Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          mjTzTZmxbr7vdNUkpgMvv7owFI5Z7lnfXwCpOrzdzIA=
Subject key identifier:   AB:2E:2E:02:79:A3:C3:80:41:8A:AE:11:4C:E9:04:AA:6E:6D:94:41
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       0197B70F111B167F98C6B20B8FECFF8832D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          14F5
Signing time:             Sat 28 Jun 2025 15:01:47 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:47 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:47 +0000
Files and hashes:         1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: gcgY3kHyxtQsSsuuDQp/AXq0fDtFlff/0pFEx3swoSc=)
                          2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
                          3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
                          4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:11:1b:16:7f:98:c6:b2:0b:8f:ec:ff:88:32:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Jun 28 15:01:47 2025 GMT
            Not After : Jun 29 15:01:47 2025 GMT
        Subject: CN=ab2e2e0279a3c380418aae114ce904aa6e6d9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:5d:45:30:be:f6:68:35:21:fe:ab:37:92:
                    40:3f:a3:8d:16:18:70:75:26:43:86:97:79:92:de:
                    a5:3a:d0:87:ea:bf:76:75:eb:5c:83:1d:b6:3c:43:
                    d4:4a:8d:be:5c:40:a5:e7:a3:4b:c6:be:d1:a2:b9:
                    a6:28:8e:30:c8:09:c5:aa:56:7d:b5:c8:7d:ce:96:
                    f3:3e:d7:cf:bd:4d:3f:b6:06:ef:82:68:13:06:5f:
                    a9:e7:7d:43:52:dd:de:31:dc:3a:d4:cf:a8:a5:e9:
                    25:fa:4e:7f:bd:8e:df:ed:86:8c:0a:ba:74:69:e0:
                    38:ee:c7:ea:dc:07:4d:95:a2:f4:f7:87:f8:b9:b7:
                    69:49:32:e3:77:f1:c9:74:69:ba:18:d9:46:8d:37:
                    af:b9:be:15:78:e2:36:41:67:43:8b:0d:cc:20:eb:
                    96:06:68:89:bf:c4:a7:70:f0:4e:a5:c5:b6:7f:d6:
                    50:3e:24:14:18:cd:e5:52:5b:ae:07:cc:f8:90:6f:
                    6d:45:d9:96:7c:9f:cb:e3:80:64:ee:d0:a4:01:1c:
                    bc:59:ad:51:74:e8:48:9f:40:2f:e7:1c:84:30:15:
                    84:ba:6d:0f:59:66:23:fd:a0:02:14:f0:50:cc:11:
                    30:87:f8:4f:a9:0f:03:39:a1:7c:3d:86:e5:2d:8c:
                    64:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:2E:02:79:A3:C3:80:41:8A:AE:11:4C:E9:04:AA:6E:6D:94:41
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:ba:72:b8:77:d1:75:34:41:c9:12:b6:f0:a3:25:60:7c:9f:
         43:35:01:af:04:1a:43:86:c3:12:91:d7:f2:cd:01:1d:df:7a:
         b5:6b:82:37:b5:e3:9e:4d:b2:1d:74:bd:51:01:46:74:e1:8f:
         0e:16:cf:4f:e9:43:0e:11:9f:e3:9a:39:24:94:99:a8:4a:a3:
         7c:a2:dd:1c:fa:a3:cd:4f:82:ac:82:ad:7e:84:d9:5a:d9:f4:
         59:3b:1e:92:86:0b:52:4d:75:15:d5:6e:b8:a1:87:b9:60:04:
         9b:d1:3c:b2:8c:12:aa:6d:95:cb:94:ec:61:45:8b:5a:92:a1:
         00:e4:04:2e:b0:fa:2b:ac:1c:c4:ee:21:2d:b8:69:d4:c9:04:
         a5:a9:02:ca:d9:fb:ca:9e:9b:8a:b3:42:1c:33:71:24:b9:a5:
         1a:13:0a:77:9d:d5:3d:93:de:cc:2a:12:40:c9:ee:20:b6:ca:
         20:8a:74:26:bc:6a:e2:64:b8:72:9f:bf:71:b5:55:c8:25:16:
         f8:b4:0f:ba:f1:2e:49:fa:d6:77:32:5d:9f:40:d5:22:d5:5d:
         a6:3a:6b:9c:37:ce:94:c2:47:81:6c:85:c4:61:ef:29:ed:05:
         ac:9b:e1:e9:38:80:b1:a7:b1:45:46:1a:15:e4:09:65:24:c2:
         77:29:37:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DxEbFn+YxrILj+z/iDLUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjUwNjI4MTUwMTQ3WhcNMjUwNjI5MTUwMTQ3WjAzMTEwLwYDVQQD
EyhhYjJlMmUwMjc5YTNjMzgwNDE4YWFlMTE0Y2U5MDRhYTZlNmQ5NDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqq1dRTC+9mg1If6rN5JAP6ONFhhw
dSZDhpd5kt6lOtCH6r92detcgx22PEPUSo2+XECl56NLxr7RormmKI4wyAnFqlZ9
tch9zpbzPtfPvU0/tgbvgmgTBl+p531DUt3eMdw61M+opekl+k5/vY7f7YaMCrp0
aeA47sfq3AdNlaL094f4ubdpSTLjd/HJdGm6GNlGjTevub4VeOI2QWdDiw3MIOuW
BmiJv8SncPBOpcW2f9ZQPiQUGM3lUluuB8z4kG9tRdmWfJ/L44Bk7tCkARy8Wa1R
dOhIn0Av5xyEMBWEum0PWWYj/aACFPBQzBEwh/hPqQ8DOaF8PYblLYxk7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsuLgJ5o8OAQYquEUzpBKpubZRBMB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1bpyuHfR
dTRByRK28KMlYHyfQzUBrwQaQ4bDEpHX8s0BHd96tWuCN7Xjnk2yHXS9UQFGdOGP
DhbPT+lDDhGf45o5JJSZqEqjfKLdHPqjzU+CrIKtfoTZWtn0WTsekoYLUk11FdVu
uKGHuWAEm9E8sowSqm2Vy5TsYUWLWpKhAOQELrD6K6wcxO4hLbhp1MkEpakCytn7
yp6birNCHDNxJLmlGhMKd53VPZPezCoSQMnuILbKIIp0Jrxq4mS4cp+/cbVVyCUW
+LQPuvEuSfrWdzJdn0DVItVdpjprnDfOlMJHgWyFxGHvKe0FrJvh6TiAsaexRUYa
FeQJZSTCdyk3wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:43 2025 by rpki-client