Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          GKpT2IZD7+WRttv5liVl32KzSQe+2mm3tMAEFJCI34Q=
Subject key identifier:   E5:2A:40:42:E4:D8:6C:16:9E:3A:F0:E4:7F:EC:B5:3B:82:1E:E9:46
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       019745C26810DC7769E849D38A86F6DEF695
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 15:00:57 +0000
Manifest this update:     Fri 06 Jun 2025 15:00:57 +0000
Manifest next update:     Sat 07 Jun 2025 15:00:57 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: KF0Ds0aHhVYEKCHoI2aXH6SOlTQU7Ue4Ujk/fPeAhwA=)
                          2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:c2:68:10:dc:77:69:e8:49:d3:8a:86:f6:de:f6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: Jun  6 15:00:57 2025 GMT
            Not After : Jun  7 15:00:57 2025 GMT
        Subject: CN=e52a4042e4d86c169e3af0e47fecb53b821ee946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2d:36:e7:75:0c:06:de:fa:93:11:f3:32:ef:
                    ff:7b:86:3e:23:20:7a:23:65:03:31:d6:23:9c:6c:
                    39:d6:8b:17:e8:4a:59:55:de:9f:85:53:95:87:49:
                    89:79:e8:37:18:e7:cd:17:51:92:99:df:81:3e:45:
                    db:ed:31:f9:fe:39:da:6e:31:a8:27:63:e2:af:5c:
                    e8:ae:49:54:db:55:d1:f5:18:b0:25:1c:40:83:2e:
                    c7:79:01:84:3c:55:08:c7:bf:0c:a5:2a:31:af:3d:
                    c9:98:86:6a:c4:bc:32:c4:bb:18:0c:f2:ca:7a:46:
                    6f:fb:a1:c4:fe:58:61:a1:16:a6:40:81:79:0b:ca:
                    8c:5b:3c:7b:b8:ac:38:6a:a7:63:0b:62:13:12:e5:
                    ff:c9:c1:68:9b:d7:97:6e:ee:3a:01:e2:17:e5:6c:
                    fe:d9:d3:94:a0:e6:25:d5:89:13:18:b1:2f:e2:b3:
                    69:91:a8:fa:08:93:4d:68:f7:a1:50:4e:a4:ae:e7:
                    04:f1:cf:59:e1:aa:e5:8c:55:80:26:8b:9c:da:98:
                    86:1a:81:b9:e5:9d:e3:d7:c4:3b:54:5c:9d:20:db:
                    98:a0:8f:68:4d:2f:1b:cc:1c:82:20:7b:5d:6d:23:
                    92:33:58:1d:35:e8:96:c1:c5:45:47:33:45:b0:7c:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2A:40:42:E4:D8:6C:16:9E:3A:F0:E4:7F:EC:B5:3B:82:1E:E9:46
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:b0:ee:fe:df:43:9a:7e:1d:a4:bb:60:c8:5f:1d:ac:59:
         9d:10:bb:0d:7e:6a:73:7e:1b:88:ce:0b:cd:f5:ef:4f:14:eb:
         de:a1:6e:66:86:a9:06:20:5e:d4:81:43:88:60:51:d3:20:40:
         29:c0:98:e2:b1:44:10:d2:ce:8d:6e:4e:cc:dc:97:25:68:c4:
         77:cc:78:11:40:17:b4:ae:50:10:18:f3:a5:3e:9c:64:f2:ac:
         76:86:b0:2c:46:cb:f8:8b:bc:e5:ab:e6:6c:03:71:92:4d:c6:
         2f:5e:06:34:48:fb:cf:a7:e1:c7:9f:06:75:42:cb:f2:9e:1b:
         64:ed:93:31:83:82:69:f4:c5:f4:48:ec:b4:f2:cc:18:48:87:
         6d:2d:9e:82:db:38:12:28:44:3e:8c:5d:16:69:08:81:89:ab:
         04:bc:b6:28:bb:03:2f:07:b8:0b:ff:ae:71:41:12:59:32:56:
         66:30:7d:1e:ac:9f:b4:f7:02:c1:94:b8:56:4e:1a:bf:5a:ff:
         56:8d:91:ad:67:bc:44:19:00:3e:24:d5:ca:bc:2b:93:de:62:
         5e:db:79:a6:de:5c:0d:5e:e0:c2:82:5d:c2:d4:27:0d:ff:49:
         cb:48:54:4e:6c:29:5e:c9:2e:27:c5:81:3f:f4:91:05:91:4b:
         5c:a8:04:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdFwmgQ3Hdp6EnTiob23vaVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUwNjA2MTUwMDU3WhcNMjUwNjA3MTUwMDU3WjAzMTEwLwYDVQQD
EyhlNTJhNDA0MmU0ZDg2YzE2OWUzYWYwZTQ3ZmVjYjUzYjgyMWVlOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi0253UMBt76kxHzMu//e4Y+IyB6
I2UDMdYjnGw51osX6EpZVd6fhVOVh0mJeeg3GOfNF1GSmd+BPkXb7TH5/jnabjGo
J2Pir1zorklU21XR9RiwJRxAgy7HeQGEPFUIx78MpSoxrz3JmIZqxLwyxLsYDPLK
ekZv+6HE/lhhoRamQIF5C8qMWzx7uKw4aqdjC2ITEuX/ycFom9eXbu46AeIX5Wz+
2dOUoOYl1YkTGLEv4rNpkaj6CJNNaPehUE6krucE8c9Z4arljFWAJouc2piGGoG5
5Z3j18Q7VFydINuYoI9oTS8bzByCIHtdbSOSM1gdNeiWwcVFRzNFsHwM8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUqQELk2GwWnjrw5H/stTuCHulGMB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrCw7v7f
Q5p+HaS7YMhfHaxZnRC7DX5qc34biM4LzfXvTxTr3qFuZoapBiBe1IFDiGBR0yBA
KcCY4rFEENLOjW5OzNyXJWjEd8x4EUAXtK5QEBjzpT6cZPKsdoawLEbL+Iu85avm
bANxkk3GL14GNEj7z6fhx58GdULL8p4bZO2TMYOCafTF9EjstPLMGEiHbS2egts4
EihEPoxdFmkIgYmrBLy2KLsDLwe4C/+ucUESWTJWZjB9HqyftPcCwZS4Vk4av1r/
Vo2RrWe8RBkAPiTVyrwrk95iXtt5pt5cDV7gwoJdwtQnDf9Jy0hUTmwpXskuJ8WB
P/SRBZFLXKgEAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:21 2025 by rpki-client