Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          sMACLKdGll1cJprG02s/QBRYxK3rUcvC9CTYJiEOAsg=
Subject key identifier:   08:C7:FC:49:61:C1:76:B5:20:BF:C3:F0:14:09:65:45:0A:D8:EA:81
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       0199FCC6A5B99955453CD8F5B6C4572FFBAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          1279
Signing time:             Sun 19 Oct 2025 14:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:40 +0000
Files and hashes:         1: 4PcwBZaSEavr4q7nYUzHdazR3dc.roa (hash: k3MqksVJu5YCBeSP7fBQqhMWQJmQ3f0QvgkN1CykB88=)
                          2: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
                          3: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
                          4: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: OMqssasytWknobmSxmgGXK2h+6ufRGlk3xaEGjAuqEA=)
                          5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
                          6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a5:b9:99:55:45:3c:d8:f5:b6:c4:57:2f:fb:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Oct 19 14:01:40 2025 GMT
            Not After : Oct 20 14:01:40 2025 GMT
        Subject: CN=08c7fc4961c176b520bfc3f0140965450ad8ea81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c0:95:67:76:a0:49:bc:ec:22:b6:55:f0:86:
                    c6:e9:39:e1:d3:75:59:71:86:51:b2:af:a2:00:38:
                    a8:72:dc:66:12:17:cc:71:0b:3a:12:74:35:bf:a9:
                    d3:aa:98:94:27:52:4c:29:ec:18:c9:ae:72:b6:75:
                    96:fa:cd:5a:f4:36:f0:c4:e0:82:83:6d:c1:a6:4a:
                    a2:82:d0:4a:c3:e5:85:b9:7e:c4:8c:bc:cc:65:6a:
                    4f:3a:ab:98:33:26:30:9e:ac:53:a5:d6:b4:40:73:
                    00:5f:11:d1:01:28:c7:a5:a3:be:64:be:e8:13:54:
                    7f:9e:26:de:bc:40:21:7e:c5:2a:fc:a2:76:15:ec:
                    90:88:ae:59:6c:14:75:47:c3:38:d7:51:86:32:57:
                    9c:6d:c4:43:40:81:f7:d4:ce:23:3f:f5:2d:58:3c:
                    51:57:b7:25:5a:9d:56:fd:0c:aa:0f:88:a1:07:01:
                    ac:ef:8c:5b:57:37:66:6d:13:32:3f:76:a9:5d:db:
                    49:42:4b:97:98:a8:7a:1d:49:72:2b:f3:68:1c:f3:
                    e0:4d:c7:dc:2f:28:c0:50:9f:d5:1a:e2:2a:fa:97:
                    d6:7b:d8:a9:78:40:25:63:11:85:46:24:37:c4:53:
                    5b:83:18:ad:22:76:00:0d:ad:39:1e:cc:9a:9d:33:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:C7:FC:49:61:C1:76:B5:20:BF:C3:F0:14:09:65:45:0A:D8:EA:81
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0d:5f:b7:17:35:b7:99:f2:9d:20:6f:91:47:87:7e:ef:7b:
         87:ac:7b:40:b3:dd:de:3e:8c:12:67:61:ff:3d:2b:1e:9a:bd:
         d6:cf:cb:92:85:f7:80:82:76:ae:ea:34:fe:f8:57:98:da:9d:
         e5:2c:0f:fd:a3:6c:6d:f2:e5:df:05:24:cc:4a:5b:37:44:6a:
         65:d2:cb:39:43:da:ea:c9:06:bc:ab:52:31:01:56:09:64:4d:
         d9:7e:d5:db:75:42:12:52:04:37:68:58:ee:08:4c:8f:c2:d4:
         b1:42:67:be:01:24:47:6b:c0:c2:a1:18:04:98:ce:9a:6c:6b:
         1b:23:9d:04:74:6c:72:f4:c2:d3:15:f3:46:e9:2f:f4:62:dc:
         3f:c7:b4:84:cf:ee:38:df:a3:25:b4:10:2a:c8:c0:92:27:e6:
         e4:ce:56:fd:6b:3e:bc:15:74:7b:87:01:05:fe:d3:e2:38:77:
         48:6f:4c:f5:54:f2:fc:e8:0c:68:9d:4a:ed:10:6b:aa:24:8b:
         b9:75:37:d0:eb:12:30:7f:13:76:c0:94:41:da:fb:cd:6a:d4:
         6d:ec:f5:35:87:51:01:d5:17:42:5e:3b:ad:ee:d0:75:fc:ab:
         de:38:03:1f:90:b5:22:d6:56:e2:30:e8:58:07:3b:d3:24:44:
         ec:8e:87:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xqW5mVVFPNj1tsRXL/uuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz
Yjc5MjYwHhcNMjUxMDE5MTQwMTQwWhcNMjUxMDIwMTQwMTQwWjAzMTEwLwYDVQQD
EygwOGM3ZmM0OTYxYzE3NmI1MjBiZmMzZjAxNDA5NjU0NTBhZDhlYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsCVZ3agSbzsIrZV8IbG6Tnh03VZ
cYZRsq+iADioctxmEhfMcQs6EnQ1v6nTqpiUJ1JMKewYya5ytnWW+s1a9DbwxOCC
g23BpkqigtBKw+WFuX7EjLzMZWpPOquYMyYwnqxTpda0QHMAXxHRASjHpaO+ZL7o
E1R/nibevEAhfsUq/KJ2FeyQiK5ZbBR1R8M411GGMlecbcRDQIH31M4jP/UtWDxR
V7clWp1W/QyqD4ihBwGs74xbVzdmbRMyP3apXdtJQkuXmKh6HUlyK/NoHPPgTcfc
LyjAUJ/VGuIq+pfWe9ipeEAlYxGFRiQ3xFNbgxitInYADa05HsyanTPxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAjH/ElhwXa1IL/D8BQJZUUK2OqBMB8GA1UdIwQY
MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt
ZDQ0MmM0ZjllOWJkLzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk
LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQ1ftxc1
t5nynSBvkUeHfu97h6x7QLPd3j6MEmdh/z0rHpq91s/LkoX3gIJ2ruo0/vhXmNqd
5SwP/aNsbfLl3wUkzEpbN0RqZdLLOUPa6skGvKtSMQFWCWRN2X7V23VCElIEN2hY
7ghMj8LUsUJnvgEkR2vAwqEYBJjOmmxrGyOdBHRscvTC0xXzRukv9GLcP8e0hM/u
ON+jJbQQKsjAkifm5M5W/Ws+vBV0e4cBBf7T4jh3SG9M9VTy/OgMaJ1K7RBrqiSL
uXU30OsSMH8TdsCUQdr7zWrUbez1NYdRAdUXQl47re7Qdfyr3jgDH5C1ItZW4jDo
WAc70yRE7I6Hew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:40 2025 by rpki-client