Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File:                     BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier:          PBQjTLXLXzrUliu/EqIgZO/uyGukm3Ncz4nUQY9Oa8U=
Subject key identifier:   57:7A:86:23:06:CE:62:0D:03:D4:AE:67:1F:3F:89:A7:30:0E:62:BD
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer:       /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial:       0198D698174F0428276EBE26D8C3E5917167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number:          1568
Signing time:             Sat 23 Aug 2025 11:02:28 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:28 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:28 +0000
Files and hashes:         1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: IScv8Pcx0NMS+YEfNGdpZysaFCx8HqzrAc9SMlkMZ8Q=)
                          2: dPa9U6HWifFU_Cos6EbPpdfP3tk.roa (hash: 3jOPrvgsW1hyX1vCwFVn+4LuXyROUmkvR9VpXoAHZWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:02:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:17:4f:04:28:27:6e:be:26:d8:c3:e5:91:71:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
        Validity
            Not Before: Aug 23 11:02:28 2025 GMT
            Not After : Aug 24 11:02:28 2025 GMT
        Subject: CN=577a862306ce620d03d4ae671f3f89a7300e62bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:46:73:24:e7:19:6e:3a:63:17:b3:7a:72:
                    04:2e:1b:f4:f5:94:b8:ba:0d:5a:1a:72:9a:db:ac:
                    de:e3:19:e0:29:87:84:e8:88:13:85:48:1a:76:d7:
                    0b:51:ad:e2:a5:4a:62:71:22:40:5e:00:4b:15:41:
                    a7:f1:b6:2a:79:d3:64:39:92:0c:c4:61:ab:2b:04:
                    e5:4f:23:d1:b6:0e:e6:4c:78:f6:e7:ff:8e:8c:a3:
                    c1:12:13:f3:f1:3f:f9:de:f4:15:cf:e7:2a:d5:47:
                    75:b8:88:67:56:53:ab:0f:40:28:2b:c5:cb:69:95:
                    b7:e4:9c:fa:9e:21:57:8c:c7:39:4d:f6:99:fe:27:
                    2d:ba:31:85:81:aa:fb:ea:cb:dd:45:4f:ca:0a:45:
                    08:fa:ce:dc:72:f1:a1:e1:7c:40:d9:27:c4:49:7e:
                    01:b0:91:59:18:aa:37:e5:fc:48:98:5e:a9:f7:4b:
                    2f:77:4a:5f:2d:69:fa:fc:1f:e5:dc:e3:46:1f:7c:
                    cc:20:9f:05:0c:0f:58:27:3f:22:80:a0:be:1c:84:
                    84:3c:1e:56:14:77:83:a9:3b:fa:a1:40:57:f3:28:
                    50:ac:74:e7:91:f1:e1:cb:24:ee:89:b7:62:50:d7:
                    dd:65:35:67:4d:1d:b9:38:0a:f7:42:40:d0:81:f3:
                    47:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7A:86:23:06:CE:62:0D:03:D4:AE:67:1F:3F:89:A7:30:0E:62:BD
            X509v3 Authority Key Identifier:
                keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d1:b8:54:9a:a4:11:04:7e:a3:df:88:05:55:f1:84:44:44:
         8e:c1:e3:25:e4:55:11:e9:6c:0d:38:ea:e0:6b:c8:dd:21:d4:
         d8:cc:82:cc:60:fd:52:7f:57:25:55:ac:62:31:d2:ac:4c:d2:
         7d:59:05:0a:be:a0:30:b2:4b:19:ce:a4:30:7a:5d:2b:50:26:
         8e:db:be:93:b9:1d:d5:f3:27:94:13:c4:fa:b7:b8:da:0c:4e:
         8a:a9:cf:78:db:4b:f9:6a:1b:f7:a6:14:3e:df:0e:31:c6:07:
         9a:6e:50:c7:76:23:93:79:b0:1c:a8:0e:57:e2:43:d9:3b:81:
         b5:c1:d4:2f:5b:65:92:7e:23:56:8c:19:68:7e:0e:12:60:09:
         a0:4a:21:ac:ec:06:f2:87:fb:fc:d8:b6:b4:8c:21:36:8a:a3:
         c8:77:4e:d9:4b:de:c1:d3:e1:48:40:97:74:a9:74:8e:8e:46:
         6f:45:fb:ca:06:33:3d:52:4b:6b:94:51:17:bc:89:2d:b5:2e:
         30:cd:86:a7:50:09:43:48:3a:6c:4b:fc:8f:92:c3:0e:ff:35:
         84:67:5c:a6:67:f5:47:d8:5a:2d:2c:9c:1b:ae:ef:19:fb:4e:
         c1:53:41:92:4e:40:2a:0e:18:ad:e0:a2:82:0e:28:1f:a4:76:
         09:34:f2:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBdPBCgnbr4m2MPlkXFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTYwNGE0NTY3N2JlNzczMTM5NjlhZDE3YWVjNjljZTk3
YzQzY2UwHhcNMjUwODIzMTEwMjI4WhcNMjUwODI0MTEwMjI4WjAzMTEwLwYDVQQD
Eyg1NzdhODYyMzA2Y2U2MjBkMDNkNGFlNjcxZjNmODlhNzMwMGU2MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2dGcyTnGW46YxezenIELhv09ZS4
ug1aGnKa26ze4xngKYeE6IgThUgadtcLUa3ipUpicSJAXgBLFUGn8bYqedNkOZIM
xGGrKwTlTyPRtg7mTHj25/+OjKPBEhPz8T/53vQVz+cq1Ud1uIhnVlOrD0AoK8XL
aZW35Jz6niFXjMc5TfaZ/ictujGFgar76svdRU/KCkUI+s7ccvGh4XxA2SfESX4B
sJFZGKo35fxImF6p90svd0pfLWn6/B/l3ONGH3zMIJ8FDA9YJz8igKC+HISEPB5W
FHeDqTv6oUBX8yhQrHTnkfHhyyTuibdiUNfdZTVnTR25OAr3QkDQgfNHtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFd6hiMGzmINA9SuZx8/iacwDmK9MB8GA1UdIwQY
MBaAFATmBKRWd753MTlprReuxpzpfEPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2Qt
NTJhN2I5MjViMjI0LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iNDI5YWEtMDQ2MS00MTM2LTkwY2QtNTJhN2I5MjViMjI0
LzEvQk9ZRXBGWjN2bmN4T1dtdEY2N0duT2w4UTg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNG4VJqk
EQR+o9+IBVXxhEREjsHjJeRVEelsDTjq4GvI3SHU2MyCzGD9Un9XJVWsYjHSrEzS
fVkFCr6gMLJLGc6kMHpdK1Amjtu+k7kd1fMnlBPE+re42gxOiqnPeNtL+Wob96YU
Pt8OMcYHmm5Qx3Yjk3mwHKgOV+JD2TuBtcHUL1tlkn4jVowZaH4OEmAJoEohrOwG
8of7/Ni2tIwhNoqjyHdO2UvewdPhSECXdKl0jo5Gb0X7ygYzPVJLa5RRF7yJLbUu
MM2Gp1AJQ0g6bEv8j5LDDv81hGdcpmf1R9haLSycG67vGftOwVNBkk5AKg4YreCi
gg4oH6R2CTTy1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:38:41 2025 by rpki-client