Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          bC/vPhER/Hu6ksclT/XzyAEokQjRn//dsPujHfTznE4=
Subject key identifier:   88:A6:0B:A9:C1:84:09:5C:C0:E1:99:6C:25:D9:F9:7B:2E:5A:CC:D0
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       0196C5DF2471332C4C36B298B4CF0DC9E3A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          153D
Signing time:             Mon 12 May 2025 19:00:57 +0000
Manifest this update:     Mon 12 May 2025 19:00:57 +0000
Manifest next update:     Tue 13 May 2025 19:00:57 +0000
Files and hashes:         1: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: +42wobeo2GMd6NsAw1broibTmk1cFU/IHiFV5PMeUf8=)
                          3: L7e4J1RQTn0nIwk--GSUaD-UmoM.roa (hash: 2gs+pIrBMmE/Jpl0M+ftbVMtlfnyIgG+tIOj7MBw26s=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:df:24:71:33:2c:4c:36:b2:98:b4:cf:0d:c9:e3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: May 12 19:00:57 2025 GMT
            Not After : May 13 19:00:57 2025 GMT
        Subject: CN=88a60ba9c184095cc0e1996c25d9f97b2e5accd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:b7:72:1b:e0:cb:db:b5:76:ad:1b:35:9c:
                    10:48:b3:8e:eb:36:4a:dd:e1:9d:24:4d:d5:b3:5f:
                    d1:1b:73:a4:6e:44:c5:5e:a5:66:3c:6a:60:d1:95:
                    de:eb:88:dd:86:48:8c:23:d6:d9:7d:75:fe:dd:9c:
                    01:d1:4e:00:31:5d:22:32:7e:23:b2:f7:67:be:fa:
                    9f:68:50:70:d4:42:d3:8b:c5:28:c2:e5:56:12:f8:
                    97:31:65:9f:1a:7c:ff:30:2c:60:be:db:eb:50:fa:
                    1a:8c:fa:68:bc:8e:fe:ad:5c:9d:91:36:66:c3:2c:
                    fb:f6:cb:a7:60:6d:5d:bf:82:cc:70:92:91:a0:38:
                    32:f2:96:42:a1:ac:5a:c7:82:5a:30:99:0d:51:3b:
                    37:0a:b9:06:20:b1:07:49:20:92:27:b2:89:88:db:
                    a0:c3:85:6a:65:3e:31:16:c9:4b:7a:6d:0a:bf:96:
                    ca:d1:33:df:46:89:75:98:47:fa:36:eb:fe:87:f1:
                    06:5a:11:a4:cc:01:64:3b:07:39:8f:2e:87:74:48:
                    0d:63:ff:b8:06:3b:d6:92:81:48:4a:05:a3:2f:9f:
                    ee:6e:cf:18:29:ef:f0:ea:4e:25:91:a1:0e:cd:e6:
                    bc:4a:6a:af:7a:8a:2c:42:14:a2:4d:dc:7b:d1:ef:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A6:0B:A9:C1:84:09:5C:C0:E1:99:6C:25:D9:F9:7B:2E:5A:CC:D0
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:91:04:ae:e8:8f:16:3b:79:1b:fa:65:de:6d:70:70:64:d8:
         62:ff:36:2d:ba:fb:cb:d8:6d:84:d5:6e:61:ac:0a:cb:d7:31:
         03:cc:00:82:e6:7f:dd:14:df:71:ed:de:a8:19:d7:ee:02:7d:
         73:5b:73:9c:cb:91:85:a0:cd:ac:ae:31:27:9e:07:29:a0:44:
         33:db:69:b3:a2:94:c3:f3:bc:4b:8c:a4:62:f4:5f:c8:57:cd:
         ca:6d:3d:b1:b5:43:4a:5f:6c:80:ce:fc:36:46:45:18:d7:90:
         3f:79:87:80:d8:f2:0f:88:55:35:3f:c6:87:3b:57:20:ec:81:
         47:ac:2b:50:2c:da:b2:e8:0f:98:29:2c:56:d2:d4:cb:d8:c9:
         1e:d5:b4:86:60:29:50:95:40:e9:3b:6b:90:e4:28:3e:f8:85:
         3f:d2:86:48:91:22:09:f6:31:c8:52:91:ce:46:9b:f4:51:23:
         02:1b:94:4d:37:2d:1b:27:a3:81:d1:6b:09:03:cf:e1:34:58:
         d1:c9:5e:e5:09:f7:07:37:7b:fb:e9:07:2f:f3:fe:0f:36:d7:
         79:58:02:c9:7f:5c:8d:11:a8:ad:8c:58:c7:ca:4a:64:b0:b2:
         33:a2:96:3f:36:bc:e2:fc:79:a5:f0:82:c6:11:22:00:0e:c4:
         1e:2d:b9:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3yRxMyxMNrKYtM8NyeOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjUwNTEyMTkwMDU3WhcNMjUwNTEzMTkwMDU3WjAzMTEwLwYDVQQD
Eyg4OGE2MGJhOWMxODQwOTVjYzBlMTk5NmMyNWQ5Zjk3YjJlNWFjY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFu3chvgy9u1dq0bNZwQSLOO6zZK
3eGdJE3Vs1/RG3OkbkTFXqVmPGpg0ZXe64jdhkiMI9bZfXX+3ZwB0U4AMV0iMn4j
svdnvvqfaFBw1ELTi8UowuVWEviXMWWfGnz/MCxgvtvrUPoajPpovI7+rVydkTZm
wyz79sunYG1dv4LMcJKRoDgy8pZCoaxax4JaMJkNUTs3CrkGILEHSSCSJ7KJiNug
w4VqZT4xFslLem0Kv5bK0TPfRol1mEf6Nuv+h/EGWhGkzAFkOwc5jy6HdEgNY/+4
BjvWkoFISgWjL5/ubs8YKe/w6k4lkaEOzea8SmqveoosQhSiTdx70e+tJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIimC6nBhAlcwOGZbCXZ+XsuWszQMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJEEruiP
Fjt5G/pl3m1wcGTYYv82Lbr7y9hthNVuYawKy9cxA8wAguZ/3RTfce3eqBnX7gJ9
c1tznMuRhaDNrK4xJ54HKaBEM9tps6KUw/O8S4ykYvRfyFfNym09sbVDSl9sgM78
NkZFGNeQP3mHgNjyD4hVNT/GhztXIOyBR6wrUCzasugPmCksVtLUy9jJHtW0hmAp
UJVA6TtrkOQoPviFP9KGSJEiCfYxyFKRzkab9FEjAhuUTTctGyejgdFrCQPP4TRY
0cle5Qn3Bzd7++kHL/P+DzbXeVgCyX9cjRGorYxYx8pKZLCyM6KWPza84vx5pfCC
xhEiAA7EHi25nA==
-----END CERTIFICATE-----
Generated at Tue May 13 00:18:44 2025 by rpki-client