Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          8V6FtTcHSs5Bv4ondgc7Bs/SPew4fBcnbGMNtgyS+cc=
Subject key identifier:   D9:06:42:22:9C:83:5C:EF:4E:43:94:67:67:FB:F2:F2:19:9A:06:AC
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       0197B6A0AE03C6C9FEE8DB37D72B0D5E9BF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          02A7
Signing time:             Sat 28 Jun 2025 13:01:12 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:12 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:12 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: JtNij/HGqLG4vYklfAveaf5gKlsH7WfTsGAfova+A+Q=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a0:ae:03:c6:c9:fe:e8:db:37:d7:2b:0d:5e:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Jun 28 13:01:12 2025 GMT
            Not After : Jun 29 13:01:12 2025 GMT
        Subject: CN=d90642229c835cef4e43946767fbf2f2199a06ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:62:2e:7f:36:4a:3c:74:f1:d8:e3:44:99:
                    eb:fd:f1:2e:ea:5d:42:23:19:49:7a:fb:3e:d4:88:
                    1b:d3:c0:86:c5:00:3c:fe:7e:9d:87:fb:ff:c2:4f:
                    6b:52:57:58:ff:21:37:3b:d2:0c:7b:d1:dd:9c:fe:
                    19:52:f6:5f:5c:32:12:09:69:72:e3:09:cb:8a:61:
                    7a:32:4b:e5:5f:5a:6f:d2:ea:e5:90:36:8a:71:99:
                    5b:35:d7:70:f8:35:95:70:09:83:73:71:bc:22:10:
                    19:e4:a5:45:0f:8d:ef:e5:e9:02:70:d8:19:71:60:
                    3f:e8:f0:e7:a4:96:3f:86:6a:09:b7:c8:a5:74:62:
                    c8:89:c1:54:9b:00:22:59:96:b9:16:9a:5a:4a:23:
                    fc:1c:4d:34:37:52:87:e7:16:a0:d5:42:33:4b:23:
                    72:ac:73:d3:16:7e:90:2e:0f:ed:85:75:7a:81:c1:
                    94:4c:c8:ee:05:68:f5:23:a2:69:7c:5e:26:b6:ef:
                    3e:c6:84:99:a2:77:b7:bd:a0:09:b2:af:69:ed:40:
                    4f:d1:d9:d2:01:c6:1d:71:6b:3c:7f:8e:1b:98:13:
                    31:ec:17:a1:58:3d:7a:13:f2:45:3b:ff:bd:36:c5:
                    4e:c0:f0:ac:e2:7e:dc:32:de:c2:af:8d:b8:19:d0:
                    5e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:06:42:22:9C:83:5C:EF:4E:43:94:67:67:FB:F2:F2:19:9A:06:AC
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:35:11:a2:06:a5:69:d5:13:ab:af:de:5d:9b:dc:a5:c1:75:
         98:c1:19:1c:9b:c5:e9:ef:11:2b:d3:8a:3c:9f:73:0f:e0:15:
         89:b9:3a:13:f4:f2:16:2e:f6:c1:91:e3:ec:2b:55:af:6a:d7:
         41:73:f9:83:1f:e9:02:1f:f6:bc:a8:82:f3:d9:dc:32:27:a1:
         9e:ab:cc:c7:8c:1b:8f:d5:94:12:0b:d0:fd:94:c6:35:66:22:
         dd:73:84:06:5b:0f:88:c1:b1:38:45:e4:8f:c7:5c:a4:7c:04:
         ec:a6:54:0f:5a:d6:22:2f:5c:2c:e1:81:79:e0:80:4b:c1:d1:
         ab:45:01:d5:78:00:f6:11:f9:03:17:52:0e:8b:27:7f:82:b0:
         d5:32:4c:f2:0a:f2:19:70:e5:7b:5e:a6:21:63:01:19:3d:1c:
         29:48:2b:25:cf:31:10:a0:d3:61:b2:28:59:2a:47:0f:81:07:
         69:7f:89:77:b5:86:31:4e:d3:4e:64:3f:be:a7:f3:76:76:0f:
         e3:6b:c3:8d:89:84:3b:4f:72:29:ee:10:3b:cb:ad:33:19:60:
         6f:9a:6e:5e:ab:f1:22:90:d1:96:3a:fc:56:d8:42:93:9a:ce:
         ba:ca:23:23:a1:92:64:d4:d5:8e:95:d1:8e:2e:b3:c1:8f:a9:
         46:39:25:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oK4Dxsn+6Ns31ysNXpv3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx
NGE1NWEwHhcNMjUwNjI4MTMwMTEyWhcNMjUwNjI5MTMwMTEyWjAzMTEwLwYDVQQD
EyhkOTA2NDIyMjljODM1Y2VmNGU0Mzk0Njc2N2ZiZjJmMjE5OWEwNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd9iLn82Sjx08djjRJnr/fEu6l1C
IxlJevs+1Igb08CGxQA8/n6dh/v/wk9rUldY/yE3O9IMe9HdnP4ZUvZfXDISCWly
4wnLimF6MkvlX1pv0urlkDaKcZlbNddw+DWVcAmDc3G8IhAZ5KVFD43v5ekCcNgZ
cWA/6PDnpJY/hmoJt8ildGLIicFUmwAiWZa5FppaSiP8HE00N1KH5xag1UIzSyNy
rHPTFn6QLg/thXV6gcGUTMjuBWj1I6JpfF4mtu8+xoSZone3vaAJsq9p7UBP0dnS
AcYdcWs8f44bmBMx7BehWD16E/JFO/+9NsVOwPCs4n7cMt7Cr424GdBe6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkGQiKcg1zvTkOUZ2f78vIZmgasMB8GA1UdIwQY
MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt
ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3
LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzURogal
adUTq6/eXZvcpcF1mMEZHJvF6e8RK9OKPJ9zD+AVibk6E/TyFi72wZHj7CtVr2rX
QXP5gx/pAh/2vKiC89ncMiehnqvMx4wbj9WUEgvQ/ZTGNWYi3XOEBlsPiMGxOEXk
j8dcpHwE7KZUD1rWIi9cLOGBeeCAS8HRq0UB1XgA9hH5AxdSDosnf4Kw1TJM8gry
GXDle16mIWMBGT0cKUgrJc8xEKDTYbIoWSpHD4EHaX+Jd7WGMU7TTmQ/vqfzdnYP
42vDjYmEO09yKe4QO8utMxlgb5puXqvxIpDRljr8VthCk5rOusojI6GSZNTVjpXR
ji6zwY+pRjklEg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:01:53 2025 by rpki-client