Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File:                     BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier:          c+QkwpZsIB+V4tckwnCcxtI4Y2xh0wFUEq8WeLNRIqE=
Subject key identifier:   C7:58:12:3C:F4:54:C3:8D:FA:19:8D:BE:CA:F5:81:D4:E1:C7:50:25
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer:       /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial:       0197B70F23C316861D56F5AAE71D5EBF1C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 15:01:51 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:51 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:51 +0000
Files and hashes:         1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: DSIq4Wk/xVvRXeEESuPNMoPQnD0NkPGDo1VU6W5A0pY=)
                          2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
                          3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:23:c3:16:86:1d:56:f5:aa:e7:1d:5e:bf:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
        Validity
            Not Before: Jun 28 15:01:51 2025 GMT
            Not After : Jun 29 15:01:51 2025 GMT
        Subject: CN=c758123cf454c38dfa198dbecaf581d4e1c75025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:b4:50:af:b2:7c:d8:42:3c:12:e3:3f:ec:
                    2f:e9:aa:62:e2:fc:58:b0:dc:10:42:2a:b6:4a:30:
                    3f:27:ca:dd:ac:f1:14:4a:fd:58:7b:b2:cd:29:3d:
                    a4:c0:6d:4d:03:e2:10:23:44:bf:e7:80:df:25:9e:
                    de:93:6c:78:5b:b7:26:40:75:d2:0d:87:ee:3c:5f:
                    4a:10:20:2a:1b:30:eb:ca:ae:c1:77:f7:eb:ea:e2:
                    9a:ac:af:84:88:be:d9:c0:a4:57:fc:62:8b:f0:e6:
                    1e:4d:70:ea:e8:21:ab:41:aa:59:04:3f:b4:9d:e6:
                    e0:42:f0:6f:bd:bd:4a:fa:be:52:a4:6c:62:02:9c:
                    1c:67:bb:10:6e:44:29:50:ec:34:99:c4:b9:6e:19:
                    f6:72:b3:84:00:c2:55:d8:a3:59:75:97:8e:ed:4b:
                    62:20:ca:7b:2f:37:9f:c9:14:d7:d8:7d:fd:15:d0:
                    dc:e4:63:aa:d5:37:71:b6:82:c9:6a:49:38:cf:27:
                    8f:ca:29:95:ca:8d:96:f4:2d:12:84:ba:25:6f:52:
                    36:79:39:54:9a:48:22:e0:1c:ac:85:ea:1e:93:7f:
                    68:5e:eb:f0:35:69:48:a7:33:b0:93:f2:40:b7:4a:
                    27:0e:84:01:18:3c:46:08:ac:1a:b7:8c:c5:36:ec:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:58:12:3C:F4:54:C3:8D:FA:19:8D:BE:CA:F5:81:D4:E1:C7:50:25
            X509v3 Authority Key Identifier:
                keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f8:e1:34:c5:88:57:9c:87:b1:84:80:f0:8c:e4:0e:a1:3d:
         4c:34:7d:5a:c3:45:42:f5:a3:16:79:54:b3:44:25:c9:9d:ef:
         4b:6e:3f:61:7f:c5:0c:75:18:04:f1:aa:29:d0:6f:9a:45:83:
         a5:83:39:b7:59:f3:2d:dd:02:5e:72:49:ba:57:25:f5:43:9d:
         32:d6:c2:fa:58:20:24:01:69:22:fe:9d:92:6f:07:c1:e8:2a:
         a1:94:19:81:d1:a3:98:07:38:53:bc:00:a0:46:fc:98:2d:2d:
         65:44:04:83:42:8a:93:c3:6b:23:e8:1c:9f:af:41:52:0f:3f:
         75:0d:76:79:57:45:e7:81:fe:c5:fd:1e:16:39:35:ca:0f:3b:
         2a:3e:63:e2:fa:12:50:6f:d7:25:7b:d5:8a:37:70:9b:02:4e:
         ae:e1:69:fd:95:df:92:7e:24:c2:97:54:d7:b6:a7:0a:f6:d5:
         96:b0:63:d3:22:53:3e:c7:84:31:43:bb:99:07:12:ad:13:37:
         5f:7e:90:94:39:98:89:4a:c9:8c:78:9b:a5:48:cc:21:1e:bf:
         1e:08:d4:7f:17:52:73:d9:c1:e8:ed:a0:3d:d6:54:70:57:69:
         c9:a7:9c:85:b0:4b:a6:04:9a:7a:94:1b:92:ca:a3:13:78:6c:
         a0:c7:ca:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DyPDFoYdVvWq5x1evxwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNkZTMxOWEzZGNhMmNmNjc0NGQyODgxY2E5MWI4M2Ri
OWJkZWEwHhcNMjUwNjI4MTUwMTUxWhcNMjUwNjI5MTUwMTUxWjAzMTEwLwYDVQQD
EyhjNzU4MTIzY2Y0NTRjMzhkZmExOThkYmVjYWY1ODFkNGUxYzc1MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Hm0UK+yfNhCPBLjP+wv6api4vxY
sNwQQiq2SjA/J8rdrPEUSv1Ye7LNKT2kwG1NA+IQI0S/54DfJZ7ek2x4W7cmQHXS
DYfuPF9KECAqGzDryq7Bd/fr6uKarK+EiL7ZwKRX/GKL8OYeTXDq6CGrQapZBD+0
nebgQvBvvb1K+r5SpGxiApwcZ7sQbkQpUOw0mcS5bhn2crOEAMJV2KNZdZeO7Uti
IMp7LzefyRTX2H39FdDc5GOq1TdxtoLJakk4zyePyimVyo2W9C0ShLolb1I2eTlU
mkgi4Bysheoek39oXuvwNWlIpzOwk/JAt0onDoQBGDxGCKwat4zFNuxZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdYEjz0VMON+hmNvsr1gdThx1AlMB8GA1UdIwQY
MBaAFAW83jGaPcos9nRNKIHKkbg9ub3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMt
Njg2N2M0YWUzMTYxLzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9lZDI4ZDUtNzhkMy00NWUyLWE3ZDMtNjg2N2M0YWUzMTYx
LzEvQmJ6ZU1abzl5aXoyZEUwb2djcVJ1RDI1dmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfjhNMWI
V5yHsYSA8IzkDqE9TDR9WsNFQvWjFnlUs0QlyZ3vS24/YX/FDHUYBPGqKdBvmkWD
pYM5t1nzLd0CXnJJulcl9UOdMtbC+lggJAFpIv6dkm8HwegqoZQZgdGjmAc4U7wA
oEb8mC0tZUQEg0KKk8NrI+gcn69BUg8/dQ12eVdF54H+xf0eFjk1yg87Kj5j4voS
UG/XJXvVijdwmwJOruFp/ZXfkn4kwpdU17anCvbVlrBj0yJTPseEMUO7mQcSrRM3
X36QlDmYiUrJjHibpUjMIR6/HgjUfxdSc9nB6O2gPdZUcFdpyaechbBLpgSaepQb
ksqjE3hsoMfKPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:26 2025 by rpki-client