Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          ZlYnvKM2SSm1fQOLHdy3N+WKuh1fOS+7p+HFIJIuO2g=
Subject key identifier:   71:E9:2A:11:24:F4:CD:E0:02:00:33:33:9D:4F:32:2F:68:A6:1B:31
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       01964D7E7F08322FD8B386AB7BEF99963B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          14FB
Signing time:             Sat 19 Apr 2025 10:00:57 +0000
Manifest this update:     Sat 19 Apr 2025 10:00:57 +0000
Manifest next update:     Sun 20 Apr 2025 10:00:57 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: wjqbtk0rkQio38aCNIupJ9UwlE1wZ3WqPKuEGYu7dYk=)
                          2: PhqjprJzbWIvvB7osWR9awoye5s.roa (hash: XDqMhieQTxvY+bO6WNn9WVVliXKsbboocVQsGeYD0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4d:7e:7f:08:32:2f:d8:b3:86:ab:7b:ef:99:96:3b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: Apr 19 10:00:57 2025 GMT
            Not After : Apr 20 10:00:57 2025 GMT
        Subject: CN=71e92a1124f4cde0020033339d4f322f68a61b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:09:4a:2c:5e:6f:75:82:e5:06:6c:ee:bd:e9:
                    7d:f0:4b:e6:f0:9c:86:38:a1:b8:68:c5:0c:dc:72:
                    32:cf:fe:be:69:43:45:d2:98:99:84:53:af:b1:d3:
                    bc:05:97:16:3b:77:5f:a9:10:7e:65:e7:2c:e0:3e:
                    c1:11:f6:8c:fd:e6:7e:21:e9:00:14:db:a3:84:53:
                    64:67:31:88:1c:18:01:56:58:f9:93:9c:34:e7:a3:
                    cd:fd:16:61:f7:fe:b4:2b:e1:8c:da:64:ba:43:35:
                    84:66:33:de:3c:0d:bb:e4:54:5b:d6:5b:5a:2a:39:
                    b9:df:59:de:69:5d:5a:2e:dd:8e:a7:f6:6f:f3:fe:
                    94:38:f2:bd:8d:68:a7:b1:a8:d8:0f:c4:c9:84:58:
                    10:05:52:5f:0b:80:b9:b9:9a:3c:0d:49:05:40:45:
                    c0:26:52:0b:31:6c:ee:f2:0e:df:88:97:cc:af:8d:
                    27:74:5f:a0:9f:10:39:0c:cf:20:9b:18:d7:92:10:
                    91:4b:b2:0b:0f:cd:1e:c9:f1:f6:b2:f8:ca:aa:e6:
                    09:48:3f:c7:26:95:55:3f:2f:26:ce:5b:2c:38:89:
                    c3:59:4a:79:de:2e:dc:9f:4c:fc:a3:78:49:1a:73:
                    7b:be:9a:3f:f6:fa:f8:ad:3b:f2:21:38:06:e8:0a:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E9:2A:11:24:F4:CD:E0:02:00:33:33:9D:4F:32:2F:68:A6:1B:31
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:c1:c9:89:3a:1b:e4:8f:88:bd:50:e3:fd:7a:9e:db:82:03:
         81:81:b7:fd:28:1f:9a:e7:25:e6:2a:34:0a:d3:b5:bb:88:34:
         84:86:c7:7d:e1:71:17:94:ea:0f:f7:85:c5:98:db:9b:f7:b9:
         53:2c:02:51:d7:1f:8b:3e:64:ce:6e:d8:c3:81:08:f8:d3:5f:
         9a:34:a2:60:8c:33:03:51:8f:6f:06:2e:40:e7:46:03:34:4d:
         4a:0e:e0:85:54:5f:bd:27:f5:d3:a2:a7:5b:60:9f:fe:62:df:
         65:e1:b5:44:1c:af:e2:eb:60:fd:2e:4c:5f:66:f0:68:4a:85:
         8f:42:1e:82:2e:d6:78:94:d3:cc:07:20:8b:53:4b:9b:e3:ee:
         63:1c:f6:65:d6:ac:cf:96:d6:6c:3d:87:03:ce:46:04:d4:9c:
         80:d7:31:14:0d:d7:ef:a3:8d:df:8d:34:7f:1b:cd:a0:3c:15:
         bf:ae:48:19:8d:a4:f7:d9:ea:ca:ba:b4:36:8b:09:95:f0:5f:
         8e:95:71:3e:7d:33:53:af:f3:bc:0e:e8:8d:c5:27:9d:18:be:
         73:a8:28:18:20:43:d9:72:02:83:1c:62:15:89:48:b4:77:ed:
         a9:75:0a:83:3c:85:9d:9e:78:40:e8:df:1b:a9:53:b6:3f:2a:
         c1:1e:97:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZNfn8IMi/Ys4are++ZljuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3
OTc1ZTIwHhcNMjUwNDE5MTAwMDU3WhcNMjUwNDIwMTAwMDU3WjAzMTEwLwYDVQQD
Eyg3MWU5MmExMTI0ZjRjZGUwMDIwMDMzMzM5ZDRmMzIyZjY4YTYxYjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwlKLF5vdYLlBmzuvel98Evm8JyG
OKG4aMUM3HIyz/6+aUNF0piZhFOvsdO8BZcWO3dfqRB+Zecs4D7BEfaM/eZ+IekA
FNujhFNkZzGIHBgBVlj5k5w056PN/RZh9/60K+GM2mS6QzWEZjPePA275FRb1lta
Kjm531neaV1aLt2Op/Zv8/6UOPK9jWinsajYD8TJhFgQBVJfC4C5uZo8DUkFQEXA
JlILMWzu8g7fiJfMr40ndF+gnxA5DM8gmxjXkhCRS7ILD80eyfH2svjKquYJSD/H
JpVVPy8mzlssOInDWUp53i7cn0z8o3hJGnN7vpo/9vr4rTvyITgG6Ar1UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHpKhEk9M3gAgAzM51PMi9ophsxMB8GA1UdIwQY
MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt
YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw
LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAysHJiTob
5I+IvVDj/Xqe24IDgYG3/Sgfmucl5io0CtO1u4g0hIbHfeFxF5TqD/eFxZjbm/e5
UywCUdcfiz5kzm7Yw4EI+NNfmjSiYIwzA1GPbwYuQOdGAzRNSg7ghVRfvSf106Kn
W2Cf/mLfZeG1RByv4utg/S5MX2bwaEqFj0Iegi7WeJTTzAcgi1NLm+PuYxz2Zdas
z5bWbD2HA85GBNScgNcxFA3X76ON3400fxvNoDwVv65IGY2k99nqyrq0NosJlfBf
jpVxPn0zU6/zvA7ojcUnnRi+c6goGCBD2XICgxxiFYlItHftqXUKgzyFnZ54QOjf
G6lTtj8qwR6Xzw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 17:10:22 2025 by rpki-client