Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File:                     BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier:          ZYvUNPzb/JMTDlOf08HhqPCE9uZscKc1YAaumi+6joQ=
Subject key identifier:   F6:EA:5B:DB:E3:0F:0E:B5:4A:97:FC:9A:44:A0:A3:39:07:61:D5:83
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer:       /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial:       019751214792EC82D1D13009F3EE1467750E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number:          13EC
Signing time:             Sun 08 Jun 2025 20:00:24 +0000
Manifest this update:     Sun 08 Jun 2025 20:00:24 +0000
Manifest next update:     Mon 09 Jun 2025 20:00:24 +0000
Files and hashes:         1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: CAor4qiP/jRagmG8C2e0shFBmq/m3MaGd5yPoVZ65lM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:51:21:47:92:ec:82:d1:d1:30:09:f3:ee:14:67:75:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
        Validity
            Not Before: Jun  8 20:00:24 2025 GMT
            Not After : Jun  9 20:00:24 2025 GMT
        Subject: CN=f6ea5bdbe30f0eb54a97fc9a44a0a3390761d583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1f:48:2f:f1:23:84:59:87:1a:d4:ac:c7:44:
                    6d:26:4d:9b:b8:f1:e9:40:53:e4:ea:70:a2:5c:8a:
                    72:69:13:d4:aa:d7:78:99:e8:01:2b:61:42:e9:03:
                    2a:41:b6:e8:15:c5:cd:8f:6c:4a:e8:53:07:0e:ac:
                    c9:c8:5c:85:29:e0:29:6c:f9:65:de:f5:92:15:a2:
                    50:26:0e:51:ea:97:10:7b:45:42:21:21:ea:6f:d1:
                    19:61:90:f9:9e:da:35:e1:be:04:ea:3e:77:90:cf:
                    d5:c5:aa:2f:4b:30:0d:fd:a4:12:84:83:1f:0c:85:
                    2f:5d:bc:45:77:27:fd:ee:1f:0d:be:1f:4c:ae:39:
                    83:0e:46:22:c7:d2:57:94:bd:33:42:4b:8b:49:1c:
                    52:55:45:93:2a:d5:14:d5:cb:47:cd:d1:5c:ba:08:
                    d8:fc:61:16:0e:43:68:f4:2b:b7:34:b6:6a:c2:4e:
                    b6:cd:d7:ab:b7:ab:1f:7d:5e:eb:6d:f4:51:e9:dd:
                    4d:f7:58:9f:90:36:bd:50:a2:c2:85:3f:b3:88:10:
                    23:58:d5:f3:86:a1:51:dd:0d:09:69:13:7e:88:b0:
                    dc:98:8b:04:a0:d3:f8:78:a0:0b:8c:67:a9:99:c0:
                    19:fa:8b:c8:18:5c:4a:7c:c9:03:e1:3e:4c:41:08:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EA:5B:DB:E3:0F:0E:B5:4A:97:FC:9A:44:A0:A3:39:07:61:D5:83
            X509v3 Authority Key Identifier:
                keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:23:6d:0a:fc:de:9d:26:a5:ec:b9:32:23:22:5b:63:cd:d8:
         78:a6:89:e8:24:95:32:4d:5f:bd:98:f0:61:ff:98:f6:71:40:
         15:7a:51:fc:11:96:fa:d5:2f:bd:91:09:73:55:3c:f0:ab:a8:
         b1:53:c3:38:77:05:16:1f:44:9c:7b:73:c2:f8:8b:1a:91:4f:
         5d:89:ce:7c:e3:fb:68:45:28:64:59:24:bc:3c:01:0b:bf:fa:
         41:f4:bd:56:fc:f1:91:d9:c9:7f:bf:43:58:3b:29:e9:dd:21:
         b0:92:54:99:8c:bd:f7:5e:5f:f9:85:e6:e8:52:4e:93:cd:fc:
         c5:04:bc:a8:74:88:c1:c6:1e:1d:89:78:ba:9a:81:61:19:d7:
         e0:a7:b2:dd:19:23:ae:c6:1e:23:09:e4:c1:53:d1:61:92:f8:
         d0:c1:b5:de:a9:d4:bb:59:f2:04:2a:fe:bf:34:be:d0:f9:16:
         2e:d5:06:66:c8:d0:82:c6:ef:b7:f7:0c:fb:45:da:c5:d7:9b:
         42:44:5f:a9:af:65:35:80:9f:28:a6:fe:53:9e:50:af:11:0f:
         e7:5d:a1:28:46:55:55:ac:97:ea:52:fe:e3:9d:fb:ff:6a:4a:
         18:26:02:68:f7:35:4c:0f:71:ef:76:21:3f:85:03:80:77:dd:
         5a:db:43:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIUeS7ILR0TAJ8+4UZ3UOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzZlYzI4ZGIxMTRhODYyNzY0MjZkMWY0OGQyYjZhMzVk
NWZlNzMwHhcNMjUwNjA4MjAwMDI0WhcNMjUwNjA5MjAwMDI0WjAzMTEwLwYDVQQD
EyhmNmVhNWJkYmUzMGYwZWI1NGE5N2ZjOWE0NGEwYTMzOTA3NjFkNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h9IL/EjhFmHGtSsx0RtJk2buPHp
QFPk6nCiXIpyaRPUqtd4megBK2FC6QMqQbboFcXNj2xK6FMHDqzJyFyFKeApbPll
3vWSFaJQJg5R6pcQe0VCISHqb9EZYZD5nto14b4E6j53kM/VxaovSzAN/aQShIMf
DIUvXbxFdyf97h8Nvh9MrjmDDkYix9JXlL0zQkuLSRxSVUWTKtUU1ctHzdFcugjY
/GEWDkNo9Cu3NLZqwk62zdert6sffV7rbfRR6d1N91ifkDa9UKLChT+ziBAjWNXz
hqFR3Q0JaRN+iLDcmIsEoNP4eKALjGepmcAZ+ovIGFxKfMkD4T5MQQjLsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbqW9vjDw61Spf8mkSgozkHYdWDMB8GA1UdIwQY
MBaAFAbG7CjbEUqGJ2Qm0fSNK2o11f5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEt
Mzc2YmY5ZTYzMDU5LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEtMzc2YmY5ZTYzMDU5
LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMCNtCvze
nSal7LkyIyJbY83YeKaJ6CSVMk1fvZjwYf+Y9nFAFXpR/BGW+tUvvZEJc1U88Kuo
sVPDOHcFFh9EnHtzwviLGpFPXYnOfOP7aEUoZFkkvDwBC7/6QfS9VvzxkdnJf79D
WDsp6d0hsJJUmYy9915f+YXm6FJOk838xQS8qHSIwcYeHYl4upqBYRnX4Key3Rkj
rsYeIwnkwVPRYZL40MG13qnUu1nyBCr+vzS+0PkWLtUGZsjQgsbvt/cM+0Xaxdeb
QkRfqa9lNYCfKKb+U55QrxEP512hKEZVVayX6lL+4537/2pKGCYCaPc1TA9x73Yh
P4UDgHfdWttDGQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:46:15 2025 by rpki-client