qYh5HEN5jEOzutEtvyTxaT55SokJ68K2uJI
tSVxfmoqcDA7OA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 08:42:21 2025 by rpki-client