Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
File:                     BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft (raw, json)
Hash identifier:          blpA1H19bxt/tkp7PfLoSzj4nxj033llQOIQp8PGcMM=
Subject key identifier:   D9:E7:CE:FC:7D:51:F9:19:6B:4B:35:E9:28:77:58:E0:74:5A:E0:C7
Authority key identifier: 05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C
Certificate issuer:       /CN=05f2748cb43862a104b56f8c6204b6209706558c
Certificate serial:       01958B166ABB0E3F8900228880E651419C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
Manifest number:          0B7C
Signing time:             Wed 12 Mar 2025 16:00:56 +0000
Manifest this update:     Wed 12 Mar 2025 16:00:56 +0000
Manifest next update:     Thu 13 Mar 2025 16:00:56 +0000
Files and hashes:         1: BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl (hash: T9r1HcNA75HUWhZnLLadNx5VJdyrGQlEbWBf8Qh5ceg=)
                          2: EhPdkmEcd5kZgSYia-f_ZpjHYY0.roa (hash: 3TfVzsPjB0vFUIoLoSrG9hGoNnzjzko9raGZf0VmPMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Mar 2025 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8b:16:6a:bb:0e:3f:89:00:22:88:80:e6:51:41:9c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f2748cb43862a104b56f8c6204b6209706558c
        Validity
            Not Before: Mar 12 16:00:56 2025 GMT
            Not After : Mar 13 16:00:56 2025 GMT
        Subject: CN=d9e7cefc7d51f9196b4b35e9287758e0745ae0c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:d4:06:56:d9:1d:1a:9b:4f:88:9b:d6:e0:
                    54:71:97:e5:09:cb:ee:f4:ac:ae:aa:f8:5a:71:e7:
                    ff:aa:23:01:29:90:c5:ba:2a:c5:76:78:08:f0:f9:
                    14:3c:4f:6f:2d:30:ea:a8:97:03:c4:82:e8:ce:51:
                    0f:a9:81:7a:16:33:87:0f:3d:4b:ce:d3:78:73:74:
                    b5:e8:5e:b6:0f:9c:5e:25:16:66:03:3d:8c:9e:26:
                    44:dc:57:b3:5e:bb:2e:ff:27:85:bb:34:04:10:33:
                    f4:4f:70:28:47:e5:d5:38:2f:a7:b0:a6:70:0b:04:
                    36:c6:32:0b:54:96:7b:31:87:0b:3a:f3:2c:8b:84:
                    72:bb:c4:c6:e6:ad:a2:77:e8:23:92:4e:fa:40:66:
                    4b:49:12:59:9f:f2:b1:00:12:1d:e2:d9:93:30:be:
                    c0:cc:3c:03:9d:5b:07:95:75:91:bc:12:79:c1:a4:
                    cf:33:e0:2a:1a:42:2e:51:f3:06:9d:9c:f1:82:9c:
                    e2:7c:e2:1a:a8:f2:8e:27:db:10:98:7c:6f:95:8b:
                    2d:f4:e3:dd:21:b3:d8:7f:6b:32:96:35:2c:5f:8b:
                    94:12:02:e4:13:76:98:14:b2:78:37:23:19:90:bc:
                    75:c0:9d:99:6b:00:64:40:28:64:e3:c0:43:53:92:
                    32:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E7:CE:FC:7D:51:F9:19:6B:4B:35:E9:28:77:58:E0:74:5A:E0:C7
            X509v3 Authority Key Identifier:
                keyid:05:F2:74:8C:B4:38:62:A1:04:B5:6F:8C:62:04:B6:20:97:06:55:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/485fb4-3027-46cc-bd67-809a4b7ab4b5/1/BfJ0jLQ4YqEEtW-MYgS2IJcGVYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:d8:6f:79:a6:b0:3d:0f:d9:fa:e7:40:52:b7:8f:64:ca:
         d6:10:17:88:d3:6a:49:ed:c8:16:c9:8a:d2:14:54:33:dd:9a:
         54:44:c0:82:05:6a:05:08:40:9e:fd:5b:a8:07:0f:5c:94:a6:
         b2:bb:e9:55:98:84:7d:57:2b:b0:71:f7:7c:e7:15:1d:e1:b9:
         cc:a1:73:05:af:de:a6:2e:24:a0:44:e3:65:31:9b:03:a8:8b:
         a6:cc:27:38:2e:fc:d3:c6:d2:ea:cb:a1:f8:f8:58:d2:99:6e:
         85:0a:8b:a3:42:82:cd:dd:d6:b5:e6:ac:5b:aa:41:13:42:ef:
         ec:58:1a:df:08:2a:2d:b2:46:7e:18:06:60:1b:31:b3:20:87:
         6c:22:c0:4e:c4:99:fe:ea:fa:5e:a6:3e:2b:eb:65:e4:86:e5:
         a1:e8:77:7a:93:4d:89:c6:35:c2:6d:bb:db:e5:45:b1:3a:d9:
         5f:10:84:55:cc:d2:dd:5a:fe:e6:0e:01:5f:37:e6:93:95:73:
         1d:a9:e8:0a:10:00:57:b4:a0:08:33:0b:7b:49:20:5b:e3:ac:
         e6:e3:f3:c2:fa:04:f6:e0:12:94:18:58:ce:69:02:f0:21:7c:
         16:00:38:8a:be:95:bf:1a:c7:21:19:6d:57:ca:2c:d2:94:e9:
         56:34:dd:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLFmq7Dj+JACKIgOZRQZyOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZjI3NDhjYjQzODYyYTEwNGI1NmY4YzYyMDRiNjIwOTcw
NjU1OGMwHhcNMjUwMzEyMTYwMDU2WhcNMjUwMzEzMTYwMDU2WjAzMTEwLwYDVQQD
EyhkOWU3Y2VmYzdkNTFmOTE5NmI0YjM1ZTkyODc3NThlMDc0NWFlMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zjUBlbZHRqbT4ib1uBUcZflCcvu
9Kyuqvhacef/qiMBKZDFuirFdngI8PkUPE9vLTDqqJcDxILozlEPqYF6FjOHDz1L
ztN4c3S16F62D5xeJRZmAz2MniZE3FezXrsu/yeFuzQEEDP0T3AoR+XVOC+nsKZw
CwQ2xjILVJZ7MYcLOvMsi4Ryu8TG5q2id+gjkk76QGZLSRJZn/KxABId4tmTML7A
zDwDnVsHlXWRvBJ5waTPM+AqGkIuUfMGnZzxgpzifOIaqPKOJ9sQmHxvlYst9OPd
IbPYf2syljUsX4uUEgLkE3aYFLJ4NyMZkLx1wJ2ZawBkQChk48BDU5IyfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnnzvx9UfkZa0s16Sh3WOB0WuDHMB8GA1UdIwQY
MBaAFAXydIy0OGKhBLVvjGIEtiCXBlWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjct
ODA5YTRiN2FiNGI1LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC80ODVmYjQtMzAyNy00NmNjLWJkNjctODA5YTRiN2FiNGI1
LzEvQmZKMGpMUTRZcUVFdFctTVlnUzJJSmNHVll3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYDYb3mm
sD0P2frnQFK3j2TK1hAXiNNqSe3IFsmK0hRUM92aVETAggVqBQhAnv1bqAcPXJSm
srvpVZiEfVcrsHH3fOcVHeG5zKFzBa/epi4koETjZTGbA6iLpswnOC7808bS6suh
+PhY0pluhQqLo0KCzd3WteasW6pBE0Lv7Fga3wgqLbJGfhgGYBsxsyCHbCLATsSZ
/ur6XqY+K+tl5Ibloeh3epNNicY1wm272+VFsTrZXxCEVczS3Vr+5g4BXzfmk5Vz
HanoChAAV7SgCDMLe0kgW+Os5uPzwvoE9uASlBhYzmkC8CF8FgA4ir6VvxrHIRlt
V8os0pTpVjTdXA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:54 2025 by rpki-client