Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          O7f/uUWMjqH80x3SoR+Qcs6FLrh7IyKGsk/7bRCMb6U=
Subject key identifier:   23:7D:24:93:3F:8A:DF:92:1A:A0:7D:AC:7D:6B:B2:01:60:74:5D:6D
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       0197470C0D87913C94FA52EE97323494EF0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 21:01:01 +0000
Manifest this update:     Fri 06 Jun 2025 21:01:01 +0000
Manifest next update:     Sat 07 Jun 2025 21:01:01 +0000
Files and hashes:         1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: hbYF+sSrCCZmbAxdMF7rMpa6d+ulxbkRgHsLSCYHlBE=)
                          2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:0c:0d:87:91:3c:94:fa:52:ee:97:32:34:94:ef:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Jun  6 21:01:01 2025 GMT
            Not After : Jun  7 21:01:01 2025 GMT
        Subject: CN=237d24933f8adf921aa07dac7d6bb20160745d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:2d:2e:69:8c:29:c4:f5:9f:95:ba:2c:c1:
                    1d:18:99:7a:b8:a1:7c:ea:11:3b:2d:3e:d6:1d:e7:
                    c8:5d:93:b1:a5:bb:e3:71:80:26:3d:8b:8c:35:3e:
                    60:46:b7:9a:27:e7:f6:8e:e5:9e:cf:f3:76:c2:42:
                    5f:ba:2e:97:38:7a:8c:42:af:89:2d:50:3a:50:3b:
                    1c:43:b3:40:25:e6:1e:3d:af:94:6e:8c:58:58:03:
                    81:46:6a:d6:da:3a:15:af:23:41:de:1f:c3:97:10:
                    93:c3:b3:44:b8:06:31:0c:1d:0a:bd:0a:5d:4e:d9:
                    df:5c:b8:b1:c3:41:cb:e4:74:00:bb:46:7c:ad:ff:
                    de:d8:95:a2:db:bf:c8:07:40:6b:cf:90:82:d5:8d:
                    ad:44:cc:a5:f9:4b:17:27:69:99:8e:26:2d:14:c6:
                    34:d6:13:1e:55:a5:09:76:d9:55:a8:22:79:3c:c8:
                    9f:0e:12:7b:e3:39:94:29:66:19:50:ed:ac:62:61:
                    02:2e:ac:77:2d:ed:ed:c2:1f:18:cd:f3:58:6b:62:
                    73:cf:30:65:7b:f6:65:ab:92:ba:40:c5:37:e1:36:
                    09:38:44:30:78:e2:42:c6:cf:d0:ae:7b:f3:2b:f9:
                    0c:36:dd:d3:3e:b3:75:62:c6:54:77:39:c5:17:c9:
                    8c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:7D:24:93:3F:8A:DF:92:1A:A0:7D:AC:7D:6B:B2:01:60:74:5D:6D
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:40:09:3a:a7:05:2a:c0:b4:5a:62:00:c8:e3:b0:7a:19:10:
         cd:ed:38:8f:b9:17:d0:c2:14:a0:6d:36:99:2c:6b:4b:17:e5:
         9c:d6:87:ca:0c:4c:62:33:5a:3e:10:8d:83:4c:ca:8a:83:45:
         9d:d3:df:6c:ba:e4:63:c2:7a:6b:86:c0:48:a3:51:56:e4:e2:
         be:8e:e4:43:c4:b8:09:de:2a:28:58:e0:b8:9a:e9:85:13:eb:
         93:55:cc:db:9c:e4:c3:3a:b3:02:31:2e:3a:c8:84:b5:9a:58:
         61:f2:d2:ad:c8:1e:ff:9e:03:7f:21:10:51:3e:d4:76:66:cf:
         aa:29:f7:2b:74:75:cd:44:1d:62:ab:c0:cb:96:4f:ed:ea:2f:
         32:1c:de:b2:1e:7f:53:2a:d2:cf:b5:d1:08:ae:54:a9:42:93:
         cd:1f:af:19:ff:78:fe:c9:3c:9a:7a:31:2e:35:d4:77:68:44:
         74:e8:98:39:58:6a:7d:9c:e4:9e:91:f1:b2:b7:dc:8d:16:33:
         8f:e8:c7:0f:39:6d:83:b3:b2:9e:a2:a1:80:39:51:1b:d7:61:
         3c:32:b9:c8:a4:45:aa:26:3e:db:44:c1:f4:36:da:1c:32:b4:
         c4:dd:86:59:5c:7b:84:a4:f3:6d:c4:d2:3e:17:ad:e1:42:ff:
         d8:eb:17:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHDA2HkTyU+lLulzI0lO8PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1
YjU1YTMwHhcNMjUwNjA2MjEwMTAxWhcNMjUwNjA3MjEwMTAxWjAzMTEwLwYDVQQD
EygyMzdkMjQ5MzNmOGFkZjkyMWFhMDdkYWM3ZDZiYjIwMTYwNzQ1ZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnEtLmmMKcT1n5W6LMEdGJl6uKF8
6hE7LT7WHefIXZOxpbvjcYAmPYuMNT5gRreaJ+f2juWez/N2wkJfui6XOHqMQq+J
LVA6UDscQ7NAJeYePa+UboxYWAOBRmrW2joVryNB3h/DlxCTw7NEuAYxDB0KvQpd
TtnfXLixw0HL5HQAu0Z8rf/e2JWi27/IB0Brz5CC1Y2tRMyl+UsXJ2mZjiYtFMY0
1hMeVaUJdtlVqCJ5PMifDhJ74zmUKWYZUO2sYmECLqx3Le3twh8YzfNYa2JzzzBl
e/Zlq5K6QMU34TYJOEQweOJCxs/QrnvzK/kMNt3TPrN1YsZUdznFF8mMwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCN9JJM/it+SGqB9rH1rsgFgdF1tMB8GA1UdIwQY
MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt
N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj
LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEAJOqcF
KsC0WmIAyOOwehkQze04j7kX0MIUoG02mSxrSxflnNaHygxMYjNaPhCNg0zKioNF
ndPfbLrkY8J6a4bASKNRVuTivo7kQ8S4Cd4qKFjguJrphRPrk1XM25zkwzqzAjEu
OsiEtZpYYfLSrcge/54DfyEQUT7UdmbPqin3K3R1zUQdYqvAy5ZP7eovMhzesh5/
UyrSz7XRCK5UqUKTzR+vGf94/sk8mnoxLjXUd2hEdOiYOVhqfZzknpHxsrfcjRYz
j+jHDzltg7OynqKhgDlRG9dhPDK5yKRFqiY+20TB9DbaHDK0xN2GWVx7hKTzbcTS
Phet4UL/2OsXyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:30 2025 by rpki-client