Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier:          5tW4KR1Yi14yFMpjvv2UPFfa8uKmUETlXHO1JkX9Lu0=
Subject key identifier:   9C:B8:F4:63:31:07:95:5F:21:2A:E2:68:86:5C:9B:48:36:F2:ED:2A
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer:       /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial:       0197B70F48D408C038BA33799424D7F41BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number:          12ED
Signing time:             Sat 28 Jun 2025 15:02:01 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:01 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:01 +0000
Files and hashes:         1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: y2jNH5EMjjPUZpBsbQTjrpCFf6O0yD1ArJBaUhB3arU=)
                          2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:48:d4:08:c0:38:ba:33:79:94:24:d7:f4:1b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Validity
            Not Before: Jun 28 15:02:01 2025 GMT
            Not After : Jun 29 15:02:01 2025 GMT
        Subject: CN=9cb8f4633107955f212ae268865c9b4836f2ed2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e6:ec:97:31:0e:4b:c4:1e:ac:fc:54:a6:54:
                    4a:b9:6b:cf:63:24:cb:a2:03:86:d0:5f:a9:b5:a1:
                    20:63:41:d2:6c:96:f4:24:0c:b2:69:2b:57:3c:86:
                    d8:06:f5:fd:97:0b:61:d2:ca:03:ee:79:a3:07:2b:
                    69:92:39:e8:eb:a4:6b:68:bf:98:a6:7a:96:30:ec:
                    04:17:34:f2:61:f9:74:e5:55:87:4a:e6:f0:38:2c:
                    d6:48:55:b8:ab:fd:81:5c:31:dc:16:a6:c3:9e:c9:
                    cd:81:63:4d:87:3f:1c:c2:14:f4:87:d7:7a:9c:89:
                    0e:99:16:67:3f:90:98:eb:2d:46:3d:9e:ce:62:07:
                    61:eb:9a:ea:01:24:65:5c:f3:69:63:f5:ba:6b:2c:
                    73:58:14:de:51:db:c0:c5:25:a1:4b:ba:a2:5f:e1:
                    b9:e8:b7:6c:15:91:12:9e:fd:af:8f:db:23:b4:3e:
                    09:7b:3a:35:09:83:a7:fc:f2:95:9c:46:d0:91:5b:
                    dd:a0:5c:fd:e6:86:55:d1:d6:62:de:e0:e7:ea:e6:
                    01:7d:34:66:aa:5f:e1:06:cf:e3:ea:0f:23:1d:ef:
                    63:d8:0b:37:89:94:b5:e3:ff:97:df:23:bc:de:9c:
                    7c:5e:7f:fb:b0:ea:a3:30:b4:33:89:c4:bf:f3:3d:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B8:F4:63:31:07:95:5F:21:2A:E2:68:86:5C:9B:48:36:F2:ED:2A
            X509v3 Authority Key Identifier:
                keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:fd:95:e5:06:3c:8a:dd:78:86:df:a6:54:0d:cf:b6:e1:
         a1:ea:82:eb:70:42:b0:86:09:14:37:8e:d3:30:d7:ef:9b:0c:
         ec:17:5a:d1:ac:c6:3e:f2:bf:f6:7d:97:41:bd:62:3e:7f:05:
         c1:13:19:94:8d:67:46:63:92:49:82:3a:e3:82:c2:28:5b:af:
         f3:80:46:84:04:47:75:93:66:4c:fe:b2:24:89:8e:9e:15:f4:
         ed:e3:f1:dc:6f:7b:db:11:25:1d:50:12:90:99:fd:3d:7f:5f:
         47:66:15:0a:96:43:d4:54:96:37:d3:63:27:f6:5d:0a:f5:5e:
         ea:57:80:e0:6f:cc:d8:3c:b6:38:b3:be:41:6a:77:95:17:4d:
         c2:f9:82:42:d0:c7:4c:1c:ee:71:d1:88:5d:21:35:f6:85:24:
         31:a1:cc:9f:c7:d2:79:c4:5f:61:ca:a7:02:1d:8b:a1:39:27:
         c8:98:f2:a8:bd:e0:2a:03:67:7d:f2:81:46:17:a2:6e:03:31:
         79:27:90:71:25:d6:29:f1:f9:83:83:75:88:6d:55:b8:c0:dc:
         4c:eb:8f:8c:bb:ba:46:62:3d:62:4a:cf:21:a6:3f:32:1a:1f:
         70:65:1c:82:74:17:6f:00:57:e2:58:23:23:03:74:c5:fa:b2:
         00:5b:03:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:14 2025 by rpki-client