Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
File:                     BbHRPC4m4SeGJGpexMW-pphksg8.mft (raw, json)
Hash identifier:          +opwDaA5n8TPFP43fThXG5SoEXsMdk3Pibs0OAWHRDE=
Subject key identifier:   1A:5F:F7:5D:EC:DD:35:4E:4F:ED:EF:20:BF:CB:04:A0:7F:C0:1B:44
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Certificate issuer:       /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial:       01976929D4DFFFBCB982083AEDA6F12D824A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
Manifest number:          168E
Signing time:             Fri 13 Jun 2025 12:00:38 +0000
Manifest this update:     Fri 13 Jun 2025 12:00:38 +0000
Manifest next update:     Sat 14 Jun 2025 12:00:38 +0000
Files and hashes:         1: 05Tg0UTrs2bglsb4atVMOsvRYS0.roa (hash: VhJZRocRnbLToarK8Wb3G47273juDPcLT4qOnhmDcBI=)
                          2: 1UUsByoEofzjEeiAmIAz-WfMDBU.roa (hash: /7lgakegoy05PQfBI5+T4clOyf4KsMTGCdFLL/29XDY=)
                          3: 5QoLvq-WQhi5T97Feko4QBKbJJw.roa (hash: 7I36hNQka2fyL1Q374RiVWWXD4L+NmzEsqbBYn/pLlM=)
                          4: 6MJLp_dcMYXwk9RiE3DAAxY4oSw.roa (hash: iMyO6h7kJ4PGNfYetznIkMIkkeZszd0XbN1GelrAgSQ=)
                          5: 6NDDKTXIzRZHe_ehTDWU_WHQrJE.roa (hash: JW5KsBQslWl7UMV/MlFKqi9hwR7KoSJt1apypxuQJ5Y=)
                          6: 7qByDki_pKXz-mNnSCgIXHS1XaM.roa (hash: LGUK2l5AC67T1BEV+gQvM8QIjOAp9/K6aMTWDWsKeLc=)
                          7: BbHRPC4m4SeGJGpexMW-pphksg8.crl (hash: YJN1OY85l/HkDFSpps4lbMPA+CzlPKx9XDXosQLr3bk=)
                          8: DgTpLrRRquHSXvxiLZB-Fh9YeG4.roa (hash: DlQDXNMbatjiry2Z/1lohQ5Y3aQ3whRLmr2gMIHuKEk=)
                          9: OGaXmBMfcWvZ6ltHdLZ9jEV9lOE.roa (hash: eJOYvtDNe3FhBqS6Vln19RuplvlaDGsRE5/7K05uBUA=)
                          10: PsG0AtBemY9a4yDfPpt9i4Kr2GY.roa (hash: sBzY2h3ELjAXI6xknFWXGyJRwY7PSfLmEfEaa7NAk3M=)
                          11: SwcgVnhGmzMWqIm_KFB-KKc0RJo.roa (hash: zsctMXkFR2wIfF/ZZB2QR24YMG6LeLpv/U7aSRBkmeo=)
                          12: TGoRKnPJi8w2mb-huIb9J65xjBo.roa (hash: ePazxEN5ghQaWUW2X4iM0oyeSePfu0C9ZykGzy3wrTA=)
                          13: TWE2GQbK5ZzsTrZP_-cvHhqi5o4.roa (hash: Ukt/h+lTDs0ybwVVqLmtBTv2gykUegHHPF+gzdqT32U=)
                          14: UUpwIiVcqDAAnpr6ilJo-OXFSZk.roa (hash: pd9P0IlgabDMIpT9nXZW5tJdWZ7mt1qbF+E2T8hCSg0=)
                          15: hj8L9GkvIvtNkKP3RDq4IS6qH84.roa (hash: Bkn5aqxtoPsMfsZ5PI8rL7/trWBK1cuaEqeQuBeWvM0=)
                          16: mMmotuD0TZKdicQDfZ6Z_N35ZqI.roa (hash: 07jH3RAfwMd/hMMXiDE+Mo4JGAXBcfNHakucWyLpJhk=)
                          17: ptXbX8Zqa-anm64RYPO3MNfDgCc.roa (hash: X1KaAT7AfL8kdySxiP0OJr7eJjZG/di68v2W2Al5EUw=)
                          18: te211TKQz2Pk8IALmy95oPDOlAo.roa (hash: 6m2ob5nsGlLuQ9RcRXpg5CWRSsEUhhwU4klUczhb2D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 12:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:29:d4:df:ff:bc:b9:82:08:3a:ed:a6:f1:2d:82:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
        Validity
            Not Before: Jun 13 12:00:38 2025 GMT
            Not After : Jun 14 12:00:38 2025 GMT
        Subject: CN=1a5ff75decdd354e4fedef20bfcb04a07fc01b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:09:d2:de:5c:c9:98:a4:83:10:12:1b:ff:
                    75:7e:aa:92:75:e6:1f:2d:00:22:12:0e:7f:15:04:
                    9a:fe:63:7e:8c:5c:4b:ed:20:4d:9c:76:ba:b2:87:
                    9d:10:b3:6c:3f:5b:19:34:eb:e0:15:45:4c:57:52:
                    40:74:2e:e3:52:84:3c:b5:eb:5a:ba:ad:f1:63:0c:
                    f5:4f:9c:c0:d3:2c:9a:a2:76:25:2a:3f:60:79:5c:
                    d5:37:1d:c2:3c:d1:f4:3e:a2:81:01:26:3d:f4:d2:
                    1e:58:d1:58:c2:20:db:be:00:f5:23:98:76:33:66:
                    06:8a:9b:40:7d:34:39:ae:b2:81:32:51:af:72:99:
                    a6:a4:e3:ec:54:6f:34:97:03:eb:15:b5:c3:9e:02:
                    e0:92:13:1a:62:9f:43:2b:d4:1a:f7:9f:4b:27:7b:
                    31:2d:24:56:32:85:c7:55:e2:e5:2d:fb:a1:fd:8b:
                    92:1c:61:25:1a:0a:3d:b3:b4:0c:e9:c5:61:bd:3a:
                    95:a3:ef:18:66:4c:27:89:b0:10:96:2a:17:b9:5b:
                    d7:d9:ef:5e:ad:fe:5a:d1:24:9b:77:eb:d8:5a:93:
                    51:72:66:28:07:f9:a3:2b:2d:2f:d9:c0:15:7d:16:
                    5a:45:7b:f2:d8:d7:0a:94:55:33:93:75:55:a6:d9:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5F:F7:5D:EC:DD:35:4E:4F:ED:EF:20:BF:CB:04:A0:7F:C0:1B:44
            X509v3 Authority Key Identifier:
                keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:82:14:d2:58:ee:ce:32:21:39:5a:cd:f0:ed:cb:45:e6:0e:
         44:e2:e6:b7:fa:cc:e7:1b:2b:07:dc:95:0a:6f:cf:56:80:34:
         a6:96:57:db:ee:ae:40:fc:92:6e:0b:56:00:4e:58:cb:4a:5f:
         75:7a:5f:39:ec:0f:a5:a0:29:da:ba:e9:65:30:96:f2:7e:cf:
         65:40:c6:61:c0:81:0c:d2:a4:47:ff:a2:b5:6b:f1:7b:2d:5f:
         8e:a8:8b:cd:d0:e9:d1:7b:fb:72:67:0c:15:b5:13:bd:22:5a:
         c6:ad:e1:a0:c4:ad:18:0c:08:fa:8e:0b:21:42:f7:f4:2d:b4:
         dc:55:52:b5:16:08:2e:3a:c3:bc:5b:03:a7:a1:79:a5:b2:9b:
         4a:a3:41:06:05:ff:cc:52:e4:6d:fe:7b:a5:e9:65:9c:b2:4b:
         f0:a7:b5:08:5b:0f:ff:44:61:2e:95:9b:b9:5c:c4:a2:ba:09:
         98:8d:7b:74:84:df:11:0c:8a:c6:2e:4c:c2:aa:f2:76:f4:a0:
         b5:a9:71:51:59:f9:c2:61:00:88:c7:76:5c:14:a7:d2:cf:81:
         5b:65:dc:51:1c:ba:63:a7:f9:8d:16:ee:1d:34:be:ba:ef:b3:
         39:dc:82:b6:ee:82:ea:53:8a:40:33:13:84:4a:12:08:73:59:
         cb:fd:4a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKdTf/7y5ggg67abxLYJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjUwNjEzMTIwMDM4WhcNMjUwNjE0MTIwMDM4WjAzMTEwLwYDVQQD
EygxYTVmZjc1ZGVjZGQzNTRlNGZlZGVmMjBiZmNiMDRhMDdmYzAxYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppwJ0t5cyZikgxASG/91fqqSdeYf
LQAiEg5/FQSa/mN+jFxL7SBNnHa6soedELNsP1sZNOvgFUVMV1JAdC7jUoQ8teta
uq3xYwz1T5zA0yyaonYlKj9geVzVNx3CPNH0PqKBASY99NIeWNFYwiDbvgD1I5h2
M2YGiptAfTQ5rrKBMlGvcpmmpOPsVG80lwPrFbXDngLgkhMaYp9DK9Qa959LJ3sx
LSRWMoXHVeLlLfuh/YuSHGElGgo9s7QM6cVhvTqVo+8YZkwnibAQlioXuVvX2e9e
rf5a0SSbd+vYWpNRcmYoB/mjKy0v2cAVfRZaRXvy2NcKlFUzk3VVptmBkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpf913s3TVOT+3vIL/LBKB/wBtEMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoIU0lju
zjIhOVrN8O3LReYOROLmt/rM5xsrB9yVCm/PVoA0ppZX2+6uQPySbgtWAE5Yy0pf
dXpfOewPpaAp2rrpZTCW8n7PZUDGYcCBDNKkR/+itWvxey1fjqiLzdDp0Xv7cmcM
FbUTvSJaxq3hoMStGAwI+o4LIUL39C203FVStRYILjrDvFsDp6F5pbKbSqNBBgX/
zFLkbf57pellnLJL8Ke1CFsP/0RhLpWbuVzEoroJmI17dITfEQyKxi5MwqrydvSg
talxUVn5wmEAiMd2XBSn0s+BW2XcURy6Y6f5jRbuHTS+uu+zOdyCtu6C6lOKQDMT
hEoSCHNZy/1K2g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:40 2025 by rpki-client