Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
File:                     BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft (raw, json)
Hash identifier:          BDQ/7bFdVTm3qCrOh5S9wNTQrQm2n7brnAy9SKyWVYU=
Subject key identifier:   24:26:30:86:06:9B:78:98:F6:49:AE:E2:2B:15:FE:20:71:C0:78:C7
Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39
Certificate issuer:       /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
Certificate serial:       0197B820DF4C9FC02F4CD5190F4B9865439C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
Manifest number:          12CB
Signing time:             Sat 28 Jun 2025 20:00:51 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:51 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:51 +0000
Files and hashes:         1: BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl (hash: DnS7Nd/4iVaWs4TPx6SSYnQR7t3H/TPx27YLUH2yviI=)
                          2: E8BXFCmMPxiHqsBIE2fe1Q-VAJ0.roa (hash: bCNkqefIqMAzox7Azz8+ddEpEANUZYA+NYa3IR7PwR4=)
                          3: SWJa5dsueLRnxSbfAdzIJPGv5bg.roa (hash: gZ5PAdWGvsSeRpcHkVwguzrdbgVOBUIorql6INPH73A=)
                          4: YNQ4ZzGibrxUxlrkmprAIR1YVl8.roa (hash: V1uF6OdTmR62xjW831R1fzO5FgyYWpUvIlZXAdhlBYk=)
                          5: Z073Xoz6NNMLozbzx4BYZKRbE_Y.roa (hash: GgoadE+XPM8kCbOw8AtDPP7sSAXbl83gRja3FPoUrsA=)
                          6: jCB9u3qv4BG9cI-rqtdTgsQeqrs.roa (hash: 1+L43+VxrVB/KEJhsF1U3J4F2Ua4lSa+maBf4O2HDZ4=)
                          7: zJzkzhEHh5iCKShvFrkOwPKYR2U.roa (hash: l2tLYSV2hK6uaLIrHqnfajZM8CBVZInCAsyfW/dDlC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:df:4c:9f:c0:2f:4c:d5:19:0f:4b:98:65:43:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839
        Validity
            Not Before: Jun 28 20:00:51 2025 GMT
            Not After : Jun 29 20:00:51 2025 GMT
        Subject: CN=24263086069b7898f649aee22b15fe2071c078c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:bb:86:54:15:4c:0b:9e:76:2d:81:fb:13:
                    94:6d:f4:ba:ac:7b:70:4f:a7:e0:06:cf:92:10:b4:
                    3a:cd:db:de:d4:97:6a:39:ae:69:94:94:25:a7:f9:
                    7e:ff:c8:89:23:94:5c:8e:77:e0:2d:89:3c:ee:aa:
                    46:7e:c7:03:19:1d:fc:35:ca:76:c6:54:e0:80:e0:
                    52:23:26:99:dc:7e:f3:52:33:69:2d:04:e2:68:cc:
                    c2:ef:03:b5:95:32:eb:c3:94:1a:7e:19:d8:5e:aa:
                    9a:68:26:cf:40:03:5b:9b:87:b7:46:9b:7d:ba:b2:
                    bc:c7:c4:48:b5:19:9a:44:b5:b4:14:66:87:bb:3b:
                    53:7f:a1:4d:09:4a:a2:34:76:52:e5:a2:bc:fb:78:
                    b9:41:09:3f:26:1a:da:1e:15:53:bc:12:1b:8c:94:
                    a9:db:ce:48:91:95:93:92:ec:8d:d7:68:5b:46:21:
                    98:7c:fe:35:d5:7b:ea:8a:43:27:fb:d0:da:a0:86:
                    47:d4:21:76:81:80:73:fe:d3:7c:6a:6d:8f:0c:ba:
                    45:c5:8b:aa:4c:b0:8f:27:97:cc:49:af:9a:69:41:
                    39:f8:53:b0:ff:13:dc:20:b0:42:48:e1:8f:ed:4d:
                    14:8f:ce:3e:51:36:71:4d:5b:a3:71:00:ae:95:03:
                    b0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:26:30:86:06:9B:78:98:F6:49:AE:E2:2B:15:FE:20:71:C0:78:C7
            X509v3 Authority Key Identifier:
                keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:eb:ed:e8:46:d8:80:48:02:3d:c1:16:40:e1:db:53:ec:
         28:41:00:1b:ef:86:ad:f1:34:a9:68:59:d0:1f:9a:7d:e3:d3:
         f2:53:cb:86:ce:d6:0f:b2:e3:c4:8f:33:19:17:25:25:96:38:
         4e:32:3f:19:9e:fb:f1:3c:fb:03:e1:3c:0a:38:7a:1a:6c:95:
         01:2f:30:e9:09:69:8d:8a:54:9e:0c:48:81:5d:7d:92:0e:30:
         78:a3:5a:e7:24:97:11:36:71:bc:5d:6a:05:24:d9:ac:0a:19:
         f2:3a:02:a0:5a:bb:2a:a8:4c:95:3b:a1:93:45:b4:b7:49:85:
         83:a6:36:c7:ab:7f:09:7d:8e:ed:33:d0:f5:ec:65:d2:99:7d:
         c4:c5:4b:01:37:d9:31:ce:28:f9:24:3b:92:9c:86:b4:35:2d:
         d3:79:fc:2e:f9:7c:a2:72:47:9a:a0:b9:04:40:c6:76:db:09:
         74:52:cd:cc:8e:8a:0e:6f:77:5c:cc:a1:4e:4b:29:3e:22:5b:
         fd:c7:af:81:87:87:49:c9:86:8c:a9:d7:c8:8e:b3:08:a6:aa:
         32:57:6e:e7:c2:b4:16:48:06:b9:00:47:3c:aa:10:18:68:02:
         4f:fe:fa:09:c4:ab:bf:23:4d:33:97:d8:8e:e9:41:95:f9:c6:
         91:7e:14:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IN9Mn8AvTNUZD0uYZUOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0
N2U4MzkwHhcNMjUwNjI4MjAwMDUxWhcNMjUwNjI5MjAwMDUxWjAzMTEwLwYDVQQD
EygyNDI2MzA4NjA2OWI3ODk4ZjY0OWFlZTIyYjE1ZmUyMDcxYzA3OGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7u7hlQVTAuedi2B+xOUbfS6rHtw
T6fgBs+SELQ6zdve1JdqOa5plJQlp/l+/8iJI5RcjnfgLYk87qpGfscDGR38Ncp2
xlTggOBSIyaZ3H7zUjNpLQTiaMzC7wO1lTLrw5QafhnYXqqaaCbPQANbm4e3Rpt9
urK8x8RItRmaRLW0FGaHuztTf6FNCUqiNHZS5aK8+3i5QQk/JhraHhVTvBIbjJSp
285IkZWTkuyN12hbRiGYfP411XvqikMn+9DaoIZH1CF2gYBz/tN8am2PDLpFxYuq
TLCPJ5fMSa+aaUE5+FOw/xPcILBCSOGP7U0Uj84+UTZxTVujcQCulQOwyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQmMIYGm3iY9kmu4isV/iBxwHjHMB8GA1UdIwQY
MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct
NTA0YzhmYzIyMGVhLzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh
LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkHr7ehG
2IBIAj3BFkDh21PsKEEAG++GrfE0qWhZ0B+afePT8lPLhs7WD7LjxI8zGRclJZY4
TjI/GZ778Tz7A+E8Cjh6GmyVAS8w6QlpjYpUngxIgV19kg4weKNa5ySXETZxvF1q
BSTZrAoZ8joCoFq7KqhMlTuhk0W0t0mFg6Y2x6t/CX2O7TPQ9exl0pl9xMVLATfZ
Mc4o+SQ7kpyGtDUt03n8Lvl8onJHmqC5BEDGdtsJdFLNzI6KDm93XMyhTkspPiJb
/cevgYeHScmGjKnXyI6zCKaqMldu58K0FkgGuQBHPKoQGGgCT/76CcSrvyNNM5fY
julBlfnGkX4UtA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:36:01 2025 by rpki-client