Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          HlGwDk/aqnfaZag5uV5lnHyz92TZHoa1f+R35SXh0wQ=
Subject key identifier:   55:84:63:37:43:13:64:D1:BE:32:B0:AB:C1:68:5C:B6:ED:A4:8A:83
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       019A71134C3BC9A7D692C0ACE229748340C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          0E3B
Signing time:             Tue 11 Nov 2025 04:01:21 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:21 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:21 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: 2TmutPpp+CcM0pCJ2/kvTy32XL+PkHdpZhTMBAicjR0=)
                          2: E9Q22GIdMyoqpYS3_A3Sv4bLQrU.roa (hash: U3UIBvBEgw3rK3s+0sDC6RFjCDwgftn5pIAbSSrZ/Fw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:4c:3b:c9:a7:d6:92:c0:ac:e2:29:74:83:40:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: Nov 11 04:01:21 2025 GMT
            Not After : Nov 12 04:01:21 2025 GMT
        Subject: CN=55846337431364d1be32b0abc1685cb6eda48a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:77:ed:d1:37:07:e2:46:b4:a8:b8:96:24:
                    8b:83:1b:bd:3e:61:04:8f:fb:a2:62:6b:ad:bb:57:
                    32:f4:28:d8:9f:65:ff:47:0b:7d:3a:76:5c:d9:42:
                    b3:03:31:39:b5:b9:b8:6c:a7:47:76:f9:ff:fe:82:
                    4f:b3:07:74:8b:ce:dd:cf:bc:c5:49:e8:27:64:07:
                    a2:85:90:dd:63:f6:d9:38:18:65:e5:45:2a:47:0f:
                    f0:bb:3a:b3:cb:60:63:98:ce:ba:86:a4:c0:c1:e8:
                    8f:77:d0:a3:be:61:3c:08:7f:dd:f7:d5:7a:57:7f:
                    66:93:f2:0d:52:10:fc:46:72:95:12:d2:2f:c9:dd:
                    34:4d:00:1b:c7:3c:87:4c:ed:ba:6d:04:3b:d0:d9:
                    58:63:33:13:d6:c0:6e:92:d2:bd:9f:c1:3f:e3:1f:
                    09:1e:0c:7f:19:85:0c:18:10:fb:ab:8c:13:25:27:
                    d4:bb:f5:6c:bd:af:a6:3a:df:70:f2:a7:a1:83:b5:
                    d6:dd:db:dd:78:13:a5:c0:df:25:02:7c:47:55:a7:
                    80:49:e1:c4:ff:86:dd:d0:62:2f:16:56:74:3c:ae:
                    76:d8:e7:56:ca:79:7d:d8:ce:9b:c8:84:35:cb:8b:
                    49:3f:f2:62:53:f5:1e:b4:59:a3:bb:29:8a:e1:96:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:63:37:43:13:64:D1:BE:32:B0:AB:C1:68:5C:B6:ED:A4:8A:83
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5b:c1:7e:70:9a:d3:f5:79:6a:5c:e9:39:e7:0a:f2:8b:b8:
         4a:25:eb:10:42:d6:0b:46:cc:24:2d:10:ba:ca:41:3f:70:6a:
         21:a7:27:8a:de:7f:2d:2a:c3:17:be:d1:13:d9:8a:3d:83:b5:
         a2:d8:df:0c:3a:98:0b:db:53:9d:5c:b0:3d:d2:bc:fd:e7:46:
         68:f8:6a:dd:33:cb:0d:28:40:29:07:5e:66:a2:b2:87:72:0a:
         e3:aa:06:7f:b6:42:c3:1d:e4:be:63:ab:9b:f8:e1:80:a7:e1:
         3e:48:b5:78:2e:e0:be:1d:80:c5:89:b3:8b:e9:d8:47:18:fa:
         b6:b2:97:8f:cc:dd:25:fe:fb:6d:5b:4a:4a:5d:90:53:56:e9:
         3a:e9:2b:5c:3f:06:57:09:66:c8:91:1a:1d:83:66:ba:c7:1a:
         63:5e:f5:99:4c:3c:6b:59:e6:ab:84:a3:9a:08:fb:47:08:59:
         b2:43:df:52:fa:35:7b:2d:4b:05:75:19:34:37:84:15:0b:1e:
         2f:05:b2:59:2b:11:25:e1:46:b7:19:31:df:dc:25:f2:10:b3:
         0c:de:04:d4:c4:43:5e:09:3f:59:e3:6c:38:b5:0c:0e:d6:e2:
         66:3d:7e:e9:8f:b8:de:02:bf:90:22:76:04:5f:70:86:a4:3c:
         6a:d9:4f:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE0w7yafWksCs4il0g0DHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1
ZGRlMGEwHhcNMjUxMTExMDQwMTIxWhcNMjUxMTEyMDQwMTIxWjAzMTEwLwYDVQQD
Eyg1NTg0NjMzNzQzMTM2NGQxYmUzMmIwYWJjMTY4NWNiNmVkYTQ4YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps937dE3B+JGtKi4liSLgxu9PmEE
j/uiYmutu1cy9CjYn2X/Rwt9OnZc2UKzAzE5tbm4bKdHdvn//oJPswd0i87dz7zF
SegnZAeihZDdY/bZOBhl5UUqRw/wuzqzy2BjmM66hqTAweiPd9CjvmE8CH/d99V6
V39mk/INUhD8RnKVEtIvyd00TQAbxzyHTO26bQQ70NlYYzMT1sBuktK9n8E/4x8J
Hgx/GYUMGBD7q4wTJSfUu/Vsva+mOt9w8qehg7XW3dvdeBOlwN8lAnxHVaeASeHE
/4bd0GIvFlZ0PK522OdWynl92M6byIQ1y4tJP/JiU/UetFmjuymK4ZavOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFWEYzdDE2TRvjKwq8FoXLbtpIqDMB8GA1UdIwQY
MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct
M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5
LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1vBfnCa
0/V5alzpOecK8ou4SiXrEELWC0bMJC0QuspBP3BqIacnit5/LSrDF77RE9mKPYO1
otjfDDqYC9tTnVywPdK8/edGaPhq3TPLDShAKQdeZqKyh3IK46oGf7ZCwx3kvmOr
m/jhgKfhPki1eC7gvh2AxYmzi+nYRxj6trKXj8zdJf77bVtKSl2QU1bpOukrXD8G
VwlmyJEaHYNmuscaY171mUw8a1nmq4Sjmgj7RwhZskPfUvo1ey1LBXUZNDeEFQse
LwWyWSsRJeFGtxkx39wl8hCzDN4E1MRDXgk/WeNsOLUMDtbiZj1+6Y+43gK/kCJ2
BF9whqQ8atlP/Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client