Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
File:                     boSxI5O_yw5tbzLMlcDXEXT8mzA.mft (raw, json)
Hash identifier:          DcqOYOTk1pJwj5scFj0kPG6P49jzFw4i3Q12I2RjkmQ=
Subject key identifier:   52:15:FE:91:1F:83:43:07:D5:9A:B2:EC:BA:9B:24:DF:91:B2:68:32
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Certificate issuer:       /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial:       0198D4A7AEF2C6BC9C5683D6B298D8905769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
Manifest number:          164E
Signing time:             Sat 23 Aug 2025 02:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:15 +0000
Files and hashes:         1: Ws5DKPvqbwWmiknqYjYd59bVY2o.roa (hash: YBEW16WVtIIoX5bJxlmYLW0GT3fXf0v/AYf7w0McGNc=)
                          2: boSxI5O_yw5tbzLMlcDXEXT8mzA.crl (hash: E997HhqVXmMcDxPj8sjmmwmFdP2nnYVUavqMRczrgfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:ae:f2:c6:bc:9c:56:83:d6:b2:98:d8:90:57:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
        Validity
            Not Before: Aug 23 02:00:15 2025 GMT
            Not After : Aug 24 02:00:15 2025 GMT
        Subject: CN=5215fe911f834307d59ab2ecba9b24df91b26832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:a3:06:dd:be:e7:dc:f1:49:71:26:16:3e:
                    ca:e6:a4:ba:2a:b7:dd:8e:a5:8b:43:be:9a:4b:98:
                    e8:21:47:c0:da:4b:2c:97:23:d7:e6:79:5e:b1:af:
                    1e:53:21:a0:8f:7d:89:bb:dc:ad:51:17:a0:77:4c:
                    e5:63:c0:3f:fb:a2:42:4f:ca:91:09:9c:51:23:9a:
                    ea:ea:4d:c9:28:dc:3b:12:d8:84:81:6b:c0:1b:1d:
                    7b:3d:1d:b4:db:58:11:35:24:2e:ef:f3:ab:6b:27:
                    c4:f2:f8:3a:21:0d:cf:e1:93:0e:96:d2:10:97:c2:
                    b5:84:de:18:4e:e6:eb:9e:a1:21:57:75:ea:2f:35:
                    8c:9d:27:53:b8:50:cd:f7:be:d7:88:1f:b0:1f:8d:
                    c9:12:c1:67:ca:8e:05:35:31:86:62:22:16:1e:69:
                    d2:7f:72:6b:51:24:97:f8:1c:63:79:0f:fb:f4:a2:
                    62:3e:60:da:00:ab:04:e6:86:2f:74:dc:c0:f0:0e:
                    a4:05:5e:57:2c:e6:82:6e:4e:27:c6:9e:98:16:12:
                    8e:4e:da:26:97:35:6e:5a:3e:dd:68:4d:cf:64:67:
                    b2:c6:34:34:0a:b1:c2:2d:ad:70:19:14:6b:ca:c0:
                    a8:17:68:27:0c:f4:a0:4c:eb:b2:de:f6:6a:1b:51:
                    ea:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:FE:91:1F:83:43:07:D5:9A:B2:EC:BA:9B:24:DF:91:B2:68:32
            X509v3 Authority Key Identifier:
                keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d6:3d:df:43:d1:9f:b9:23:ac:94:2f:bc:96:f0:7e:e0:09:
         fd:e2:60:21:31:a5:53:d6:6a:d7:2b:d2:87:fa:e3:bb:09:db:
         af:04:c8:a6:79:f3:57:12:92:db:7d:53:e5:e7:03:83:a3:c2:
         b8:08:9f:36:99:17:68:11:e2:57:21:c5:cb:21:97:45:ba:87:
         c6:ea:cb:ab:e5:ac:c2:a8:42:e9:a8:84:7c:0b:ad:8d:d6:96:
         7b:a5:70:d8:42:bc:d1:7c:30:26:41:30:58:78:9a:80:68:17:
         6a:f8:fb:ea:7a:83:63:40:01:d6:a1:1a:da:c9:49:09:c3:cb:
         69:a3:f4:57:98:50:8d:a7:14:56:0b:8c:13:00:f4:e9:59:4a:
         fa:08:d1:91:0f:68:d8:84:36:ef:b2:ab:ac:59:10:2e:b8:77:
         5a:7c:c8:7d:35:79:c7:e3:e4:0d:56:11:2e:87:df:7e:bb:df:
         a3:7d:b3:a6:49:c2:15:b0:98:c6:34:a3:0b:ef:84:06:0d:56:
         dc:64:20:32:45:ba:d4:91:89:04:14:9b:42:d3:b2:e1:55:cd:
         11:96:1f:8f:60:eb:32:87:c1:a4:e3:f5:32:3b:c1:38:12:dc:
         1c:c5:fc:23:2b:33:6e:b1:42:95:b7:8c:91:4d:e8:82:2a:2c:
         6b:24:3d:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp67yxrycVoPWspjYkFdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODRiMTIzOTNiZmNiMGU2ZDZmMzJjYzk1YzBkNzExNzRm
YzliMzAwHhcNMjUwODIzMDIwMDE1WhcNMjUwODI0MDIwMDE1WjAzMTEwLwYDVQQD
Eyg1MjE1ZmU5MTFmODM0MzA3ZDU5YWIyZWNiYTliMjRkZjkxYjI2ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm6jBt2+59zxSXEmFj7K5qS6Krfd
jqWLQ76aS5joIUfA2ksslyPX5nlesa8eUyGgj32Ju9ytURegd0zlY8A/+6JCT8qR
CZxRI5rq6k3JKNw7EtiEgWvAGx17PR2021gRNSQu7/OrayfE8vg6IQ3P4ZMOltIQ
l8K1hN4YTubrnqEhV3XqLzWMnSdTuFDN977XiB+wH43JEsFnyo4FNTGGYiIWHmnS
f3JrUSSX+BxjeQ/79KJiPmDaAKsE5oYvdNzA8A6kBV5XLOaCbk4nxp6YFhKOTtom
lzVuWj7daE3PZGeyxjQ0CrHCLa1wGRRrysCoF2gnDPSgTOuy3vZqG1HqdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIV/pEfg0MH1Zqy7LqbJN+RsmgyMB8GA1UdIwQY
MBaAFG6EsSOTv8sObW8yzJXA1xF0/JswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQt
NmRlNmQxOGNjMzlmLzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yNGQ3YWQtODNmMS00ZjE0LWFhMWQtNmRlNmQxOGNjMzlm
LzEvYm9TeEk1T195dzV0YnpMTWxjRFhFWFQ4bXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxdY930PR
n7kjrJQvvJbwfuAJ/eJgITGlU9Zq1yvSh/rjuwnbrwTIpnnzVxKS231T5ecDg6PC
uAifNpkXaBHiVyHFyyGXRbqHxurLq+WswqhC6aiEfAutjdaWe6Vw2EK80XwwJkEw
WHiagGgXavj76nqDY0AB1qEa2slJCcPLaaP0V5hQjacUVguMEwD06VlK+gjRkQ9o
2IQ277KrrFkQLrh3WnzIfTV5x+PkDVYRLofffrvfo32zpknCFbCYxjSjC++EBg1W
3GQgMkW61JGJBBSbQtOy4VXNEZYfj2DrMofBpOP1MjvBOBLcHMX8IyszbrFClbeM
kU3ogiosayQ9rg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:57 2025 by rpki-client