Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
File:                     bgE5p90AvHR-C-c-5yiIC4FVAIU.mft (raw, json)
Hash identifier:          JGFaLn3AwjJFvQsQPIEQxmTAXOIMB6hHYvn8ADc0nIw=
Subject key identifier:   50:9D:88:B2:38:94:62:5A:77:1D:67:D5:DA:43:AB:49:6B:6E:16:BD
Authority key identifier: 6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85
Certificate issuer:       /CN=6e0139a7dd00bc747e0be73ee728880b81550085
Certificate serial:       01976C62364FA2748390E5045DAAE838D9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
Manifest number:          0524
Signing time:             Sat 14 Jun 2025 03:01:05 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:05 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:05 +0000
Files and hashes:         1: bgE5p90AvHR-C-c-5yiIC4FVAIU.crl (hash: oNOFqE3vM+BksRy7JOLMxoAud4ISJwHsT6A65/RiopE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:36:4f:a2:74:83:90:e5:04:5d:aa:e8:38:d9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e0139a7dd00bc747e0be73ee728880b81550085
        Validity
            Not Before: Jun 14 03:01:05 2025 GMT
            Not After : Jun 15 03:01:05 2025 GMT
        Subject: CN=509d88b23894625a771d67d5da43ab496b6e16bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:81:00:3f:50:34:ce:7f:f0:3b:7f:85:bc:e2:
                    a1:e9:d6:7c:1d:10:e8:62:c4:29:6b:c5:47:4d:77:
                    2a:67:1e:cf:d1:8a:94:c3:33:2a:a8:3f:53:95:d3:
                    a3:65:88:34:25:09:db:ae:29:26:db:0b:31:1b:1e:
                    2c:b9:a0:50:c5:eb:fc:93:54:3b:c0:53:33:27:4f:
                    20:34:a6:cd:00:61:c0:a1:d3:8f:36:05:79:b8:c4:
                    6d:72:31:49:b8:17:9c:a1:01:35:45:e2:98:29:b9:
                    1b:c8:ab:e1:66:60:cf:9c:32:af:6f:ac:4d:eb:bb:
                    01:1b:66:4f:1c:24:16:50:31:e1:44:6d:3f:74:30:
                    a9:d1:11:cb:f5:a7:17:cc:05:7c:3b:e1:8e:9a:22:
                    73:1d:a6:f6:55:2e:28:3b:48:2c:67:7c:c3:a9:c3:
                    b7:be:1b:3f:13:ea:3b:af:30:cb:2b:bb:45:b1:35:
                    72:ef:a7:30:85:6d:04:46:40:0c:d8:b5:28:cf:81:
                    35:84:a6:3d:fd:50:a1:18:9d:96:83:3f:a3:34:67:
                    4c:09:0b:40:c1:42:be:48:14:05:28:df:4c:7a:1b:
                    50:1b:fa:f1:84:c3:07:7d:4e:e6:6e:bf:88:d7:0d:
                    9a:a5:d0:6b:62:99:d1:5c:6e:a9:b1:a1:04:3b:6d:
                    c3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9D:88:B2:38:94:62:5A:77:1D:67:D5:DA:43:AB:49:6B:6E:16:BD
            X509v3 Authority Key Identifier:
                keyid:6E:01:39:A7:DD:00:BC:74:7E:0B:E7:3E:E7:28:88:0B:81:55:00:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgE5p90AvHR-C-c-5yiIC4FVAIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/be3474-3d78-4bae-96e7-b4a2b49fbc1c/1/bgE5p90AvHR-C-c-5yiIC4FVAIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:1d:b2:a9:3f:f0:fe:18:4e:48:c0:1c:3f:71:3d:b6:f1:
         72:10:06:f9:b1:82:19:ec:18:c7:ff:3a:95:ed:5e:c6:40:61:
         db:6f:23:06:9c:8e:d4:35:6a:ad:ba:94:ff:e7:ce:07:d8:95:
         29:41:26:9a:7b:d9:a8:bb:97:60:25:47:c1:7e:c9:95:9d:c0:
         0b:10:c9:44:dd:e3:15:ce:40:e0:1a:0f:21:8b:64:3d:df:da:
         d8:f0:94:f8:d4:5a:68:e0:e4:98:47:d9:a3:f3:ca:6b:97:6c:
         d5:ac:ee:f6:ec:c0:3d:fb:0a:ba:43:2c:ce:f1:24:72:9e:c5:
         0f:fa:29:63:1e:57:4a:44:26:9f:39:52:52:f4:0f:ee:c6:24:
         47:cf:e9:f9:0b:f3:24:a3:29:67:64:a2:f3:12:ba:c3:36:6c:
         1b:43:bf:d8:e5:5e:bf:d6:86:54:dc:3e:1d:31:cf:ca:62:61:
         e0:e3:48:91:aa:c1:43:76:b6:ac:22:bb:f1:19:01:8a:48:1a:
         5a:89:29:b2:fd:7b:44:34:44:85:b5:c9:e9:60:42:69:7d:f8:
         ef:df:26:f3:8a:17:d9:ac:15:0d:13:60:09:37:88:b3:9c:19:
         75:32:2b:3c:58:53:ce:3b:17:56:7b:be:af:05:28:9d:bb:52:
         a7:e1:05:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYjZPonSDkOUEXaroONndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMDEzOWE3ZGQwMGJjNzQ3ZTBiZTczZWU3Mjg4ODBiODE1
NTAwODUwHhcNMjUwNjE0MDMwMTA1WhcNMjUwNjE1MDMwMTA1WjAzMTEwLwYDVQQD
Eyg1MDlkODhiMjM4OTQ2MjVhNzcxZDY3ZDVkYTQzYWI0OTZiNmUxNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4EAP1A0zn/wO3+FvOKh6dZ8HRDo
YsQpa8VHTXcqZx7P0YqUwzMqqD9TldOjZYg0JQnbrikm2wsxGx4suaBQxev8k1Q7
wFMzJ08gNKbNAGHAodOPNgV5uMRtcjFJuBecoQE1ReKYKbkbyKvhZmDPnDKvb6xN
67sBG2ZPHCQWUDHhRG0/dDCp0RHL9acXzAV8O+GOmiJzHab2VS4oO0gsZ3zDqcO3
vhs/E+o7rzDLK7tFsTVy76cwhW0ERkAM2LUoz4E1hKY9/VChGJ2Wgz+jNGdMCQtA
wUK+SBQFKN9MehtQG/rxhMMHfU7mbr+I1w2apdBrYpnRXG6psaEEO23DxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCdiLI4lGJadx1n1dpDq0lrbha9MB8GA1UdIwQY
MBaAFG4BOafdALx0fgvnPucoiAuBVQCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZTM0NzQtM2Q3OC00YmFlLTk2ZTct
YjRhMmI0OWZiYzFjLzEvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iZTM0NzQtM2Q3OC00YmFlLTk2ZTctYjRhMmI0OWZiYzFj
LzEvYmdFNXA5MEF2SFItQy1jLTV5aUlDNEZWQUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZREdsqk/
8P4YTkjAHD9xPbbxchAG+bGCGewYx/86le1exkBh228jBpyO1DVqrbqU/+fOB9iV
KUEmmnvZqLuXYCVHwX7JlZ3ACxDJRN3jFc5A4BoPIYtkPd/a2PCU+NRaaODkmEfZ
o/PKa5ds1azu9uzAPfsKukMszvEkcp7FD/opYx5XSkQmnzlSUvQP7sYkR8/p+Qvz
JKMpZ2Si8xK6wzZsG0O/2OVev9aGVNw+HTHPymJh4ONIkarBQ3a2rCK78RkBikga
Wokpsv17RDREhbXJ6WBCaX34798m84oX2awVDRNgCTeIs5wZdTIrPFhTzjsXVnu+
rwUonbtSp+EFMg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:54 2025 by rpki-client