Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier:          FvlvbuIOC51Ft83Q4q2XwQwcQu23apD1TlZPYyi9Qsw=
Subject key identifier:   73:0A:D8:E3:96:8C:92:20:F1:9A:30:FA:CB:3E:5B:D1:BA:B3:64:AE
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer:       /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial:       01976DE301E8244F32815A17DDBEDBF2949D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number:          0616
Signing time:             Sat 14 Jun 2025 10:01:23 +0000
Manifest this update:     Sat 14 Jun 2025 10:01:23 +0000
Manifest next update:     Sun 15 Jun 2025 10:01:23 +0000
Files and hashes:         1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: ujLXna6hTJGp5gwyaU3eUCzmfSuFWttYa85VdMAmnpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:e3:01:e8:24:4f:32:81:5a:17:dd:be:db:f2:94:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Validity
            Not Before: Jun 14 10:01:23 2025 GMT
            Not After : Jun 15 10:01:23 2025 GMT
        Subject: CN=730ad8e3968c9220f19a30facb3e5bd1bab364ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:62:37:e2:c7:8a:09:a2:44:5f:b1:a7:2a:74:
                    a3:65:f1:a0:fd:ea:d0:a4:48:5a:68:37:b1:ca:85:
                    58:7c:77:b9:78:09:db:fd:94:ce:50:a5:1f:bc:a7:
                    1b:c3:9f:4e:2f:b2:d9:49:68:4e:c7:70:71:4a:57:
                    07:fa:68:f6:88:74:ed:a4:ac:46:54:7a:fb:fd:fe:
                    6a:c7:d7:5e:50:ac:db:90:cf:1b:7d:09:59:f1:fc:
                    36:62:86:65:04:fd:6d:4b:dd:79:3f:82:6f:a2:01:
                    aa:87:97:9b:12:5f:4a:aa:e7:1c:81:29:b5:87:c2:
                    df:7d:99:d9:f6:0c:99:cf:ba:c9:ad:0a:87:dc:3f:
                    1a:da:2f:80:06:29:5e:23:e8:02:40:3f:d1:1e:72:
                    60:26:65:96:3e:60:2b:ca:bd:0d:25:75:9c:b1:3f:
                    b0:5c:e4:52:27:00:e8:10:2d:8e:7d:54:b1:68:d8:
                    de:e3:31:1d:84:88:35:e1:19:ea:00:d3:e8:0f:27:
                    a7:c2:e2:4b:0d:ca:99:bf:31:95:64:92:2c:92:d4:
                    34:21:d6:dc:a1:87:e4:22:ef:da:41:73:d8:27:86:
                    b1:bb:c9:e8:1f:16:f0:92:f5:d9:0b:e2:f8:0b:90:
                    69:53:fb:94:4d:ae:c3:13:1b:8e:6e:62:f9:c8:af:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0A:D8:E3:96:8C:92:20:F1:9A:30:FA:CB:3E:5B:D1:BA:B3:64:AE
            X509v3 Authority Key Identifier:
                keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:3c:9d:a4:4d:51:50:e3:15:7e:e5:6b:c5:39:f7:6e:5c:
         a0:cb:b9:04:83:6f:d1:64:8c:4d:a6:99:c9:f1:5e:6f:f8:d9:
         c0:40:4f:38:eb:e0:a9:84:52:ac:60:b3:ec:ce:6d:a0:8b:2e:
         93:76:89:b6:1c:a3:b0:49:5d:54:14:6b:6f:38:b2:e0:5b:51:
         43:2a:d5:e9:1a:27:b4:5a:f6:4f:82:20:ce:b5:3a:fe:50:b5:
         87:d7:06:e8:6b:90:28:0d:57:68:98:81:c4:b4:4a:96:cd:da:
         49:6a:8d:2a:7b:f8:cf:06:7f:5f:31:80:61:28:59:04:6f:d3:
         ce:12:f8:42:4c:13:24:f2:91:c4:dc:e0:96:5d:bf:5d:e0:ef:
         fc:d4:5f:f8:43:83:df:15:a5:e8:83:d0:ca:07:2e:ce:a9:cd:
         5e:60:07:84:0a:31:e3:79:4c:90:4e:6a:0d:2a:23:46:ab:b9:
         a7:20:a7:91:69:37:09:2b:7b:e6:94:a1:9f:f6:a4:3e:2a:c8:
         89:64:59:14:41:b3:ea:df:76:59:0a:eb:31:18:f6:1a:d3:14:
         31:72:72:fb:6a:10:c3:b4:9a:e8:e6:c8:23:07:6f:52:b7:1f:
         75:b3:e1:6e:ec:da:38:1a:e6:f7:76:4e:8b:12:d9:b5:08:cb:
         cb:c0:04:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdt4wHoJE8ygVoX3b7b8pSdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjUwNjE0MTAwMTIzWhcNMjUwNjE1MTAwMTIzWjAzMTEwLwYDVQQD
Eyg3MzBhZDhlMzk2OGM5MjIwZjE5YTMwZmFjYjNlNWJkMWJhYjM2NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGI34seKCaJEX7GnKnSjZfGg/erQ
pEhaaDexyoVYfHe5eAnb/ZTOUKUfvKcbw59OL7LZSWhOx3BxSlcH+mj2iHTtpKxG
VHr7/f5qx9deUKzbkM8bfQlZ8fw2YoZlBP1tS915P4JvogGqh5ebEl9KquccgSm1
h8LffZnZ9gyZz7rJrQqH3D8a2i+ABileI+gCQD/RHnJgJmWWPmAryr0NJXWcsT+w
XORSJwDoEC2OfVSxaNje4zEdhIg14RnqANPoDyenwuJLDcqZvzGVZJIsktQ0Idbc
oYfkIu/aQXPYJ4axu8noHxbwkvXZC+L4C5BpU/uUTa7DExuObmL5yK/SLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMK2OOWjJIg8Zow+ss+W9G6s2SuMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwk8naRN
UVDjFX7la8U5925coMu5BINv0WSMTaaZyfFeb/jZwEBPOOvgqYRSrGCz7M5toIsu
k3aJthyjsEldVBRrbziy4FtRQyrV6RontFr2T4IgzrU6/lC1h9cG6GuQKA1XaJiB
xLRKls3aSWqNKnv4zwZ/XzGAYShZBG/TzhL4QkwTJPKRxNzgll2/XeDv/NRf+EOD
3xWl6IPQygcuzqnNXmAHhAox43lMkE5qDSojRqu5pyCnkWk3CSt75pShn/akPirI
iWRZFEGz6t92WQrrMRj2GtMUMXJy+2oQw7Sa6ObIIwdvUrcfdbPhbuzaOBrm93ZO
ixLZtQjLy8AEyQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 13:15:55 2025 by rpki-client