Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
File:                     BozI9XorPCKZsfSCtn4V2d5DrTw.mft (raw, json)
Hash identifier:          zXKxvQgw/ea+gzM9AlinKnGjUW33KTPEY2UCZreuvR0=
Subject key identifier:   53:10:91:2E:C8:C3:7C:CE:68:08:22:9A:A6:BB:BE:EF:C8:22:67:6E
Authority key identifier: 06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C
Certificate issuer:       /CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
Certificate serial:       01976960E22AF101547CA31271EC64771AC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
Manifest number:          1303
Signing time:             Fri 13 Jun 2025 13:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:46 +0000
Files and hashes:         1: BozI9XorPCKZsfSCtn4V2d5DrTw.crl (hash: qkpOibppi/Ncl4hY02eu/YbskJcKLSaiaLFZ5QkfHFA=)
                          2: P9IjOiRib_oTzk3RFCj75_fHPso.roa (hash: zczeX9mp/ovcEZlHCQx76naAHy+fi7XPa1xXLFJeJgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:e2:2a:f1:01:54:7c:a3:12:71:ec:64:77:1a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cc8f57a2b3c2299b1f482b67e15d9de43ad3c
        Validity
            Not Before: Jun 13 13:00:46 2025 GMT
            Not After : Jun 14 13:00:46 2025 GMT
        Subject: CN=5310912ec8c37cce6808229aa6bbbeefc822676e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:53:94:d6:61:c1:e5:40:2c:c8:16:19:87:
                    04:26:86:92:c3:df:24:0d:97:56:2a:67:e1:d5:42:
                    6b:1a:7a:1b:43:a1:30:2d:e4:3a:d7:a7:95:3d:3d:
                    0a:e3:e4:b7:17:16:3c:94:f4:21:58:1a:15:d2:5a:
                    d1:4d:d4:db:73:63:1b:1d:05:f9:0b:b0:15:85:fd:
                    1a:58:cb:08:58:7b:47:13:07:7b:a5:76:7e:d3:8e:
                    e6:bb:e7:b4:86:74:38:c1:94:fa:c7:5d:67:39:f3:
                    a1:11:81:92:5f:47:77:e9:fe:e7:df:2c:f9:dd:b4:
                    46:33:10:e0:3e:47:9f:3d:f8:48:59:e5:e7:04:e0:
                    a7:b1:31:ab:7d:11:e1:be:29:98:14:41:03:6f:3b:
                    26:e5:e9:49:46:a2:02:59:00:0c:84:6b:b5:39:01:
                    14:92:85:b8:c0:85:29:a7:3b:a7:2c:b7:07:bf:4f:
                    21:96:fc:26:0c:06:66:a0:bf:be:e6:97:3e:85:55:
                    80:ca:4e:83:23:41:82:9a:d1:98:f6:7d:ff:36:f7:
                    9b:42:6f:33:0c:53:7b:d8:33:76:30:df:88:6b:c7:
                    c7:b1:b6:d5:12:4b:81:b8:e4:59:6e:96:eb:2c:ca:
                    17:1f:5f:42:fc:45:7c:e1:45:26:7c:55:f4:d4:bd:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:10:91:2E:C8:C3:7C:CE:68:08:22:9A:A6:BB:BE:EF:C8:22:67:6E
            X509v3 Authority Key Identifier:
                keyid:06:8C:C8:F5:7A:2B:3C:22:99:B1:F4:82:B6:7E:15:D9:DE:43:AD:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BozI9XorPCKZsfSCtn4V2d5DrTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dbde8c-a0fc-44d7-993b-2a28416d45b2/1/BozI9XorPCKZsfSCtn4V2d5DrTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:24:55:18:89:29:e5:b6:5b:1d:e3:a8:41:87:91:65:f1:d1:
         c5:20:6f:2f:4c:ff:44:c6:12:6d:40:6e:5d:79:ce:47:d0:82:
         6c:ee:48:72:fd:16:7f:d0:bc:71:70:8b:39:2a:16:df:c0:fc:
         54:19:a0:d0:c6:85:96:94:9b:b3:7f:52:88:de:29:a9:df:6b:
         53:1e:1b:62:94:e5:89:af:5f:dd:6e:32:9a:28:4d:71:67:41:
         f8:56:be:66:f5:6e:11:78:e5:bf:a4:1f:db:0f:9a:16:39:e4:
         01:0f:cb:cb:df:a4:00:25:17:5d:c4:0b:50:00:6f:07:2a:d3:
         09:32:c3:98:12:31:67:f4:6c:c6:8e:98:ea:14:84:72:85:5c:
         96:d4:1f:4d:4d:9e:e9:f8:0b:c0:99:ca:4b:6f:d6:01:97:84:
         25:5b:ef:e7:d1:a7:84:27:01:ad:8a:9f:e1:dc:05:49:19:4b:
         c4:da:0a:5f:ce:ec:eb:ea:b3:f1:d8:99:06:3f:8f:5a:70:48:
         da:e7:32:17:b0:0a:a8:40:4a:c5:23:73:16:60:65:f4:9e:54:
         bd:2c:cb:f6:97:29:e4:9e:d8:8d:49:6e:9a:21:f8:8a:9a:06:
         16:8a:d9:7c:75:02:58:fc:8c:59:38:87:55:7a:0e:f3:91:95:
         1e:28:fc:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYOIq8QFUfKMScexkdxrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OGNjOGY1N2EyYjNjMjI5OWIxZjQ4MmI2N2UxNWQ5ZGU0
M2FkM2MwHhcNMjUwNjEzMTMwMDQ2WhcNMjUwNjE0MTMwMDQ2WjAzMTEwLwYDVQQD
Eyg1MzEwOTEyZWM4YzM3Y2NlNjgwODIyOWFhNmJiYmVlZmM4MjI2NzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrZTlNZhweVALMgWGYcEJoaSw98k
DZdWKmfh1UJrGnobQ6EwLeQ616eVPT0K4+S3FxY8lPQhWBoV0lrRTdTbc2MbHQX5
C7AVhf0aWMsIWHtHEwd7pXZ+047mu+e0hnQ4wZT6x11nOfOhEYGSX0d36f7n3yz5
3bRGMxDgPkefPfhIWeXnBOCnsTGrfRHhvimYFEEDbzsm5elJRqICWQAMhGu1OQEU
koW4wIUppzunLLcHv08hlvwmDAZmoL++5pc+hVWAyk6DI0GCmtGY9n3/NvebQm8z
DFN72DN2MN+Ia8fHsbbVEkuBuORZbpbrLMoXH19C/EV84UUmfFX01L1IDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMQkS7Iw3zOaAgimqa7vu/IImduMB8GA1UdIwQY
MBaAFAaMyPV6KzwimbH0grZ+FdneQ608MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2It
MmEyODQxNmQ0NWIyLzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9kYmRlOGMtYTBmYy00NGQ3LTk5M2ItMmEyODQxNmQ0NWIy
LzEvQm96STlYb3JQQ0tac2ZTQ3RuNFYyZDVEclR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiRVGIkp
5bZbHeOoQYeRZfHRxSBvL0z/RMYSbUBuXXnOR9CCbO5Icv0Wf9C8cXCLOSoW38D8
VBmg0MaFlpSbs39SiN4pqd9rUx4bYpTlia9f3W4ymihNcWdB+Fa+ZvVuEXjlv6Qf
2w+aFjnkAQ/Ly9+kACUXXcQLUABvByrTCTLDmBIxZ/Rsxo6Y6hSEcoVcltQfTU2e
6fgLwJnKS2/WAZeEJVvv59GnhCcBrYqf4dwFSRlLxNoKX87s6+qz8diZBj+PWnBI
2ucyF7AKqEBKxSNzFmBl9J5UvSzL9pcp5J7YjUlumiH4ipoGForZfHUCWPyMWTiH
VXoO85GVHij8gw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:10 2025 by rpki-client