Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          4IFVWUtkWCRH6zg3Doni8Nz2FnNl4khH4f/oa5AWiTw=
Subject key identifier:   89:F9:19:11:9D:03:BD:78:40:9D:F1:06:BB:27:36:35:42:5A:E3:D9
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       01968391101BDE200E602B15427005423D0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          0208
Signing time:             Tue 29 Apr 2025 22:00:44 +0000
Manifest this update:     Tue 29 Apr 2025 22:00:44 +0000
Manifest next update:     Wed 30 Apr 2025 22:00:44 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: AV1X+F74o8rhcWtgBUKNbIVHqQYrl1ioGm/veVxM/aU=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:83:91:10:1b:de:20:0e:60:2b:15:42:70:05:42:3d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Apr 29 22:00:44 2025 GMT
            Not After : Apr 30 22:00:44 2025 GMT
        Subject: CN=89f919119d03bd78409df106bb273635425ae3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:14:90:bc:5c:42:1a:a4:56:36:98:61:fc:
                    71:72:3c:f6:7c:e7:38:29:46:89:2c:a0:03:07:18:
                    6c:5d:b1:8b:06:f6:08:57:81:a9:d4:39:89:65:07:
                    63:9d:5f:5c:bc:2d:a9:40:f6:0c:03:b3:13:5c:09:
                    be:18:10:1c:c6:77:3e:80:2f:a0:e4:78:69:e0:64:
                    0d:04:7c:e4:36:6e:04:5c:56:c3:9d:bd:7b:35:1d:
                    df:ff:8c:f6:76:ac:40:9b:d4:f0:b6:81:28:2a:bf:
                    4e:4d:c6:e8:07:6b:70:cf:9a:61:c2:02:48:e7:f8:
                    b6:b2:01:56:aa:e6:bc:a6:3e:7b:10:c5:4b:00:db:
                    a5:d2:15:91:c6:e8:46:18:6b:31:ca:25:bd:1e:b3:
                    fc:18:8f:34:7e:e9:c0:e3:57:f1:df:c3:d8:15:a5:
                    af:21:89:26:6d:33:6a:ed:3d:c9:e0:ec:17:89:d2:
                    91:f8:a6:3c:54:2f:1a:d5:67:fc:5b:bc:0f:44:38:
                    31:ac:5f:a7:d5:d5:ef:e9:74:e4:89:94:e5:3a:d1:
                    dd:2b:3a:d1:4c:f8:72:e8:93:70:61:b7:24:cb:bd:
                    fd:1b:c6:af:aa:5f:22:be:7d:0f:ae:e8:86:81:21:
                    d1:fa:ae:43:db:e6:26:13:01:ec:0e:c3:78:ad:8d:
                    ae:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:19:11:9D:03:BD:78:40:9D:F1:06:BB:27:36:35:42:5A:E3:D9
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f3:75:3b:f2:6d:3e:60:68:6b:56:04:1f:f0:ec:cc:29:74:
         03:b3:65:b8:3f:0d:65:75:01:52:01:64:3a:08:bc:77:25:17:
         98:66:e4:a3:a1:f6:7f:58:5a:01:04:21:9c:4b:bc:da:e7:cd:
         74:0b:5b:88:86:73:19:7e:ca:1e:4e:35:b2:4f:5a:2a:43:4b:
         36:f2:12:3a:c8:75:38:3d:ef:58:87:54:f1:e2:6f:8f:82:6a:
         86:f5:8c:be:93:47:be:35:8d:29:17:4b:79:99:10:d0:67:3f:
         89:58:95:33:12:cd:5d:60:37:90:ef:8e:cb:a4:a3:31:6e:ce:
         0d:f6:81:aa:d0:d6:70:fd:ff:8f:b9:20:a9:a1:b8:0e:01:d2:
         ea:e2:df:b3:10:a8:c9:c2:59:07:38:ce:18:15:be:6b:1a:72:
         c8:73:b7:9d:c3:d9:02:e2:4c:9a:77:ea:c4:6a:97:c2:93:bf:
         18:6e:ac:02:90:ad:f3:9a:a4:af:0b:5b:d3:6f:37:ef:8d:ce:
         e7:dc:96:54:88:c1:a1:87:c9:c3:a2:cd:2e:05:5b:d0:2b:48:
         95:a3:8b:b7:d8:2a:37:39:80:af:88:90:50:ff:67:91:7f:17:
         3f:8a:b5:0a:65:4d:c7:4b:16:ba:8f:f6:ff:39:62:a6:30:2a:
         2d:b2:b6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDkRAb3iAOYCsVQnAFQj0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1Y2U0ZGQyODgwMWIyODNiZjg1MWI1YzAwZDAwZWI4YjUx
NGE1NWEwHhcNMjUwNDI5MjIwMDQ0WhcNMjUwNDMwMjIwMDQ0WjAzMTEwLwYDVQQD
Eyg4OWY5MTkxMTlkMDNiZDc4NDA5ZGYxMDZiYjI3MzYzNTQyNWFlM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCwUkLxcQhqkVjaYYfxxcjz2fOc4
KUaJLKADBxhsXbGLBvYIV4Gp1DmJZQdjnV9cvC2pQPYMA7MTXAm+GBAcxnc+gC+g
5Hhp4GQNBHzkNm4EXFbDnb17NR3f/4z2dqxAm9TwtoEoKr9OTcboB2twz5phwgJI
5/i2sgFWqua8pj57EMVLANul0hWRxuhGGGsxyiW9HrP8GI80funA41fx38PYFaWv
IYkmbTNq7T3J4OwXidKR+KY8VC8a1Wf8W7wPRDgxrF+n1dXv6XTkiZTlOtHdKzrR
TPhy6JNwYbcky739G8avql8ivn0PruiGgSHR+q5D2+YmEwHsDsN4rY2utQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIn5GRGdA714QJ3xBrsnNjVCWuPZMB8GA1UdIwQY
MBaAFAXOTdKIAbKDv4UbXADQDri1FKVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQt
ZjIyM2RhY2I2MDE3LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lZjY0NjEtYTBlZi00YzE5LTllMWQtZjIyM2RhY2I2MDE3
LzEvQmM1TjBvZ0Jzb09faFJ0Y0FOQU91TFVVcFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfN1O/Jt
PmBoa1YEH/DszCl0A7NluD8NZXUBUgFkOgi8dyUXmGbko6H2f1haAQQhnEu82ufN
dAtbiIZzGX7KHk41sk9aKkNLNvISOsh1OD3vWIdU8eJvj4JqhvWMvpNHvjWNKRdL
eZkQ0Gc/iViVMxLNXWA3kO+Oy6SjMW7ODfaBqtDWcP3/j7kgqaG4DgHS6uLfsxCo
ycJZBzjOGBW+axpyyHO3ncPZAuJMmnfqxGqXwpO/GG6sApCt85qkrwtb0283743O
59yWVIjBoYfJw6LNLgVb0CtIlaOLt9gqNzmAr4iQUP9nkX8XP4q1CmVNx0sWuo/2
/zlipjAqLbK2fg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:53 2025 by rpki-client