Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File:                     DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier:          4CdBltrs1hm52HIwbBHqFXbS+bJRBqb8ENWY/zMXy1I=
Subject key identifier:   50:A7:B4:DA:8D:72:0F:DC:A8:4E:DF:EA:9E:D7:2A:6C:9D:C5:A6:FB
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer:       /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial:       0197729ACBB61B759DC0331667FB6DA8FF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number:          04EC
Signing time:             Sun 15 Jun 2025 08:00:36 +0000
Manifest this update:     Sun 15 Jun 2025 08:00:36 +0000
Manifest next update:     Mon 16 Jun 2025 08:00:36 +0000
Files and hashes:         1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: 4R5dbWDaC0VFc1IVpb6DlmHeAUZYsMk5QwwyMoTh++g=)
                          2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:9a:cb:b6:1b:75:9d:c0:33:16:67:fb:6d:a8:ff:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
        Validity
            Not Before: Jun 15 08:00:36 2025 GMT
            Not After : Jun 16 08:00:36 2025 GMT
        Subject: CN=50a7b4da8d720fdca84edfea9ed72a6c9dc5a6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:b9:50:8c:a5:01:aa:21:01:b8:30:db:18:
                    02:14:98:8b:67:a8:49:01:7e:36:4f:19:39:06:b8:
                    3f:81:41:1b:c8:f8:4b:16:7f:32:27:0b:45:1a:de:
                    fe:c4:c2:ff:0a:1a:51:a4:eb:3e:51:27:ba:46:07:
                    68:b4:9f:32:39:0e:15:22:4b:d0:81:86:a7:b1:8b:
                    7e:61:4f:ca:71:3e:c5:c7:29:82:5c:8a:03:31:ed:
                    e4:e2:32:cb:14:2a:c6:ec:4a:44:f5:57:39:32:b7:
                    b1:96:69:f5:51:d8:b6:e7:62:21:bf:15:1b:c6:38:
                    44:33:f1:51:58:0b:85:42:b8:f7:63:f0:a7:e4:2d:
                    78:79:e4:5b:31:ec:dc:ff:4c:4d:c4:26:8b:9a:af:
                    63:e3:35:2d:77:c7:51:a1:5a:cc:fa:01:b0:a0:b5:
                    78:64:97:e1:92:7f:fd:24:79:66:55:f9:90:d8:9d:
                    e4:44:d9:aa:17:63:4b:dc:64:1e:a6:8f:4e:95:e2:
                    9e:6e:aa:e7:9b:ff:58:5b:0f:ca:d4:2c:a7:72:9c:
                    6c:b3:b1:4f:11:15:f1:b0:66:ca:14:89:15:74:a6:
                    d2:45:64:5c:c6:34:97:bb:97:8d:83:b2:5f:bb:c5:
                    79:08:96:30:f9:46:c2:35:50:b3:39:9e:e7:8e:71:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A7:B4:DA:8D:72:0F:DC:A8:4E:DF:EA:9E:D7:2A:6C:9D:C5:A6:FB
            X509v3 Authority Key Identifier:
                keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:49:17:aa:2b:32:df:bd:eb:e6:2b:7a:b9:24:20:f0:69:
         9d:ab:83:ac:73:f2:99:bf:89:d4:7f:74:b9:9f:b5:35:ce:38:
         ee:05:a0:46:07:92:11:93:55:47:f2:1e:0c:8b:3b:2b:43:09:
         27:af:56:bf:5a:83:87:20:15:c9:5b:5f:df:f1:78:57:34:ec:
         06:d8:d0:9c:3a:f4:c0:88:b1:80:c4:9f:73:32:00:a1:ae:5b:
         9f:3d:6c:7c:53:1c:c0:ca:95:74:23:e5:54:91:01:5f:c2:73:
         ed:5b:7d:09:d1:b8:54:e1:2c:90:95:b1:61:e9:46:14:d1:d3:
         7a:54:8b:cb:3e:f0:16:5c:40:c3:66:6b:9a:47:53:85:ef:93:
         25:10:06:f2:04:dd:25:3e:97:6b:10:fd:54:b3:cd:de:5b:30:
         5d:b5:67:1e:50:96:a9:76:5a:9d:c9:c4:d5:ea:7a:ca:db:9b:
         83:b3:f6:77:bc:cf:d1:37:8d:da:11:7b:96:91:b5:bd:77:df:
         08:d6:75:9d:5c:91:0c:bc:20:d9:d4:cc:cc:1d:83:20:e8:e0:
         50:ba:22:4a:7d:e0:ba:53:9f:e9:f1:35:51:73:04:e6:d9:00:
         b3:24:f1:4f:a9:59:ac:54:0d:bc:56:9f:24:5b:a4:b5:f7:1a:
         66:cc:fa:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdymsu2G3WdwDMWZ/ttqP8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmY4MWI4YzE3ZjU1ZGNkZGRlYzU0YzhjY2VhZGQ2OTVk
MjhmMDcwHhcNMjUwNjE1MDgwMDM2WhcNMjUwNjE2MDgwMDM2WjAzMTEwLwYDVQQD
Eyg1MGE3YjRkYThkNzIwZmRjYTg0ZWRmZWE5ZWQ3MmE2YzlkYzVhNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovO5UIylAaohAbgw2xgCFJiLZ6hJ
AX42Txk5Brg/gUEbyPhLFn8yJwtFGt7+xML/ChpRpOs+USe6RgdotJ8yOQ4VIkvQ
gYansYt+YU/KcT7FxymCXIoDMe3k4jLLFCrG7EpE9Vc5Mrexlmn1Udi252IhvxUb
xjhEM/FRWAuFQrj3Y/Cn5C14eeRbMezc/0xNxCaLmq9j4zUtd8dRoVrM+gGwoLV4
ZJfhkn/9JHlmVfmQ2J3kRNmqF2NL3GQepo9OleKebqrnm/9YWw/K1Cyncpxss7FP
ERXxsGbKFIkVdKbSRWRcxjSXu5eNg7Jfu8V5CJYw+UbCNVCzOZ7njnGugQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCntNqNcg/cqE7f6p7XKmydxab7MB8GA1UdIwQY
MBaAFA0vgbjBf1Xc3d7FTIzOrdaV0o8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODct
NjhmMmZhMDAxZmE3LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9hZjE5YTAtN2NiZi00MDc4LWE5ODctNjhmMmZhMDAxZmE3
LzEvRFMtQnVNRl9WZHpkM3NWTWpNNnQxcFhTandjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/BJF6or
Mt+96+YrerkkIPBpnauDrHPymb+J1H90uZ+1Nc447gWgRgeSEZNVR/IeDIs7K0MJ
J69Wv1qDhyAVyVtf3/F4VzTsBtjQnDr0wIixgMSfczIAoa5bnz1sfFMcwMqVdCPl
VJEBX8Jz7Vt9CdG4VOEskJWxYelGFNHTelSLyz7wFlxAw2ZrmkdThe+TJRAG8gTd
JT6XaxD9VLPN3lswXbVnHlCWqXZancnE1ep6ytubg7P2d7zP0TeN2hF7lpG1vXff
CNZ1nVyRDLwg2dTMzB2DIOjgULoiSn3gulOf6fE1UXME5tkAsyTxT6lZrFQNvFaf
JFuktfcaZsz64Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:41:36 2025 by rpki-client