Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          q7+/kzednJkP4FDmRov6eyE35MsAnvxkBQBiE6T8PIE=
Subject key identifier:   E0:1B:F3:06:CD:D1:B8:26:EF:A8:B3:34:1A:EC:24:73:CE:E8:C4:4A
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       01976A3CC5B11442B5462AAB7D878D967D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          15A1
Signing time:             Fri 13 Jun 2025 17:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:57 +0000
Files and hashes:         1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
                          2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: L3OTbckl2BcjAeOeehKKBw0dtt7lEiv7pz+49PPMIEY=)
                          3: cVY_8rS3kZPDu1e0r3R63BtqpCQ.roa (hash: kfP4tSXYf9NAzPYnY28UC1ftu4NWH1iXr6TiCyzu6Bo=)
                          4: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
                          5: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (hash: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:c5:b1:14:42:b5:46:2a:ab:7d:87:8d:96:7d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Jun 13 17:00:57 2025 GMT
            Not After : Jun 14 17:00:57 2025 GMT
        Subject: CN=e01bf306cdd1b826efa8b3341aec2473cee8c44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7c:4c:82:27:78:0b:03:55:ab:84:64:99:8b:
                    ec:88:20:62:f8:f4:17:a5:f6:02:68:f8:5d:49:46:
                    d5:d3:b8:ee:bf:89:4e:11:a6:23:c2:1a:d5:ce:8d:
                    f1:9f:73:45:4f:b9:8b:53:3e:6f:2c:91:32:e4:f4:
                    d4:cb:a5:58:e1:1f:03:cd:38:04:8a:ea:b9:b4:ea:
                    e1:d5:e3:2e:da:bb:31:76:f0:a2:4c:5d:aa:4f:b8:
                    d7:0e:38:ea:d4:88:17:80:d7:79:7b:78:2c:d1:6f:
                    4b:30:09:ec:65:03:d0:7f:98:d6:eb:48:e1:5b:e7:
                    30:28:c0:a6:8a:f9:5d:46:45:97:5f:23:21:59:44:
                    06:aa:29:fb:dd:cb:db:84:b0:6f:61:db:58:93:b9:
                    16:0c:a4:30:f9:5a:28:d6:b6:8e:22:60:bf:89:64:
                    c3:9e:bc:20:4d:67:ee:57:50:a9:b3:9d:26:95:39:
                    fb:42:8c:82:16:bc:aa:ad:e6:b1:a4:66:6c:1b:e6:
                    df:69:d6:e9:b5:e5:78:2e:8d:f8:92:61:f3:a3:a4:
                    d7:f7:88:00:7c:0d:c7:10:83:8d:3d:1b:6c:e2:47:
                    26:b2:00:fb:6d:5e:35:b0:43:e8:58:95:ef:d9:c6:
                    82:bb:2f:99:b0:85:52:f7:8a:90:cc:4a:21:f0:70:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:F3:06:CD:D1:B8:26:EF:A8:B3:34:1A:EC:24:73:CE:E8:C4:4A
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:57:77:8b:22:93:39:be:5d:e9:4e:31:b5:95:b1:fe:c0:df:
         4f:c5:49:d5:5e:7b:91:d2:7a:74:e7:d8:a3:75:4a:0f:3d:1f:
         87:fd:13:6c:05:03:1f:d8:11:87:a1:96:6f:6a:29:61:f7:c2:
         06:c6:fc:c8:71:27:80:23:65:f3:44:59:ee:4c:f8:b9:5a:5f:
         3c:10:10:fd:c2:18:03:6f:45:95:7e:17:07:19:52:57:31:0e:
         28:63:be:fa:78:f7:6a:2b:9b:09:e4:6b:b4:b9:b6:36:9e:57:
         95:23:8b:84:58:b7:e9:a8:57:df:c0:aa:4d:32:b0:4f:40:ef:
         5d:45:df:99:0c:64:7f:8c:91:74:87:4f:6c:fd:2c:2e:4b:e1:
         f6:12:77:1f:0d:5b:7e:01:91:ea:e2:97:fe:a0:ee:36:7a:ac:
         8c:25:9a:51:a4:59:da:7b:93:97:70:e3:c7:21:14:93:c8:8d:
         ae:05:c0:9b:ab:94:d8:ca:4f:91:0b:10:88:84:5f:bb:4d:32:
         94:fd:f4:22:a0:1e:7f:71:b1:8c:7c:70:45:58:16:ff:72:3c:
         a6:49:8e:7e:03:be:bc:6f:e1:22:1a:20:18:3f:cf:5c:b6:53:
         1e:c7:3d:68:2a:7e:6d:2c:c4:d0:09:53:50:91:6e:44:07:05:
         51:3d:0d:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPMWxFEK1RiqrfYeNln1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy
ODJlMzAwHhcNMjUwNjEzMTcwMDU3WhcNMjUwNjE0MTcwMDU3WjAzMTEwLwYDVQQD
EyhlMDFiZjMwNmNkZDFiODI2ZWZhOGIzMzQxYWVjMjQ3M2NlZThjNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3xMgid4CwNVq4RkmYvsiCBi+PQX
pfYCaPhdSUbV07juv4lOEaYjwhrVzo3xn3NFT7mLUz5vLJEy5PTUy6VY4R8DzTgE
iuq5tOrh1eMu2rsxdvCiTF2qT7jXDjjq1IgXgNd5e3gs0W9LMAnsZQPQf5jW60jh
W+cwKMCmivldRkWXXyMhWUQGqin73cvbhLBvYdtYk7kWDKQw+Voo1raOImC/iWTD
nrwgTWfuV1Cps50mlTn7QoyCFryqreaxpGZsG+bfadbpteV4Lo34kmHzo6TX94gA
fA3HEIONPRts4kcmsgD7bV41sEPoWJXv2caCuy+ZsIVS94qQzEoh8HBLgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAb8wbN0bgm76izNBrsJHPO6MRKMB8GA1UdIwQY
MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt
OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk
LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFd3iyKT
Ob5d6U4xtZWx/sDfT8VJ1V57kdJ6dOfYo3VKDz0fh/0TbAUDH9gRh6GWb2opYffC
Bsb8yHEngCNl80RZ7kz4uVpfPBAQ/cIYA29FlX4XBxlSVzEOKGO++nj3aiubCeRr
tLm2Np5XlSOLhFi36ahX38CqTTKwT0DvXUXfmQxkf4yRdIdPbP0sLkvh9hJ3Hw1b
fgGR6uKX/qDuNnqsjCWaUaRZ2nuTl3DjxyEUk8iNrgXAm6uU2MpPkQsQiIRfu00y
lP30IqAef3GxjHxwRVgW/3I8pkmOfgO+vG/hIhogGD/PXLZTHsc9aCp+bSzE0AlT
UJFuRAcFUT0N3w==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:12 2025 by rpki-client