Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          DKJpW06xaktStnKeo+Y5+nFciTpirL8kRnnC1EksvNg=
Subject key identifier:   B1:DB:19:01:4C:0E:3B:7D:CC:D5:BC:56:96:64:7B:B4:6A:0F:D8:49
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       0198D705D56305B4EF1EA530762846D833AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          1654
Signing time:             Sat 23 Aug 2025 13:02:20 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:20 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:20 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: 14fUxo7hHVZrq/x+JWpTnP4vMyLS0XzZKkdj/AOfrsc=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:d5:63:05:b4:ef:1e:a5:30:76:28:46:d8:33:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Aug 23 13:02:20 2025 GMT
            Not After : Aug 24 13:02:20 2025 GMT
        Subject: CN=b1db19014c0e3b7dccd5bc5696647bb46a0fd849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a4:40:32:79:09:48:c4:df:3f:ff:c5:5d:77:
                    f1:df:e7:df:e7:4b:07:d6:d0:ce:08:69:bf:2b:e0:
                    78:25:9c:9b:88:3a:61:1e:a6:ae:7d:d3:78:18:5f:
                    61:11:d7:e8:d6:3e:6e:79:e1:6d:49:bd:7b:b4:b4:
                    c4:26:08:8e:bf:a8:d3:09:29:ae:61:59:57:27:ba:
                    6d:77:6c:d7:39:4c:81:ba:22:2c:cd:fd:a5:35:d4:
                    54:86:c6:db:9a:56:51:47:e0:dc:f4:88:b1:5a:d7:
                    a5:18:d4:08:3b:49:95:29:c2:7b:ed:b1:36:74:91:
                    2c:fb:ab:f9:a3:66:fa:2b:0c:fc:a7:49:52:1a:61:
                    c2:c1:0e:de:ca:e8:fd:28:03:dc:3c:fb:a3:7e:df:
                    7b:37:47:74:83:dd:52:3e:87:db:d0:f6:9b:99:78:
                    86:7b:4a:2b:17:ea:7f:57:b9:6a:56:b7:b2:16:a3:
                    7d:51:3a:bf:85:42:28:76:53:33:e7:bd:eb:7e:cf:
                    19:94:64:2c:de:00:1a:73:5b:22:30:a8:50:37:85:
                    e9:c1:24:82:53:0e:81:3c:bd:75:53:2c:01:72:90:
                    41:92:c2:74:77:f4:43:91:91:0a:2b:ed:fd:4f:0e:
                    12:43:b8:fe:f1:29:3a:96:07:a6:23:04:9e:41:24:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DB:19:01:4C:0E:3B:7D:CC:D5:BC:56:96:64:7B:B4:6A:0F:D8:49
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:a2:7b:ce:c8:62:d2:86:bb:c6:2b:a2:74:8d:ad:3e:eb:
         20:b8:dc:3e:ce:f2:cc:ac:f4:6f:5b:ba:0a:66:d1:06:33:87:
         ff:8c:fd:43:db:04:d1:f9:5b:9d:a4:fd:55:bc:1c:61:6d:49:
         82:5f:51:57:11:f7:c8:d3:98:3a:08:cc:5a:16:73:e0:f0:02:
         9a:b1:b1:28:28:67:8f:48:8d:ea:34:42:04:5f:a4:61:d8:a0:
         a9:69:d0:49:20:af:45:0f:7c:c7:fa:8a:ed:2c:8b:49:8a:aa:
         a6:c2:07:96:13:78:15:49:85:22:fe:6b:b6:6b:29:64:7c:e6:
         46:b9:44:dc:57:21:83:cd:8a:9e:88:eb:e7:55:5f:bf:7f:32:
         a0:6f:87:49:33:07:2e:6c:2f:71:70:cd:eb:15:fe:32:aa:1b:
         f1:98:cd:92:ff:b1:3c:ca:52:3e:d8:7e:d9:e0:da:92:d4:38:
         fe:07:8c:b2:5b:0e:8d:01:ee:5b:30:bb:0f:aa:7a:0e:d2:24:
         c9:3a:51:fd:f3:cf:76:a8:29:53:6a:a9:60:d2:ba:04:8d:75:
         e9:7d:c1:f1:ca:a1:de:9b:e4:1c:78:bd:02:6d:b4:31:38:e2:
         59:11:c3:2b:05:6f:f0:4e:ee:82:65:f8:ad:8d:05:d4:f8:ab:
         2a:2a:d1:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBdVjBbTvHqUwdihG2DOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZGExYzZiMWE2NWY3YTNkOTdmOWJkNzVlN2NhYzMxMzUy
NDZmYTUwHhcNMjUwODIzMTMwMjIwWhcNMjUwODI0MTMwMjIwWjAzMTEwLwYDVQQD
EyhiMWRiMTkwMTRjMGUzYjdkY2NkNWJjNTY5NjY0N2JiNDZhMGZkODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqRAMnkJSMTfP//FXXfx3+ff50sH
1tDOCGm/K+B4JZybiDphHqaufdN4GF9hEdfo1j5ueeFtSb17tLTEJgiOv6jTCSmu
YVlXJ7ptd2zXOUyBuiIszf2lNdRUhsbbmlZRR+Dc9IixWtelGNQIO0mVKcJ77bE2
dJEs+6v5o2b6Kwz8p0lSGmHCwQ7eyuj9KAPcPPujft97N0d0g91SPofb0PabmXiG
e0orF+p/V7lqVreyFqN9UTq/hUIodlMz573rfs8ZlGQs3gAac1siMKhQN4XpwSSC
Uw6BPL11UywBcpBBksJ0d/RDkZEKK+39Tw4SQ7j+8Sk6lgemIwSeQSSZYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHbGQFMDjt9zNW8VpZke7RqD9hJMB8GA1UdIwQY
MBaAFAbaHGsaZfej2X+b1158rDE1JG+lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjIt
NDVlYjczOGNiOWM4LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MmEzYjEtMTE3ZC00YjE3LTk2NjItNDVlYjczOGNiOWM4
LzEvQnRvY2F4cGw5NlBaZjV2WFhueXNNVFVrYjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtSie87I
YtKGu8YronSNrT7rILjcPs7yzKz0b1u6CmbRBjOH/4z9Q9sE0flbnaT9VbwcYW1J
gl9RVxH3yNOYOgjMWhZz4PACmrGxKChnj0iN6jRCBF+kYdigqWnQSSCvRQ98x/qK
7SyLSYqqpsIHlhN4FUmFIv5rtmspZHzmRrlE3Fchg82Knojr51Vfv38yoG+HSTMH
LmwvcXDN6xX+Mqob8ZjNkv+xPMpSPth+2eDaktQ4/geMslsOjQHuWzC7D6p6DtIk
yTpR/fPPdqgpU2qpYNK6BI116X3B8cqh3pvkHHi9Am20MTjiWRHDKwVv8E7ugmX4
rY0F1PirKirRSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:30 2025 by rpki-client