Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
File:                     BUQJodiwcvfbAkUouXIDOb27sQY.mft (raw, json)
Hash identifier:          VPm/teQpmhqiYwl5Ji8d9eOGk42DQzBHEafpBjOl4Bw=
Subject key identifier:   17:3E:D2:81:49:E4:EB:7D:7F:C4:70:96:22:A7:D5:33:3C:D2:6E:67
Authority key identifier: 05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06
Certificate issuer:       /CN=054409a1d8b072f7db024528b9720339bdbbb106
Certificate serial:       01974AE8C4DC1ACEC483E9A2EED9095F05DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 15:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:58 +0000
Files and hashes:         1: BUQJodiwcvfbAkUouXIDOb27sQY.crl (hash: gDcn+JAjtDXCigOK6wmRB4QcCBYPj8/s0AGzW7ETqlc=)
                          2: UMjcguXzK8JJuV9OAn9YGkymPvA.roa (hash: 4DrO4r19O+5ROWEhi1+BcrHjdVH/qYD6Oqql5i/mVz8=)
                          3: VVkXzzLot1NoIJDj7qPW9t8KJeA.roa (hash: dj1ugJopxiv7wcnxLpO9LCCqzbXxSCBi0Qzt+qevjaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:c4:dc:1a:ce:c4:83:e9:a2:ee:d9:09:5f:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=054409a1d8b072f7db024528b9720339bdbbb106
        Validity
            Not Before: Jun  7 15:00:58 2025 GMT
            Not After : Jun  8 15:00:58 2025 GMT
        Subject: CN=173ed28149e4eb7d7fc4709622a7d5333cd26e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:d9:bf:2f:b1:72:3a:ca:fd:42:1e:33:3c:
                    d7:d0:c4:36:77:be:fd:4b:8b:a6:50:fc:14:0c:77:
                    91:27:06:d3:bb:62:79:bc:e7:09:d9:e8:71:51:47:
                    06:94:2b:2d:5c:79:e4:fe:2f:0f:40:f8:f8:e6:78:
                    59:a2:e5:6e:38:9f:e8:7f:88:7e:97:00:4a:9b:4f:
                    5c:2a:1f:5f:f4:f7:f4:b6:ab:f9:99:82:c2:a3:58:
                    fb:cd:9d:fa:58:9b:de:08:07:58:6d:f1:d6:2a:e9:
                    cf:e6:d9:17:aa:21:3c:76:b2:7d:9a:18:ed:33:3c:
                    08:bc:e3:56:55:38:a0:0b:48:7e:6b:e8:00:d2:91:
                    d7:4f:5e:c4:68:5c:9f:78:2e:ec:4f:a7:d7:04:91:
                    95:dd:0a:a6:3b:d4:7c:b9:8a:6f:6f:01:23:35:ad:
                    8e:4a:35:65:ce:f0:bd:b8:8f:3b:fe:5c:e5:9e:07:
                    be:2a:e5:e5:c2:ee:15:1e:ca:1d:13:7f:0e:f7:0b:
                    d8:1e:87:b3:02:35:40:e3:98:71:4b:bc:9d:2f:13:
                    6a:88:d8:b4:f5:9e:02:ba:d6:88:7a:da:c1:b4:f7:
                    a7:5f:71:01:bc:45:c8:c8:d4:03:53:a8:c5:e9:67:
                    b4:75:7a:3a:2c:f9:85:9d:fc:24:66:52:03:c8:66:
                    ae:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3E:D2:81:49:E4:EB:7D:7F:C4:70:96:22:A7:D5:33:3C:D2:6E:67
            X509v3 Authority Key Identifier:
                keyid:05:44:09:A1:D8:B0:72:F7:DB:02:45:28:B9:72:03:39:BD:BB:B1:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUQJodiwcvfbAkUouXIDOb27sQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c885e7-4d6f-4b45-9e4a-b16d219b3592/1/BUQJodiwcvfbAkUouXIDOb27sQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:fb:f8:73:b4:5d:4f:f4:e9:e4:cf:0a:0f:54:b1:8d:5d:
         94:a2:bd:93:bf:27:36:ce:21:b2:4a:d6:26:af:04:be:1c:c7:
         d7:58:e6:fb:bc:2a:d3:d1:cb:c4:43:e8:43:06:be:ac:e1:00:
         3e:08:5b:68:ab:5a:bc:13:73:ed:8a:b1:a4:c0:03:14:b4:81:
         00:8b:7b:9f:ef:22:51:9c:57:c7:52:b6:63:86:bf:ba:f2:38:
         e6:d4:74:5b:03:0d:21:c8:ef:ca:7b:da:4c:10:26:6e:1f:7c:
         ef:5a:d4:9b:dd:d0:0d:4e:e3:86:89:2e:b5:bc:e6:d7:c6:d2:
         9c:a3:08:7e:36:69:6e:87:9c:ce:c8:3c:cf:62:c8:e9:ce:ac:
         f8:2d:71:b7:6e:48:3a:29:71:24:19:a7:ab:ea:24:61:b8:8e:
         12:11:89:23:73:5a:20:4b:ef:a2:d2:d2:80:61:60:fb:08:67:
         0d:6f:24:87:ad:4b:46:a7:bb:d5:81:38:f1:32:58:17:07:c6:
         fb:dd:b7:9a:77:f9:7f:e0:05:60:74:84:ba:f3:1b:8f:b5:13:
         ca:e3:eb:9d:91:3a:e1:2c:2c:c5:d2:47:f9:0b:ee:c9:23:47:
         ce:64:fe:b7:80:a5:65:25:1b:f1:74:62:3a:01:76:24:d6:19:
         43:ca:f3:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6MTcGs7Eg+mi7tkJXwXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDQwOWExZDhiMDcyZjdkYjAyNDUyOGI5NzIwMzM5YmRi
YmIxMDYwHhcNMjUwNjA3MTUwMDU4WhcNMjUwNjA4MTUwMDU4WjAzMTEwLwYDVQQD
EygxNzNlZDI4MTQ5ZTRlYjdkN2ZjNDcwOTYyMmE3ZDUzMzNjZDI2ZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UvZvy+xcjrK/UIeMzzX0MQ2d779
S4umUPwUDHeRJwbTu2J5vOcJ2ehxUUcGlCstXHnk/i8PQPj45nhZouVuOJ/of4h+
lwBKm09cKh9f9Pf0tqv5mYLCo1j7zZ36WJveCAdYbfHWKunP5tkXqiE8drJ9mhjt
MzwIvONWVTigC0h+a+gA0pHXT17EaFyfeC7sT6fXBJGV3QqmO9R8uYpvbwEjNa2O
SjVlzvC9uI87/lzlnge+KuXlwu4VHsodE38O9wvYHoezAjVA45hxS7ydLxNqiNi0
9Z4CutaIetrBtPenX3EBvEXIyNQDU6jF6We0dXo6LPmFnfwkZlIDyGau3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBc+0oFJ5Ot9f8RwliKn1TM80m5nMB8GA1UdIwQY
MBaAFAVECaHYsHL32wJFKLlyAzm9u7EGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEt
YjE2ZDIxOWIzNTkyLzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9jODg1ZTctNGQ2Zi00YjQ1LTllNGEtYjE2ZDIxOWIzNTky
LzEvQlVRSm9kaXdjdmZiQWtVb3VYSURPYjI3c1FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbf7+HO0
XU/06eTPCg9UsY1dlKK9k78nNs4hskrWJq8EvhzH11jm+7wq09HLxEPoQwa+rOEA
PghbaKtavBNz7YqxpMADFLSBAIt7n+8iUZxXx1K2Y4a/uvI45tR0WwMNIcjvynva
TBAmbh9871rUm93QDU7jhokutbzm18bSnKMIfjZpboeczsg8z2LI6c6s+C1xt25I
OilxJBmnq+okYbiOEhGJI3NaIEvvotLSgGFg+whnDW8kh61LRqe71YE48TJYFwfG
+923mnf5f+AFYHSEuvMbj7UTyuPrnZE64SwsxdJH+QvuySNHzmT+t4ClZSUb8XRi
OgF2JNYZQ8rzvw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:33:55 2025 by rpki-client