Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          7OoJlUGT8g81Aeb50KhbZ8h2dkYANT/BB0GUoP38eHs=
Subject key identifier:   4F:7C:8C:55:8A:05:19:70:46:57:0E:79:ED:53:01:10:16:A7:DC:AD
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       0196748BC429F5C9F803564AACE0981D045D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          150D
Signing time:             Sun 27 Apr 2025 00:00:38 +0000
Manifest this update:     Sun 27 Apr 2025 00:00:38 +0000
Manifest next update:     Mon 28 Apr 2025 00:00:38 +0000
Files and hashes:         1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: xPFJeK57YFmFIFkeRC8bFwPCnMMLXMdebU7sfhoAo5o=)
                          2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:8b:c4:29:f5:c9:f8:03:56:4a:ac:e0:98:1d:04:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Apr 27 00:00:38 2025 GMT
            Not After : Apr 28 00:00:38 2025 GMT
        Subject: CN=4f7c8c558a05197046570e79ed53011016a7dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1f:69:dd:7e:97:0f:a8:dc:47:16:eb:1d:cf:
                    2f:9c:93:1b:c4:91:79:30:e5:ba:1a:89:e3:0f:f9:
                    b3:5c:a3:9b:df:d3:7f:41:57:7c:8b:dd:98:f9:5d:
                    9f:49:e7:0c:51:ed:39:60:f2:57:d0:a6:2b:3e:dc:
                    09:b1:bd:d9:fd:12:89:0c:31:e2:c2:44:d1:8a:7c:
                    a1:04:9f:08:72:43:0e:3a:79:33:4d:1d:73:73:25:
                    32:5a:68:f4:09:36:7d:b3:15:1f:9f:88:fe:1d:26:
                    3b:d6:1a:03:14:2a:fb:e7:63:80:87:37:e7:7c:35:
                    ac:ec:1a:47:da:71:c3:a4:78:f2:7c:c0:b6:c1:f2:
                    db:cb:1b:4d:bf:21:86:99:2d:93:1f:04:95:dd:7e:
                    19:8c:5a:36:55:8e:0c:85:49:7d:30:95:46:e0:b0:
                    7a:41:ca:0c:93:69:60:00:47:6f:c3:96:7d:94:90:
                    92:02:d1:67:58:73:b9:5b:e9:83:5b:5a:aa:3c:f6:
                    b7:56:b9:39:df:bd:14:73:ed:b0:7f:ee:b2:bc:62:
                    27:a5:da:25:71:53:d7:56:a6:85:a2:ec:8c:9e:ec:
                    81:ae:0b:d6:ca:b5:ec:97:2d:ac:7b:49:07:f3:c9:
                    10:a9:2e:45:7a:24:f2:33:af:07:4c:02:01:ee:46:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7C:8C:55:8A:05:19:70:46:57:0E:79:ED:53:01:10:16:A7:DC:AD
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:99:cc:be:d7:9d:a9:bb:53:f1:89:63:86:61:66:67:8a:05:
         1e:51:b8:cf:f0:3f:b1:16:11:15:f3:f1:4e:6b:0d:ff:a8:73:
         c5:dd:5d:5c:31:cc:75:6f:d2:b8:03:bc:53:c8:42:57:7f:e0:
         e2:31:13:d3:46:24:36:fc:e0:ea:e6:d3:91:72:8d:37:9a:74:
         47:28:7f:c5:26:40:cc:4f:81:fe:d2:a9:68:13:8c:1b:01:fa:
         c5:3e:6d:4b:39:ce:78:d8:e3:df:e1:fc:83:eb:67:76:9f:46:
         92:80:d8:ac:b9:f3:7a:a4:fc:44:e6:e7:ae:08:7e:c6:82:97:
         ef:d6:5e:79:3b:1b:f5:2f:d1:16:d2:86:25:a7:ac:21:45:a7:
         19:8b:79:62:7f:aa:3b:d0:40:93:29:53:cc:1c:75:0a:87:3c:
         ec:c3:7b:63:25:a5:0d:44:1d:28:59:8a:ba:7f:0f:58:da:0c:
         1c:ce:05:36:d9:34:1d:02:fa:51:b4:2c:a5:7d:ef:24:e6:35:
         27:97:3e:8c:4b:a9:18:25:75:6c:5c:74:4e:d0:7e:43:09:65:
         32:2b:c9:70:7c:a1:47:8f:f7:a7:93:82:0a:96:59:f7:b3:4e:
         4f:2b:af:41:a9:ae:2a:e3:db:c0:8b:09:2d:a4:d4:50:c7:88:
         0f:ee:25:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i8Qp9cn4A1ZKrOCYHQRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YzhhM2ZhYTE4YjZkNzE3YWEyZjc2MjIxODFiYWQ4YmU1
YjU1YTMwHhcNMjUwNDI3MDAwMDM4WhcNMjUwNDI4MDAwMDM4WjAzMTEwLwYDVQQD
Eyg0ZjdjOGM1NThhMDUxOTcwNDY1NzBlNzllZDUzMDExMDE2YTdkY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzR9p3X6XD6jcRxbrHc8vnJMbxJF5
MOW6GonjD/mzXKOb39N/QVd8i92Y+V2fSecMUe05YPJX0KYrPtwJsb3Z/RKJDDHi
wkTRinyhBJ8IckMOOnkzTR1zcyUyWmj0CTZ9sxUfn4j+HSY71hoDFCr752OAhzfn
fDWs7BpH2nHDpHjyfMC2wfLbyxtNvyGGmS2THwSV3X4ZjFo2VY4MhUl9MJVG4LB6
QcoMk2lgAEdvw5Z9lJCSAtFnWHO5W+mDW1qqPPa3Vrk5370Uc+2wf+6yvGInpdol
cVPXVqaFouyMnuyBrgvWyrXsly2se0kH88kQqS5FeiTyM68HTAIB7kZk6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE98jFWKBRlwRlcOee1TARAWp9ytMB8GA1UdIwQY
MBaAFAXIo/qhi21xeqL3YiGButi+W1WjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjkt
N2Q0NWE5ZmM0ZmZjLzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8wZGE4ZjctZmUyMi00MmZiLWEzMjktN2Q0NWE5ZmM0ZmZj
LzEvQmNpai1xR0xiWEY2b3ZkaUlZRzYyTDViVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpnMvted
qbtT8YljhmFmZ4oFHlG4z/A/sRYRFfPxTmsN/6hzxd1dXDHMdW/SuAO8U8hCV3/g
4jET00YkNvzg6ubTkXKNN5p0Ryh/xSZAzE+B/tKpaBOMGwH6xT5tSznOeNjj3+H8
g+tndp9GkoDYrLnzeqT8RObnrgh+xoKX79ZeeTsb9S/RFtKGJaesIUWnGYt5Yn+q
O9BAkylTzBx1Coc87MN7YyWlDUQdKFmKun8PWNoMHM4FNtk0HQL6UbQspX3vJOY1
J5c+jEupGCV1bFx0TtB+QwllMivJcHyhR4/3p5OCCpZZ97NOTyuvQamuKuPbwIsJ
LaTUUMeID+4lKQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:09 2025 by rpki-client