Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
File:                     bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft (raw, json)
Hash identifier:          jQQ3ehOxwgQR4yuQh7j57bawp5g/KGefWD85hTGy10I=
Subject key identifier:   5C:0C:EA:BB:A4:46:38:11:B8:A9:59:49:85:A4:D9:C4:E8:4B:CB:62
Authority key identifier: 6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66
Certificate issuer:       /CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
Certificate serial:       0196B85A43B101C0F0FDCFD86046D75694E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
Manifest number:          14E3
Signing time:             Sat 10 May 2025 04:00:45 +0000
Manifest this update:     Sat 10 May 2025 04:00:45 +0000
Manifest next update:     Sun 11 May 2025 04:00:45 +0000
Files and hashes:         1: bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl (hash: HcMVVQah6wA2y4j06O/CQJ1E7BSZqzFHU8MK4hdNWks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b8:5a:43:b1:01:c0:f0:fd:cf:d8:60:46:d7:56:94:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e99cccd6f0ff26de8ed3936f4a64bee98d9dc66
        Validity
            Not Before: May 10 04:00:45 2025 GMT
            Not After : May 11 04:00:45 2025 GMT
        Subject: CN=5c0ceabba4463811b8a9594985a4d9c4e84bcb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:73:98:ba:31:e1:bd:7e:d2:ed:83:0e:cc:
                    ea:8a:d8:b0:77:51:45:9f:07:49:3f:65:e8:80:21:
                    cd:50:4c:3f:10:ed:78:d8:74:49:70:1c:30:8a:92:
                    9d:f6:32:52:09:40:68:b5:71:8a:22:03:49:1a:f7:
                    37:58:25:4e:6a:6d:dd:b2:ed:32:ec:4e:a5:fa:a7:
                    3a:d0:8f:e4:6c:e7:06:fa:7d:77:0b:e1:73:9a:27:
                    5d:cd:8d:7c:ff:30:07:0c:54:43:89:75:ff:95:11:
                    8c:8c:11:d1:a0:a2:c6:8a:31:4d:53:a5:ca:8b:aa:
                    e5:5a:81:f7:7e:15:52:26:a9:51:49:8c:2a:0d:2e:
                    c7:3b:01:2f:52:36:0f:0a:50:6e:26:d9:67:d0:eb:
                    7f:49:73:b2:d7:02:82:e9:17:a8:e3:c9:0b:90:16:
                    c8:9a:4f:7a:5d:6c:90:0c:02:da:7d:0f:4d:25:ed:
                    6f:e7:9d:c5:34:cf:98:34:9b:d3:b9:7d:fb:20:13:
                    1a:0b:d8:22:98:05:38:83:7e:0b:45:aa:8c:85:5d:
                    f6:06:e8:07:7c:e5:2a:7e:cf:16:44:55:fc:9a:55:
                    d4:d5:85:5b:fe:1d:49:d3:c1:8c:9f:ae:e8:23:68:
                    9f:a6:7e:14:f7:56:f2:b0:01:a3:39:a1:97:66:bf:
                    8d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:EA:BB:A4:46:38:11:B8:A9:59:49:85:A4:D9:C4:E8:4B:CB:62
            X509v3 Authority Key Identifier:
                keyid:6E:99:CC:CD:6F:0F:F2:6D:E8:ED:39:36:F4:A6:4B:EE:98:D9:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0be81a-a49a-4682-80ee-e7f0b789bc73/1/bpnMzW8P8m3o7Tk29KZL7pjZ3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:63:32:e6:57:64:bf:e4:62:3c:8d:57:8e:6d:88:5d:03:1e:
         91:fe:bd:73:57:0e:b8:62:cc:43:92:b6:7e:5d:46:03:58:fd:
         f1:80:01:d3:a8:2e:f4:6a:eb:22:51:ac:68:8d:e4:12:52:2e:
         5b:9a:75:63:28:b6:f7:96:f7:82:a9:52:99:45:05:85:4f:2c:
         7a:9a:75:00:94:ab:ca:2e:e0:0e:7c:51:75:ac:0d:08:50:de:
         0b:44:cf:bc:a9:f5:99:42:50:44:ee:7c:86:f5:e8:22:10:25:
         c9:78:98:5b:cc:2b:e3:12:92:8c:3c:f9:ff:66:57:5b:5d:75:
         df:82:72:01:3e:c1:7b:3e:f7:8a:fa:1a:fd:c2:9c:31:ad:87:
         fc:75:c0:2d:b2:ef:54:e9:d7:34:3b:7f:34:24:e4:88:e9:23:
         e8:a8:ef:f3:42:f3:c7:df:ba:9a:41:2b:86:77:0f:d8:25:5c:
         31:29:d0:7b:80:f8:dd:40:4f:74:6b:f1:94:43:08:ba:75:dd:
         c4:75:1f:6e:6d:48:09:7b:3e:be:05:d0:2d:38:94:d9:f1:f6:
         8f:56:4f:42:a5:45:0a:3f:69:e4:1a:14:bb:bd:4c:5f:16:b8:
         18:5c:d2:ac:95:bf:89:f8:ae:1e:c7:0b:04:bc:4a:84:7b:bc:
         6f:62:94:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4WkOxAcDw/c/YYEbXVpTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOTljY2NkNmYwZmYyNmRlOGVkMzkzNmY0YTY0YmVlOThk
OWRjNjYwHhcNMjUwNTEwMDQwMDQ1WhcNMjUwNTExMDQwMDQ1WjAzMTEwLwYDVQQD
Eyg1YzBjZWFiYmE0NDYzODExYjhhOTU5NDk4NWE0ZDljNGU4NGJjYjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJzmLox4b1+0u2DDszqitiwd1FF
nwdJP2XogCHNUEw/EO142HRJcBwwipKd9jJSCUBotXGKIgNJGvc3WCVOam3dsu0y
7E6l+qc60I/kbOcG+n13C+FzmiddzY18/zAHDFRDiXX/lRGMjBHRoKLGijFNU6XK
i6rlWoH3fhVSJqlRSYwqDS7HOwEvUjYPClBuJtln0Ot/SXOy1wKC6Reo48kLkBbI
mk96XWyQDALafQ9NJe1v553FNM+YNJvTuX37IBMaC9gimAU4g34LRaqMhV32BugH
fOUqfs8WRFX8mlXU1YVb/h1J08GMn67oI2ifpn4U91bysAGjOaGXZr+NeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwM6rukRjgRuKlZSYWk2cToS8tiMB8GA1UdIwQY
MBaAFG6ZzM1vD/Jt6O05NvSmS+6Y2dxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUt
ZTdmMGI3ODliYzczLzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wYmU4MWEtYTQ5YS00NjgyLTgwZWUtZTdmMGI3ODliYzcz
LzEvYnBuTXpXOFA4bTNvN1RrMjlLWkw3cGpaM0dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWMy5ldk
v+RiPI1Xjm2IXQMekf69c1cOuGLMQ5K2fl1GA1j98YAB06gu9GrrIlGsaI3kElIu
W5p1Yyi295b3gqlSmUUFhU8sepp1AJSryi7gDnxRdawNCFDeC0TPvKn1mUJQRO58
hvXoIhAlyXiYW8wr4xKSjDz5/2ZXW11134JyAT7Bez73ivoa/cKcMa2H/HXALbLv
VOnXNDt/NCTkiOkj6Kjv80Lzx9+6mkErhncP2CVcMSnQe4D43UBPdGvxlEMIunXd
xHUfbm1ICXs+vgXQLTiU2fH2j1ZPQqVFCj9p5BoUu71MXxa4GFzSrJW/ifiuHscL
BLxKhHu8b2KUkg==
-----END CERTIFICATE-----
Generated at Sat May 10 11:34:27 2025 by rpki-client