Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
File:                     BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json)
Hash identifier:          cPHywdISn6vHxxPw6NVfGuwhohTxfarNoeFfBJCZ7MI=
Subject key identifier:   24:A8:68:AC:E1:10:01:E1:6F:83:7B:71:27:6B:4D:B0:26:BF:9D:3F
Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71
Certificate issuer:       /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
Certificate serial:       0197B74542B14C214315B55F455C2AC63043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
Manifest number:          0B78
Signing time:             Sat 28 Jun 2025 16:00:58 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:58 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:58 +0000
Files and hashes:         1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: 6Owfi/W0Lq24/hLQkmQd24zEMaMH/nM/nRf6c7yTiEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:42:b1:4c:21:43:15:b5:5f:45:5c:2a:c6:30:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71
        Validity
            Not Before: Jun 28 16:00:58 2025 GMT
            Not After : Jun 29 16:00:58 2025 GMT
        Subject: CN=24a868ace11001e16f837b71276b4db026bf9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a1:60:56:80:4e:a2:43:09:0b:9e:ce:df:eb:
                    79:b1:56:75:36:35:be:1c:62:3d:65:91:12:8d:13:
                    b8:ec:00:32:a8:e6:f9:a1:ad:77:95:1d:a0:0f:cb:
                    be:16:fe:4e:cb:49:93:06:d8:b6:67:4c:04:67:99:
                    7a:9f:fb:5c:ed:67:73:04:ee:28:59:45:20:39:8a:
                    7c:42:f5:52:27:71:8d:4d:1b:a7:ca:9c:5c:4d:b3:
                    2a:a4:34:ac:2b:f1:bd:99:0d:b4:b2:92:27:d2:60:
                    9f:de:a0:48:19:c5:08:a9:80:03:ed:b8:16:88:b7:
                    ef:58:e7:c6:26:f3:74:2d:b9:6b:68:fd:9d:fa:65:
                    b0:99:47:65:27:74:a2:50:35:ba:da:19:d1:6c:d5:
                    60:c3:86:88:86:91:78:5e:66:ff:26:9a:f1:0e:79:
                    b2:60:ff:28:39:fb:a3:7a:5b:83:95:bb:15:a1:0d:
                    7f:c6:ac:ac:f1:72:f8:bd:e2:82:6f:35:51:3f:b8:
                    f6:9a:6a:1a:c4:cd:43:e3:c7:05:04:63:d4:e7:1b:
                    1d:3f:41:15:4f:c7:21:17:f2:d5:3f:1b:ef:2e:07:
                    8a:11:f1:9f:6a:0c:76:0a:1b:b4:51:98:b8:f3:72:
                    ad:3a:4d:2d:2f:81:0b:67:8c:8c:98:4e:fe:5a:23:
                    0d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:68:AC:E1:10:01:E1:6F:83:7B:71:27:6B:4D:B0:26:BF:9D:3F
            X509v3 Authority Key Identifier:
                keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:03:e0:2d:47:01:71:29:62:7f:12:27:83:e4:73:26:20:
         40:ff:bb:85:9d:1a:26:8c:b4:14:4c:3b:c4:7b:3f:a9:44:80:
         1e:30:8b:1c:0b:83:96:3c:a8:52:6e:df:bb:5e:50:25:68:d9:
         05:34:99:0f:fa:5f:08:c4:a3:66:5d:3c:f9:2c:af:62:09:af:
         05:a2:28:dd:49:f4:0b:8b:70:63:a5:2f:c0:ef:a3:ac:9a:3e:
         ab:63:aa:71:ed:69:15:0d:c6:1b:7a:03:b4:9b:19:23:24:e2:
         3e:66:b7:0f:81:44:29:a3:33:7c:d2:46:b0:2d:82:5b:a8:01:
         59:58:89:2f:18:dc:d3:9a:5a:b7:4e:ff:e3:3b:f5:76:94:e2:
         22:51:96:c6:28:1c:56:8e:79:86:ca:d0:a7:cd:ae:e5:00:a2:
         3d:89:81:cc:5b:e8:51:c0:bb:41:ba:3c:1b:64:6b:ba:af:b0:
         e7:d1:04:56:7e:3f:0b:4e:b9:04:fe:bd:8e:70:28:d9:1d:a1:
         8b:9e:10:51:4a:cb:3b:e1:af:b6:4a:f1:3a:fc:90:9d:26:e2:
         b7:42:ac:4d:0a:95:09:75:e8:a6:80:3c:87:e1:95:48:ef:02:
         97:02:53:fe:ae:56:25:29:5f:3a:8f:48:83:2c:ff:dd:ca:bb:
         21:81:a1:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUKxTCFDFbVfRVwqxjBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm
MGNhNzEwHhcNMjUwNjI4MTYwMDU4WhcNMjUwNjI5MTYwMDU4WjAzMTEwLwYDVQQD
EygyNGE4NjhhY2UxMTAwMWUxNmY4MzdiNzEyNzZiNGRiMDI2YmY5ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKFgVoBOokMJC57O3+t5sVZ1NjW+
HGI9ZZESjRO47AAyqOb5oa13lR2gD8u+Fv5Oy0mTBti2Z0wEZ5l6n/tc7WdzBO4o
WUUgOYp8QvVSJ3GNTRunypxcTbMqpDSsK/G9mQ20spIn0mCf3qBIGcUIqYAD7bgW
iLfvWOfGJvN0LblraP2d+mWwmUdlJ3SiUDW62hnRbNVgw4aIhpF4Xmb/JprxDnmy
YP8oOfujeluDlbsVoQ1/xqys8XL4veKCbzVRP7j2mmoaxM1D48cFBGPU5xsdP0EV
T8chF/LVPxvvLgeKEfGfagx2Chu0UZi483KtOk0tL4ELZ4yMmE7+WiMN1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSoaKzhEAHhb4N7cSdrTbAmv50/MB8GA1UdIwQY
MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt
ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw
LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADkED4C1H
AXEpYn8SJ4PkcyYgQP+7hZ0aJoy0FEw7xHs/qUSAHjCLHAuDljyoUm7fu15QJWjZ
BTSZD/pfCMSjZl08+SyvYgmvBaIo3Un0C4twY6UvwO+jrJo+q2Oqce1pFQ3GG3oD
tJsZIyTiPma3D4FEKaMzfNJGsC2CW6gBWViJLxjc05pat07/4zv1dpTiIlGWxigc
Vo55hsrQp82u5QCiPYmBzFvoUcC7Qbo8G2Rruq+w59EEVn4/C065BP69jnAo2R2h
i54QUUrLO+GvtkrxOvyQnSbit0KsTQqVCXXopoA8h+GVSO8ClwJT/q5WJSlfOo9I
gyz/3cq7IYGhtg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:34:51 2025 by rpki-client