Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
File:                     boByUGD_SztVrN5qOXwx7ql8I3w.mft (raw, json)
Hash identifier:          MSEiLy1D2jUzkhXoGthWvI4Spd9YMIt4yPmz1NydO3U=
Subject key identifier:   B7:DE:40:A0:65:F1:3B:49:7A:34:DC:B0:E7:D4:52:6D:65:51:C6:85
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Certificate issuer:       /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial:       01977D1E29E62B611318F76DF737F553DE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
Manifest number:          0895
Signing time:             Tue 17 Jun 2025 09:00:18 +0000
Manifest this update:     Tue 17 Jun 2025 09:00:18 +0000
Manifest next update:     Wed 18 Jun 2025 09:00:18 +0000
Files and hashes:         1: G5hDxevfZCHIynIb7kl9zkkafFo.roa (hash: 8zV/uIn4iieWxxlFcNsO96ew34Z1C3Yh+YZ7EOCmJ5k=)
                          2: boByUGD_SztVrN5qOXwx7ql8I3w.crl (hash: ROOAaTZ8SqjfwCHZ2j8qFvkx4fjtq/weWXsU0g/RPww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 09:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7d:1e:29:e6:2b:61:13:18:f7:6d:f7:37:f5:53:de:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
        Validity
            Not Before: Jun 17 09:00:18 2025 GMT
            Not After : Jun 18 09:00:18 2025 GMT
        Subject: CN=b7de40a065f13b497a34dcb0e7d4526d6551c685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:e7:64:05:62:92:ab:b5:ea:53:57:65:30:
                    83:f0:13:32:15:e5:ee:c4:21:43:58:45:46:29:cd:
                    f2:c3:a3:26:c5:11:3e:b2:e5:fd:5b:8a:52:ee:8a:
                    d8:5a:4d:22:d3:f9:ba:83:b7:46:c3:62:91:ea:2c:
                    96:f0:74:03:33:e7:b8:23:17:91:2d:20:c9:be:a9:
                    fa:79:0f:f1:48:ba:1a:bc:8e:1e:2a:79:b7:63:65:
                    52:e1:a7:03:32:1d:fb:48:27:fe:d7:85:e3:a0:a9:
                    90:40:c8:8c:9c:7b:02:75:33:27:31:a9:4f:b7:53:
                    21:eb:06:de:a4:88:6c:dc:8f:47:4c:bd:7e:6a:0c:
                    7f:ef:06:e3:86:bd:13:da:a4:1a:0c:91:67:81:81:
                    90:38:ef:ae:89:fe:21:97:f6:63:19:16:33:18:10:
                    d4:c1:ba:77:da:c6:b0:30:d8:1d:ef:81:d2:d4:be:
                    00:7a:b5:bf:4e:2f:1c:71:1c:e2:5d:70:ff:f8:33:
                    f4:06:7a:15:62:7e:a4:68:54:fc:03:86:e4:b9:08:
                    5c:96:bd:88:07:29:ad:7e:ad:36:e0:20:22:46:c4:
                    11:68:b9:a3:41:74:93:c7:86:b1:7a:20:8c:a4:5b:
                    0a:5c:cb:f2:22:6d:38:11:ad:59:14:2e:ee:c4:70:
                    7a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DE:40:A0:65:F1:3B:49:7A:34:DC:B0:E7:D4:52:6D:65:51:C6:85
            X509v3 Authority Key Identifier:
                keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:e5:1b:b3:5d:fe:69:24:e1:6c:67:4d:b8:38:89:b8:85:53:
         51:05:9e:d2:58:52:d4:a6:90:17:0d:f3:49:bb:81:f7:89:1b:
         a6:7e:53:3e:c7:c3:63:17:d0:6c:81:7c:39:c8:50:80:9f:eb:
         ce:94:19:00:78:52:bf:f2:d8:7b:00:74:93:4b:9e:53:c0:56:
         00:a0:31:c6:4a:c3:cf:6b:79:7e:f9:65:44:f0:b5:67:5f:6d:
         1a:f1:c4:77:8c:e4:c7:0f:30:49:97:76:a2:fd:4d:be:2b:0d:
         82:97:8e:eb:29:d2:d4:a8:ae:56:6e:0d:c1:8e:46:e3:ef:db:
         6b:95:bc:fe:11:8d:40:d4:13:6a:51:8a:8c:ac:46:ba:0f:6a:
         dc:ca:66:f9:d6:3e:82:f3:a8:2a:94:6f:cc:2b:76:8c:95:29:
         b9:85:f9:f1:19:35:c3:4f:89:0c:2f:44:88:73:1c:e3:7f:fb:
         0b:0b:06:17:b6:dc:d7:59:b1:8f:aa:3a:32:00:28:34:53:5e:
         6c:66:9a:5d:16:bf:48:2e:b7:2b:1e:cf:e4:ec:59:ad:5a:4c:
         e7:ae:c3:35:2f:de:e2:2e:c2:39:0e:eb:c3:7b:76:12:77:a5:
         41:cf:69:90:cd:da:35:d9:f8:49:7d:ba:d5:d9:6c:b8:1f:a9:
         7f:22:3b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9HinmK2ETGPdt9zf1U94JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjUwNjE3MDkwMDE4WhcNMjUwNjE4MDkwMDE4WjAzMTEwLwYDVQQD
EyhiN2RlNDBhMDY1ZjEzYjQ5N2EzNGRjYjBlN2Q0NTI2ZDY1NTFjNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxDnZAVikqu16lNXZTCD8BMyFeXu
xCFDWEVGKc3yw6MmxRE+suX9W4pS7orYWk0i0/m6g7dGw2KR6iyW8HQDM+e4IxeR
LSDJvqn6eQ/xSLoavI4eKnm3Y2VS4acDMh37SCf+14XjoKmQQMiMnHsCdTMnMalP
t1Mh6wbepIhs3I9HTL1+agx/7wbjhr0T2qQaDJFngYGQOO+uif4hl/ZjGRYzGBDU
wbp32sawMNgd74HS1L4AerW/Ti8ccRziXXD/+DP0BnoVYn6kaFT8A4bkuQhclr2I
Bymtfq024CAiRsQRaLmjQXSTx4axeiCMpFsKXMvyIm04Ea1ZFC7uxHB6fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfeQKBl8TtJejTcsOfUUm1lUcaFMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYtNTMzMzVkYTBjZmQz
LzEvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeUbs13+
aSThbGdNuDiJuIVTUQWe0lhS1KaQFw3zSbuB94kbpn5TPsfDYxfQbIF8OchQgJ/r
zpQZAHhSv/LYewB0k0ueU8BWAKAxxkrDz2t5fvllRPC1Z19tGvHEd4zkxw8wSZd2
ov1NvisNgpeO6ynS1KiuVm4NwY5G4+/ba5W8/hGNQNQTalGKjKxGug9q3Mpm+dY+
gvOoKpRvzCt2jJUpuYX58Rk1w0+JDC9EiHMc43/7CwsGF7bc11mxj6o6MgAoNFNe
bGaaXRa/SC63Kx7P5OxZrVpM567DNS/e4i7COQ7rw3t2EnelQc9pkM3aNdn4SX26
1dlsuB+pfyI7lQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:19:00 2025 by rpki-client