Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          tgng5f0Rl4IrVZCNSnjQCR/ox9uBpymTcVd8Qw0kOIA=
Subject key identifier:   C4:C1:8A:72:8E:B9:74:BE:8F:68:09:03:98:54:F3:E1:6D:BF:10:63
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       0198D6607C28379DEDDB0944C8AC6C972E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          14FA
Signing time:             Sat 23 Aug 2025 10:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:44 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: dZvmgAeHHs9t0ZwL9xaWl3lc8CepdCDah7MwHsxpfhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:7c:28:37:9d:ed:db:09:44:c8:ac:6c:97:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Aug 23 10:01:44 2025 GMT
            Not After : Aug 24 10:01:44 2025 GMT
        Subject: CN=c4c18a728eb974be8f6809039854f3e16dbf1063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:73:07:a5:ad:25:2e:f5:30:16:01:b7:3d:98:
                    91:b1:6d:24:83:f9:6f:74:a5:60:fd:80:c8:19:48:
                    3a:a6:a6:66:d2:95:1c:5f:81:d4:1e:43:1c:35:9e:
                    48:56:6b:96:69:ec:ce:6c:47:1a:94:d5:45:b9:8d:
                    e1:16:fb:c0:8c:ba:7f:b9:bd:21:c5:a2:17:c9:64:
                    a1:3d:df:20:91:4e:a6:a6:9a:20:86:27:a4:10:1a:
                    ae:4f:19:8f:18:27:d2:d0:38:ff:87:8f:68:46:76:
                    74:2c:f0:8d:d4:20:25:4f:68:ab:1c:ed:d6:8f:13:
                    62:3e:96:93:60:dc:8b:0d:67:27:e3:24:53:68:8b:
                    2d:49:00:f4:d6:5d:3d:35:12:30:fb:43:f8:7e:f0:
                    af:dc:78:4b:54:b9:1c:d7:0c:fb:3c:a0:98:67:d0:
                    a5:68:2b:d4:6c:09:9a:20:14:67:f0:c8:b8:31:fb:
                    14:8e:83:59:20:87:09:2a:b2:ca:51:54:e6:72:a7:
                    6c:f7:35:29:84:bb:ab:ab:7e:5b:e4:bb:66:d5:0e:
                    bf:35:73:e8:bb:65:71:83:0b:05:3a:fe:ca:4f:e6:
                    be:f9:e9:c9:5e:53:da:0f:7d:a9:27:25:ea:90:8c:
                    c2:64:52:80:67:24:b6:07:00:43:91:7e:ed:cc:f9:
                    04:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C1:8A:72:8E:B9:74:BE:8F:68:09:03:98:54:F3:E1:6D:BF:10:63
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:ba:61:63:3b:16:92:02:f9:57:36:7a:12:96:b2:ff:78:
         ff:0e:54:b6:a0:4f:65:9f:d9:e7:0b:c6:98:8f:7a:53:45:74:
         e9:31:2b:b3:60:be:4c:68:39:6d:c5:7c:04:5c:3d:37:d5:d0:
         f6:ea:b5:b8:88:1c:a2:a2:7e:ea:de:0c:39:20:fc:af:47:2b:
         81:c1:92:7f:3c:c1:2f:42:cc:3d:88:16:e0:29:ac:11:e3:45:
         aa:68:94:59:1c:e7:a8:80:cd:8d:55:02:de:c8:3e:34:d4:98:
         26:54:46:cb:01:7c:8b:8a:8c:d7:7b:d4:aa:51:7d:f0:f3:e7:
         e2:ed:b4:47:85:73:5f:52:6e:61:16:b7:6f:41:d2:fc:ec:6b:
         61:91:a1:6c:f1:65:10:eb:dc:ff:18:1e:45:70:2a:72:1f:d7:
         2d:c9:db:dd:8c:4d:0c:85:85:62:39:cb:03:2e:9f:d2:bd:a5:
         d1:9c:f2:c4:0f:13:4e:2a:58:27:3a:ba:6a:44:11:b2:19:18:
         20:26:0d:f7:1c:0d:e6:87:6c:e0:ca:58:cf:62:29:4a:0f:71:
         e5:63:74:ce:75:d8:e7:62:c8:b8:33:67:9f:fa:c8:c7:6b:34:
         a6:b0:95:60:19:3b:ba:27:13:c3:6f:9f:20:33:0f:61:63:f0:
         b3:b7:6a:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYHwoN53t2wlEyKxsly4bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzNmMDgxZTU3YmQwOWRhYmIwNmUzN2RmODU2OWViNTI0
MjBmNzYwHhcNMjUwODIzMTAwMTQ0WhcNMjUwODI0MTAwMTQ0WjAzMTEwLwYDVQQD
EyhjNGMxOGE3MjhlYjk3NGJlOGY2ODA5MDM5ODU0ZjNlMTZkYmYxMDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HMHpa0lLvUwFgG3PZiRsW0kg/lv
dKVg/YDIGUg6pqZm0pUcX4HUHkMcNZ5IVmuWaezObEcalNVFuY3hFvvAjLp/ub0h
xaIXyWShPd8gkU6mppoghiekEBquTxmPGCfS0Dj/h49oRnZ0LPCN1CAlT2irHO3W
jxNiPpaTYNyLDWcn4yRTaIstSQD01l09NRIw+0P4fvCv3HhLVLkc1wz7PKCYZ9Cl
aCvUbAmaIBRn8Mi4MfsUjoNZIIcJKrLKUVTmcqds9zUphLurq35b5Ltm1Q6/NXPo
u2VxgwsFOv7KT+a++enJXlPaD32pJyXqkIzCZFKAZyS2BwBDkX7tzPkEcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMTBinKOuXS+j2gJA5hU8+FtvxBjMB8GA1UdIwQY
MBaAFAUz8IHle9Cdq7BuN9+FaetSQg92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUt
MDYyZjJjNmEwYWIyLzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS85NzVjZWYtNDEwMy00Y2Y3LWJmZmUtMDYyZjJjNmEwYWIy
LzEvQlRQd2dlVjcwSjJyc0c0MzM0VnA2MUpDRDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinG6YWM7
FpIC+Vc2ehKWsv94/w5UtqBPZZ/Z5wvGmI96U0V06TErs2C+TGg5bcV8BFw9N9XQ
9uq1uIgcoqJ+6t4MOSD8r0crgcGSfzzBL0LMPYgW4CmsEeNFqmiUWRznqIDNjVUC
3sg+NNSYJlRGywF8i4qM13vUqlF98PPn4u20R4VzX1JuYRa3b0HS/OxrYZGhbPFl
EOvc/xgeRXAqch/XLcnb3YxNDIWFYjnLAy6f0r2l0ZzyxA8TTipYJzq6akQRshkY
ICYN9xwN5ods4MpYz2IpSg9x5WN0znXY52LIuDNnn/rIx2s0prCVYBk7uicTw2+f
IDMPYWPws7dqJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:19:05 2025 by rpki-client