Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
File:                     BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json)
Hash identifier:          cliDSOQg2n6eNU3/55UBEvcixr7A9h4xy6KNAZSeAqM=
Subject key identifier:   2E:34:1E:BA:74:04:9E:95:A3:90:45:91:82:97:4A:FA:02:BE:15:B8
Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA
Certificate issuer:       /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
Certificate serial:       0196C53A0AE56A48F22E429774FE855743C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
Manifest number:          10C9
Signing time:             Mon 12 May 2025 16:00:37 +0000
Manifest this update:     Mon 12 May 2025 16:00:37 +0000
Manifest next update:     Tue 13 May 2025 16:00:37 +0000
Files and hashes:         1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: JkB+uZaVrmF2a5eUnFC2SXoLBrlmRqbhOrcSqW+SYTs=)
                          2: e_kofoKg7y1J8uLrVIeuvY2O9Mk.roa (hash: F9D5aBOFLIrm7XWZ3/0StMK2qKNaesetbFTA4limnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:0a:e5:6a:48:f2:2e:42:97:74:fe:85:57:43:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa
        Validity
            Not Before: May 12 16:00:37 2025 GMT
            Not After : May 13 16:00:37 2025 GMT
        Subject: CN=2e341eba74049e95a390459182974afa02be15b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:8d:90:32:fe:a4:3d:02:82:a7:66:03:26:
                    29:b8:21:8b:7a:0d:da:dc:f7:ca:7e:80:5d:49:d2:
                    3a:1b:d7:fd:5c:a2:27:4a:a1:26:89:57:70:48:86:
                    be:be:f7:fc:66:8d:17:e0:6c:08:ed:6f:27:c3:18:
                    bc:30:ce:80:9e:65:0d:9c:3d:92:0a:51:f6:ab:71:
                    fb:91:18:85:51:11:7e:c7:07:88:58:36:30:c2:56:
                    17:86:30:d2:6f:d1:8b:ab:ef:2c:08:c2:03:cf:ff:
                    3a:47:8b:6b:c9:e4:73:1e:86:be:c0:ce:fb:14:65:
                    3f:bc:73:25:6b:cd:47:41:c1:2e:ba:b4:23:22:03:
                    d1:30:8c:36:1c:0d:7c:be:15:ff:bd:5b:cb:be:fd:
                    04:82:4c:c6:2b:2b:f1:7e:11:2f:72:99:2c:e0:72:
                    cc:84:75:98:06:dc:bb:b7:37:dc:01:4f:13:10:8e:
                    c5:a2:77:f1:2c:59:75:22:5b:4b:c5:0e:34:ac:ac:
                    35:83:91:78:bf:92:ad:7e:bb:da:5d:d7:44:74:4d:
                    e6:82:0e:da:16:27:21:ae:6d:8f:93:a5:30:f9:2d:
                    ca:19:21:03:e6:48:75:54:95:75:ad:34:59:c8:75:
                    2a:d2:10:24:d6:57:dd:ee:b3:a3:99:b9:0b:bf:59:
                    88:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:34:1E:BA:74:04:9E:95:A3:90:45:91:82:97:4A:FA:02:BE:15:B8
            X509v3 Authority Key Identifier:
                keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e7:71:74:b0:88:40:c4:24:c0:71:58:b9:f3:b5:97:7d:fa:
         aa:a7:d8:d3:0b:49:7e:3f:f5:47:5e:f5:38:18:4b:31:1b:41:
         70:84:96:2e:a7:6d:ba:9d:64:b6:bf:0e:b6:82:c7:a2:5c:3f:
         5d:43:b8:59:65:73:8a:84:e3:62:26:2a:b0:1a:21:b2:f9:ff:
         2f:e0:51:2a:d0:44:90:8c:55:00:d4:ed:b3:68:4f:58:97:f4:
         76:d6:06:4f:0a:fa:ab:89:e3:e2:65:e8:52:08:74:a3:c3:c2:
         7a:68:e3:65:9f:10:3a:fc:f1:02:cb:3e:52:c1:9c:b8:c7:07:
         b8:88:f2:26:be:7e:d5:6e:e4:fe:f8:53:82:ec:3e:41:8a:06:
         a4:7d:c5:f0:7c:9b:24:d1:16:80:23:f6:2c:26:b0:fb:6b:57:
         7e:9a:52:b8:6c:2a:90:2f:7b:92:1a:a8:0f:50:29:33:88:21:
         a3:6d:fa:3d:90:7f:df:8c:9e:de:a4:26:77:c3:7e:dc:42:a1:
         45:25:7a:19:5c:ff:c8:c0:68:df:df:b3:13:48:84:9b:4c:20:
         77:6d:5b:25:2d:8f:b9:0c:da:69:63:32:f9:f7:42:01:0c:25:
         9b:5e:b2:2a:b0:c5:9d:26:a7:e4:39:a0:d5:65:90:f5:c3:a4:
         45:33:58:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbFOgrlakjyLkKXdP6FV0PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy
YTJjZmEwHhcNMjUwNTEyMTYwMDM3WhcNMjUwNTEzMTYwMDM3WjAzMTEwLwYDVQQD
EygyZTM0MWViYTc0MDQ5ZTk1YTM5MDQ1OTE4Mjk3NGFmYTAyYmUxNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeKNkDL+pD0CgqdmAyYpuCGLeg3a
3PfKfoBdSdI6G9f9XKInSqEmiVdwSIa+vvf8Zo0X4GwI7W8nwxi8MM6AnmUNnD2S
ClH2q3H7kRiFURF+xweIWDYwwlYXhjDSb9GLq+8sCMIDz/86R4tryeRzHoa+wM77
FGU/vHMla81HQcEuurQjIgPRMIw2HA18vhX/vVvLvv0EgkzGKyvxfhEvcpks4HLM
hHWYBty7tzfcAU8TEI7FonfxLFl1IltLxQ40rKw1g5F4v5KtfrvaXddEdE3mgg7a
Fichrm2Pk6Uw+S3KGSED5kh1VJV1rTRZyHUq0hAk1lfd7rOjmbkLv1mIswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC40Hrp0BJ6Vo5BFkYKXSvoCvhW4MB8GA1UdIwQY
MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt
NWFlNWJjYTZmNDhjLzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj
LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZedxdLCI
QMQkwHFYufO1l336qqfY0wtJfj/1R171OBhLMRtBcISWLqdtup1ktr8OtoLHolw/
XUO4WWVzioTjYiYqsBohsvn/L+BRKtBEkIxVANTts2hPWJf0dtYGTwr6q4nj4mXo
Ugh0o8PCemjjZZ8QOvzxAss+UsGcuMcHuIjyJr5+1W7k/vhTguw+QYoGpH3F8Hyb
JNEWgCP2LCaw+2tXfppSuGwqkC97khqoD1ApM4gho236PZB/34ye3qQmd8N+3EKh
RSV6GVz/yMBo39+zE0iEm0wgd21bJS2PuQzaaWMy+fdCAQwlm16yKrDFnSan5Dmg
1WWQ9cOkRTNYxA==
-----END CERTIFICATE-----
Generated at Mon May 12 20:17:12 2025 by rpki-client