Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
File:                     tBW-756h3Udywu6VJ2HWVdmGUCY.mft (raw, json)
Hash identifier:          sg3n/ZStBv1UGdPq6DmXt5RqTB432mJCUx5CLlGC0uE=
Subject key identifier:   52:D3:9C:FE:C0:C9:4F:D5:A6:C2:83:A6:25:48:ED:CC:E4:E3:9B:5E
Authority key identifier: B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26
Certificate issuer:       /CN=b415beef9ea1dd4772c2ee952761d655d9865026
Certificate serial:       0197C124A4F7A4930B3338E79638F956AEA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
Manifest number:          15C1
Signing time:             Mon 30 Jun 2025 14:01:33 +0000
Manifest this update:     Mon 30 Jun 2025 14:01:33 +0000
Manifest next update:     Tue 01 Jul 2025 14:01:33 +0000
Files and hashes:         1: 0geUHc19NNaDsvmjgLb1gNOrEbQ.roa (hash: NWxuANUmBjc/z+ICKyxtOl6ZHIhQCmMbyKrbsYf09/k=)
                          2: tBW-756h3Udywu6VJ2HWVdmGUCY.crl (hash: 8wF9fhLTeDftDe+Jv49JqUA/yeBApkcTmutTx09V3X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:24:a4:f7:a4:93:0b:33:38:e7:96:38:f9:56:ae:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b415beef9ea1dd4772c2ee952761d655d9865026
        Validity
            Not Before: Jun 30 14:01:33 2025 GMT
            Not After : Jul  1 14:01:33 2025 GMT
        Subject: CN=52d39cfec0c94fd5a6c283a62548edcce4e39b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:15:85:66:ff:1b:8b:2b:0f:35:7a:bd:4e:
                    19:d8:ea:59:e8:a8:9b:22:7c:f8:7c:40:a0:fe:5c:
                    7c:92:8a:67:cc:4e:a1:d0:57:be:49:2f:c6:4b:b4:
                    ed:4f:73:89:df:e8:07:7d:dd:f5:e2:d1:71:41:1c:
                    4f:53:0c:b3:ce:a2:55:d6:00:d4:12:42:28:30:5d:
                    8b:2d:e0:65:25:82:ad:70:e9:35:64:a3:2e:90:8f:
                    9d:47:b7:de:96:38:93:64:b3:8f:88:14:58:4f:41:
                    53:85:03:14:46:7a:5a:a2:32:f1:6c:5e:d4:84:a5:
                    6e:be:22:4f:9a:ee:5b:66:52:16:db:d3:68:ab:7b:
                    c1:72:70:2d:01:75:45:b2:9a:e4:64:e3:c4:39:3e:
                    9d:7f:13:cd:69:bd:58:fb:0e:a6:6a:3c:22:db:a0:
                    1a:35:a7:93:ce:27:b5:c4:bc:7c:e4:e9:ae:23:63:
                    26:25:07:5a:b5:db:f6:a9:ca:4a:a9:bf:1b:0b:06:
                    61:9d:70:05:c7:c6:fd:23:43:3b:e4:52:a3:9d:89:
                    1c:41:d3:92:42:9c:54:ce:21:34:5a:88:af:db:4e:
                    1e:e2:b5:68:70:02:ca:71:2f:96:e4:bc:de:ba:5c:
                    d5:6b:8c:58:cd:bc:f0:3a:8c:ca:89:73:74:1e:12:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:9C:FE:C0:C9:4F:D5:A6:C2:83:A6:25:48:ED:CC:E4:E3:9B:5E
            X509v3 Authority Key Identifier:
                keyid:B4:15:BE:EF:9E:A1:DD:47:72:C2:EE:95:27:61:D6:55:D9:86:50:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBW-756h3Udywu6VJ2HWVdmGUCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bf1283-8d1b-4b1a-b9d9-0e195ec65b72/1/tBW-756h3Udywu6VJ2HWVdmGUCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:5d:e6:31:7d:10:2c:70:55:f3:9a:fa:7b:e5:bb:d2:4c:
         32:25:10:1e:d9:cb:f4:c3:71:ab:d8:8e:25:76:bf:b3:d3:eb:
         fb:f4:18:78:e3:dc:98:5a:9b:23:53:3e:b5:85:22:81:c5:fc:
         90:e4:6f:64:4f:93:1b:3d:78:1b:05:64:c4:83:97:b9:55:16:
         30:cc:cb:b8:41:b7:cb:06:cb:5c:16:1e:da:0b:9b:a0:df:20:
         c8:7b:5a:ed:33:8c:e3:a2:12:52:37:5c:10:d1:84:e8:1b:d2:
         8f:fb:1e:62:47:d1:17:7a:0a:94:3a:6d:54:61:7b:81:7e:00:
         f6:e2:2c:5f:44:4c:f6:94:4c:4c:ad:80:de:f6:5e:35:62:a2:
         77:23:95:59:b4:8e:7b:c6:bb:09:33:fe:b7:3a:24:b8:cd:35:
         e2:0c:fb:69:0e:84:36:91:ea:20:20:ff:bf:c1:2f:81:26:bc:
         d0:56:cc:ec:13:6c:7b:d0:41:da:6a:ee:ee:40:9d:08:5b:a2:
         8d:22:8f:51:a1:07:bc:67:c3:1a:d2:b2:46:ec:23:96:0b:92:
         3c:0b:e9:c5:b8:b1:dc:8b:e1:69:3f:c0:47:f7:90:96:7e:1c:
         20:71:48:f2:ab:86:90:28:cc:c0:42:a0:2c:31:9c:e4:18:82:
         c5:a5:01:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfBJKT3pJMLMzjnljj5Vq6nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MTViZWVmOWVhMWRkNDc3MmMyZWU5NTI3NjFkNjU1ZDk4
NjUwMjYwHhcNMjUwNjMwMTQwMTMzWhcNMjUwNzAxMTQwMTMzWjAzMTEwLwYDVQQD
Eyg1MmQzOWNmZWMwYzk0ZmQ1YTZjMjgzYTYyNTQ4ZWRjY2U0ZTM5YjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQcVhWb/G4srDzV6vU4Z2OpZ6Kib
Inz4fECg/lx8kopnzE6h0Fe+SS/GS7TtT3OJ3+gHfd314tFxQRxPUwyzzqJV1gDU
EkIoMF2LLeBlJYKtcOk1ZKMukI+dR7feljiTZLOPiBRYT0FThQMURnpaojLxbF7U
hKVuviJPmu5bZlIW29Noq3vBcnAtAXVFsprkZOPEOT6dfxPNab1Y+w6majwi26Aa
NaeTzie1xLx85OmuI2MmJQdatdv2qcpKqb8bCwZhnXAFx8b9I0M75FKjnYkcQdOS
QpxUziE0Woiv204e4rVocALKcS+W5LzeulzVa4xYzbzwOozKiXN0HhJLQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLTnP7AyU/VpsKDpiVI7czk45teMB8GA1UdIwQY
MBaAFLQVvu+eod1HcsLulSdh1lXZhlAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDkt
MGUxOTVlYzY1YjcyLzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZjEyODMtOGQxYi00YjFhLWI5ZDktMGUxOTVlYzY1Yjcy
LzEvdEJXLTc1NmgzVWR5d3U2VkoySFdWZG1HVUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUH1d5jF9
ECxwVfOa+nvlu9JMMiUQHtnL9MNxq9iOJXa/s9Pr+/QYeOPcmFqbI1M+tYUigcX8
kORvZE+TGz14GwVkxIOXuVUWMMzLuEG3ywbLXBYe2guboN8gyHta7TOM46ISUjdc
ENGE6BvSj/seYkfRF3oKlDptVGF7gX4A9uIsX0RM9pRMTK2A3vZeNWKidyOVWbSO
e8a7CTP+tzokuM014gz7aQ6ENpHqICD/v8EvgSa80FbM7BNse9BB2mru7kCdCFui
jSKPUaEHvGfDGtKyRuwjlguSPAvpxbix3IvhaT/AR/eQln4cIHFI8quGkCjMwEKg
LDGc5BiCxaUBbg==
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:51:40 2025 by rpki-client