Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
File:                     BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json)
Hash identifier:          FwhAoMR+7eG+2tr1RFpfWwxrliw32qt6YH0V4BMURMM=
Subject key identifier:   D9:DB:11:5F:72:A6:5C:21:34:8E:3A:D7:80:F8:C4:14:17:01:42:3C
Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20
Certificate issuer:       /CN=04268ae40737536a464c28493eaf503db9a18f20
Certificate serial:       0196729D46C896CA33D70EE31DAC8BAED72E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
Manifest number:          144D
Signing time:             Sat 26 Apr 2025 15:00:31 +0000
Manifest this update:     Sat 26 Apr 2025 15:00:31 +0000
Manifest next update:     Sun 27 Apr 2025 15:00:31 +0000
Files and hashes:         1: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: /n9pDXMHKZplJJbNxeh/nc1OGkmP4f3MzOP/PtIQ+fc=)
                          2: CLXmnDFSTo8gYOSfsi36Eul40PU.roa (hash: 8Z8KtVhkqNicLx/HNFdK6oyXYk9JSXXv8S9J27mq/xY=)
                          3: lZAakdp_BLG_rPCj1oo9i4pPv2Q.roa (hash: 1gPUwLHqyRYBWV9FA/ZpZB+VDiIwSRS3XaQWbg+vKSc=)
                          4: pzYaLDX-85nYF2riSdG9v-AKZYM.roa (hash: EygpfdGwPkKz8M66wN+etr5plBuJkHzB1mglzx/9MuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:72:9d:46:c8:96:ca:33:d7:0e:e3:1d:ac:8b:ae:d7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20
        Validity
            Not Before: Apr 26 15:00:31 2025 GMT
            Not After : Apr 27 15:00:31 2025 GMT
        Subject: CN=d9db115f72a65c21348e3ad780f8c4141701423c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c1:28:de:b1:f3:f9:e9:e9:18:70:4d:c8:43:
                    1d:76:56:a3:7a:1e:d1:86:5f:35:bb:a3:aa:18:16:
                    4b:1c:32:ec:22:4d:70:72:49:d7:f8:48:52:bc:fe:
                    10:4d:f5:cc:4a:64:7c:b0:d7:77:ae:d2:84:ab:49:
                    07:0b:fd:a6:6d:07:88:55:b1:01:48:0e:9d:ba:e9:
                    75:72:d2:cf:b9:5b:d5:38:ee:38:8e:39:89:26:e6:
                    4f:85:bf:88:44:44:05:e0:96:48:6d:f0:e5:94:42:
                    ff:8e:c3:91:d0:97:ac:56:05:de:32:e7:74:79:d3:
                    78:bd:51:e9:23:de:f0:cb:a7:3d:38:ea:23:a3:aa:
                    72:37:da:cc:be:9c:19:a9:63:d6:8d:30:4e:0e:04:
                    99:8b:5a:df:99:0d:c8:18:0d:fb:8c:74:39:59:ee:
                    0e:27:e3:bc:aa:f7:21:d7:f7:0c:cc:7a:67:07:88:
                    ea:ed:74:ff:76:ea:bb:92:c9:19:e0:3c:62:80:c8:
                    bf:43:f0:f2:b6:f9:8b:22:3b:fe:55:e0:77:c5:70:
                    f7:96:82:ab:2e:05:4e:a2:6a:51:e4:12:86:2e:c0:
                    07:19:2f:b0:c4:31:3e:c8:6b:32:4a:fe:0f:2a:30:
                    d3:91:c2:f1:e5:e2:dc:80:18:84:05:66:75:d0:71:
                    33:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DB:11:5F:72:A6:5C:21:34:8E:3A:D7:80:F8:C4:14:17:01:42:3C
            X509v3 Authority Key Identifier:
                keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fd:7a:1e:20:10:08:c2:8c:d0:f2:64:6b:a4:20:ba:7a:2d:
         50:fc:e4:40:4b:17:0a:15:29:3c:23:d8:7f:fb:ce:91:b2:70:
         49:52:32:98:a4:8c:6a:3c:42:51:14:58:85:37:b6:3f:30:bf:
         a0:19:80:20:66:46:4a:23:04:0c:ae:22:a0:f9:c0:67:bc:ce:
         20:c2:ea:d7:fd:d2:14:8c:fd:d4:a0:73:35:c3:a0:85:6a:87:
         79:e9:59:46:63:cc:2e:7d:7f:ca:f3:a1:a9:d7:2c:14:d9:1f:
         e9:30:34:40:03:7b:3a:76:79:27:84:68:83:e6:58:da:53:4b:
         2a:7c:c2:1b:87:59:4c:fd:d2:57:ad:0b:17:fb:88:bf:01:a4:
         4a:fc:e5:f2:4d:ef:dd:4d:15:f5:b9:0c:69:67:8b:d8:8d:1d:
         54:99:09:7a:de:62:ab:4d:cf:da:61:e9:dc:9b:46:0d:bf:9f:
         4f:20:02:5f:b2:2f:72:76:33:1e:66:5f:ae:5a:92:88:e9:91:
         c6:90:ec:cf:9d:1d:83:07:36:13:75:1d:2f:19:ef:44:d9:df:
         b3:bb:19:1c:48:cd:cd:5f:cd:8c:b0:86:71:2a:96:27:8c:a3:
         20:7b:19:e4:26:ee:fb:c4:21:f7:d1:bb:78:32:9f:a4:a0:78:
         d8:5c:96:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZynUbIlsoz1w7jHayLrtcuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh
MThmMjAwHhcNMjUwNDI2MTUwMDMxWhcNMjUwNDI3MTUwMDMxWjAzMTEwLwYDVQQD
EyhkOWRiMTE1ZjcyYTY1YzIxMzQ4ZTNhZDc4MGY4YzQxNDE3MDE0MjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsEo3rHz+enpGHBNyEMddlajeh7R
hl81u6OqGBZLHDLsIk1wcknX+EhSvP4QTfXMSmR8sNd3rtKEq0kHC/2mbQeIVbEB
SA6duul1ctLPuVvVOO44jjmJJuZPhb+IREQF4JZIbfDllEL/jsOR0JesVgXeMud0
edN4vVHpI97wy6c9OOojo6pyN9rMvpwZqWPWjTBODgSZi1rfmQ3IGA37jHQ5We4O
J+O8qvch1/cMzHpnB4jq7XT/duq7kskZ4DxigMi/Q/DytvmLIjv+VeB3xXD3loKr
LgVOompR5BKGLsAHGS+wxDE+yGsySv4PKjDTkcLx5eLcgBiEBWZ10HEzawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnbEV9yplwhNI4614D4xBQXAUI8MB8GA1UdIwQY
MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt
ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx
LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWf16HiAQ
CMKM0PJka6QgunotUPzkQEsXChUpPCPYf/vOkbJwSVIymKSMajxCURRYhTe2PzC/
oBmAIGZGSiMEDK4ioPnAZ7zOIMLq1/3SFIz91KBzNcOghWqHeelZRmPMLn1/yvOh
qdcsFNkf6TA0QAN7OnZ5J4Rog+ZY2lNLKnzCG4dZTP3SV60LF/uIvwGkSvzl8k3v
3U0V9bkMaWeL2I0dVJkJet5iq03P2mHp3JtGDb+fTyACX7IvcnYzHmZfrlqSiOmR
xpDsz50dgwc2E3UdLxnvRNnfs7sZHEjNzV/NjLCGcSqWJ4yjIHsZ5Cbu+8Qh99G7
eDKfpKB42FyWZg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:15:14 2025 by rpki-client