Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
File:                     bPlqfAHWLjes7PB4b2SXiQUSFkc.mft (raw, json)
Hash identifier:          9xeKBZpfbaXnLIkvLr8oR7LAuqamvad4tWBp6b4kYCo=
Subject key identifier:   87:B2:94:53:76:00:2A:21:58:CE:23:54:05:48:89:3B:2E:EE:3E:C5
Authority key identifier: 6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47
Certificate issuer:       /CN=6cf96a7c01d62e37acecf0786f64978905121647
Certificate serial:       0197B7EA21F55543E54B76DC3A6D3B91DAA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 19:01:04 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:04 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:04 +0000
Files and hashes:         1: MPfjjHiW5RCCQLGoqV4SDUyXeMs.roa (hash: Y2fZJZKn10InnxGKnVnqAmc8EguVTfd+z1YpmsbQgEo=)
                          2: TrY4v3NhxFVwxgTD-Y4gD2336Kc.roa (hash: nCbc7sJSjISh7d4Jw47iX87H7og+ireTFEgeVDSgXYU=)
                          3: bPlqfAHWLjes7PB4b2SXiQUSFkc.crl (hash: h25bD9WyuZb/JlOtpbkZhSUSJRsnDMU35jR6VrR8lWg=)
                          4: iMxQ2AOySk_FZxXcjfPe4fAEOGg.roa (hash: zaY98e3Y+bpnfMZKNHgnuKftqgMn0QZNLBsrc2JhQww=)
                          5: mAifwF8GUv7G8ELn9OeFpxHYEK8.roa (hash: PG25x/zzal7YNB1dwfK9vMIqUeHjak2merNPumiM3Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:21:f5:55:43:e5:4b:76:dc:3a:6d:3b:91:da:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf96a7c01d62e37acecf0786f64978905121647
        Validity
            Not Before: Jun 28 19:01:04 2025 GMT
            Not After : Jun 29 19:01:04 2025 GMT
        Subject: CN=87b2945376002a2158ce23540548893b2eee3ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f4:67:8e:f5:3a:1c:d7:88:78:52:2f:af:56:
                    2e:2b:d6:78:34:17:a4:21:db:be:fc:ed:1d:5f:30:
                    48:dc:c6:04:9d:ec:03:8d:b6:67:dd:a3:c7:0b:de:
                    08:28:14:71:ac:a7:bc:24:47:ec:12:e2:aa:ea:92:
                    06:33:1c:48:00:30:1d:cc:5d:19:6e:9c:82:74:7c:
                    8a:71:fe:88:2d:9e:fc:e8:33:7c:05:8f:77:54:56:
                    94:53:07:a9:08:35:66:b9:58:b0:f9:f0:9f:31:f3:
                    24:d1:6b:7c:c5:77:d9:a7:40:76:28:d5:2e:39:ed:
                    52:c0:41:10:06:fa:0b:c2:33:4d:76:c8:11:c6:66:
                    60:78:63:b6:63:e8:d0:7b:a7:0d:94:f8:7e:69:17:
                    6f:19:75:53:bf:ae:d4:1d:6e:d4:8c:11:46:ae:2c:
                    cf:1f:93:96:6e:90:28:ca:cd:7d:ad:6a:2c:af:17:
                    33:ec:4b:0b:1e:55:b8:94:6b:fc:42:39:c5:a6:73:
                    ea:93:1f:47:11:3a:61:a8:34:e2:ae:41:92:35:af:
                    d0:54:54:23:ef:a7:f3:9f:12:31:bb:02:e7:18:78:
                    81:ce:80:43:30:f8:d7:53:d0:39:6b:05:fa:1c:8e:
                    9d:37:1b:ff:3e:f1:8d:82:bd:72:f9:35:89:d2:56:
                    2a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B2:94:53:76:00:2A:21:58:CE:23:54:05:48:89:3B:2E:EE:3E:C5
            X509v3 Authority Key Identifier:
                keyid:6C:F9:6A:7C:01:D6:2E:37:AC:EC:F0:78:6F:64:97:89:05:12:16:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPlqfAHWLjes7PB4b2SXiQUSFkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5f0f06-56f4-41a5-889a-b15b3fbc04a6/1/bPlqfAHWLjes7PB4b2SXiQUSFkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:23:70:96:ac:7a:d9:cc:0b:de:e4:03:2c:b2:da:a2:dd:a9:
         9c:bd:57:dd:13:c3:bd:42:2a:b7:cd:22:0e:d1:c7:b0:42:82:
         aa:cb:af:8d:b5:40:39:01:c9:c3:f9:b9:39:66:bd:b3:23:b6:
         ae:77:3a:a5:ba:89:9f:5b:6b:51:85:c0:c2:ce:8e:77:3c:e9:
         5f:15:c1:ed:2a:e3:d4:7a:84:c3:63:f4:2a:84:fb:f6:3d:1c:
         cc:8c:af:1f:41:91:e3:28:f6:99:1e:04:9f:58:48:36:d1:fd:
         2c:25:1f:0b:a8:fc:f7:cc:93:26:05:86:20:b5:c6:61:d4:39:
         a9:62:58:ad:ca:77:c2:68:19:ed:fe:ab:77:e4:a9:cf:ce:8f:
         4d:0f:f1:ed:fb:06:9a:79:e2:ed:f2:d2:d8:7c:58:b6:ef:d1:
         13:d8:26:fd:11:2f:6c:fb:20:73:e3:e5:0a:cd:b1:4d:1c:49:
         f7:ac:f7:06:3e:7f:bf:43:7c:6e:29:0b:df:ba:6d:74:72:04:
         46:32:f5:4c:f4:6f:6a:3a:29:c3:6b:b3:e2:bd:15:cf:d5:4e:
         9a:a0:45:30:22:f5:21:86:7e:bc:67:fa:c3:88:5b:17:7e:3d:
         36:a3:c7:cd:72:a3:f2:05:0d:fa:b9:85:7f:ee:0f:c6:15:c9:
         8d:61:f0:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36iH1VUPlS3bcOm07kdqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjk2YTdjMDFkNjJlMzdhY2VjZjA3ODZmNjQ5Nzg5MDUx
MjE2NDcwHhcNMjUwNjI4MTkwMTA0WhcNMjUwNjI5MTkwMTA0WjAzMTEwLwYDVQQD
Eyg4N2IyOTQ1Mzc2MDAyYTIxNThjZTIzNTQwNTQ4ODkzYjJlZWUzZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfRnjvU6HNeIeFIvr1YuK9Z4NBek
Idu+/O0dXzBI3MYEnewDjbZn3aPHC94IKBRxrKe8JEfsEuKq6pIGMxxIADAdzF0Z
bpyCdHyKcf6ILZ786DN8BY93VFaUUwepCDVmuViw+fCfMfMk0Wt8xXfZp0B2KNUu
Oe1SwEEQBvoLwjNNdsgRxmZgeGO2Y+jQe6cNlPh+aRdvGXVTv67UHW7UjBFGrizP
H5OWbpAoys19rWosrxcz7EsLHlW4lGv8QjnFpnPqkx9HETphqDTirkGSNa/QVFQj
76fznxIxuwLnGHiBzoBDMPjXU9A5awX6HI6dNxv/PvGNgr1y+TWJ0lYq7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeylFN2ACohWM4jVAVIiTsu7j7FMB8GA1UdIwQY
MBaAFGz5anwB1i43rOzweG9kl4kFEhZHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEt
YjE1YjNmYmMwNGE2LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy81ZjBmMDYtNTZmNC00MWE1LTg4OWEtYjE1YjNmYmMwNGE2
LzEvYlBscWZBSFdMamVzN1BCNGIyU1hpUVVTRmtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAviNwlqx6
2cwL3uQDLLLaot2pnL1X3RPDvUIqt80iDtHHsEKCqsuvjbVAOQHJw/m5OWa9syO2
rnc6pbqJn1trUYXAws6OdzzpXxXB7Srj1HqEw2P0KoT79j0czIyvH0GR4yj2mR4E
n1hINtH9LCUfC6j898yTJgWGILXGYdQ5qWJYrcp3wmgZ7f6rd+Spz86PTQ/x7fsG
mnni7fLS2HxYtu/RE9gm/REvbPsgc+PlCs2xTRxJ96z3Bj5/v0N8bikL37ptdHIE
RjL1TPRvajopw2uz4r0Vz9VOmqBFMCL1IYZ+vGf6w4hbF349NqPHzXKj8gUN+rmF
f+4PxhXJjWHwnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:49 2025 by rpki-client