Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File:                     BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier:          BDIBXHU23uxEDaUGrWwLgrMDcVPKqkM74m9xyobCiu8=
Subject key identifier:   C6:7C:20:C3:37:1D:E6:70:92:8D:8C:6F:3D:AC:DA:E9:4A:9F:8A:4C
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer:       /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial:       0198D4E034310063F2638CC4687EA4A2A804
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number:          031A
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: XN4cfiokdxqgwVcSOvhCxNZXGGlzT/FRDBdioyQWxrs=)
                          2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:34:31:00:63:f2:63:8c:c4:68:7e:a4:a2:a8:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=c67c20c3371de670928d8c6f3dacdae94a9f8a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:80:66:5c:f8:80:e6:73:72:36:48:2d:fd:
                    62:4b:8f:44:e2:ed:e9:07:93:65:7f:60:31:b5:bb:
                    9c:e0:c4:43:a2:94:dc:e1:60:ef:ff:03:b9:be:61:
                    79:fc:e1:ee:59:36:e7:c9:65:7d:cb:f9:96:06:7b:
                    54:fd:c6:84:6e:1f:02:11:6b:b6:b7:98:7a:92:f6:
                    64:0b:5d:dc:d5:23:9d:5b:d6:69:cb:22:0b:cc:f8:
                    bb:eb:26:50:37:28:5c:4b:73:f4:9d:33:e7:92:1b:
                    b0:65:a9:a3:b6:e3:b6:aa:89:73:48:87:bc:45:99:
                    4d:b4:36:1b:70:45:6e:53:ea:be:8d:a2:40:0b:8f:
                    90:16:f5:ca:a1:2c:28:34:90:27:3d:67:e7:af:17:
                    87:e8:77:d3:bb:33:83:26:ff:fb:65:22:02:09:f0:
                    6d:bc:9e:fe:1a:c7:95:b1:3f:5e:de:57:ff:e2:15:
                    b1:4d:d7:9e:b0:70:98:d0:92:c2:ee:f1:56:00:be:
                    46:38:cd:33:bb:1b:46:2e:81:a9:c4:cb:bc:f0:72:
                    a5:fa:c0:00:6a:46:50:36:82:2b:10:6c:08:15:e2:
                    f7:af:29:1d:83:c9:0d:34:2f:33:a8:12:8d:d5:6e:
                    12:4c:62:2a:4c:e6:92:e4:d6:7b:c6:d3:9f:b0:9e:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:20:C3:37:1D:E6:70:92:8D:8C:6F:3D:AC:DA:E9:4A:9F:8A:4C
            X509v3 Authority Key Identifier:
                keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:6e:4a:f8:df:5d:9d:96:aa:d6:dd:b4:a0:d6:75:31:b5:7e:
         0e:ba:13:4a:ed:50:be:8c:a5:d3:c5:09:1d:ec:c8:fb:97:1d:
         d4:1c:8f:1d:d4:79:b2:b3:08:38:2a:5b:4a:e7:9a:f1:35:ae:
         e5:b3:70:ab:88:66:80:df:dd:92:03:7a:3c:f6:c1:52:eb:8a:
         e0:9c:8d:40:b3:6e:d2:c7:50:17:6f:bf:84:4e:82:cf:1d:80:
         03:1c:83:01:6b:d8:2b:cb:41:76:b1:13:3b:7d:92:9c:4c:c9:
         db:f9:62:8e:2e:36:3b:30:a4:31:9b:6c:38:d1:5a:7d:8f:97:
         50:81:9c:4c:dd:c2:c3:11:75:51:e9:6a:63:3e:4b:98:f1:bf:
         9c:df:57:df:79:e9:64:49:73:cf:80:68:67:45:30:51:87:24:
         4c:62:b5:a6:3a:ae:e2:ed:e6:6d:2d:71:54:fb:e2:38:57:dc:
         41:c9:7e:73:37:e1:6a:e7:83:f5:66:67:27:33:48:0b:d0:d6:
         62:d0:78:3f:74:bd:37:a7:7d:11:fe:c7:37:f0:8e:04:d7:17:
         21:53:16:f0:e2:d6:76:0d:29:5b:3d:14:45:c5:60:23:89:01:
         4a:20:3a:9f:d8:30:11:61:1f:57:be:15:85:e5:93:ba:bc:a9:
         21:ea:bd:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4DQxAGPyY4zEaH6koqgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTYwN2E4NjhkYWY0ODQ2MjQ1ZjNjOGJiZjllYmU3Njk4
MjlhZDkwHhcNMjUwODIzMDMwMTU5WhcNMjUwODI0MDMwMTU5WjAzMTEwLwYDVQQD
EyhjNjdjMjBjMzM3MWRlNjcwOTI4ZDhjNmYzZGFjZGFlOTRhOWY4YTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKyAZlz4gOZzcjZILf1iS49E4u3p
B5Nlf2Axtbuc4MRDopTc4WDv/wO5vmF5/OHuWTbnyWV9y/mWBntU/caEbh8CEWu2
t5h6kvZkC13c1SOdW9ZpyyILzPi76yZQNyhcS3P0nTPnkhuwZamjtuO2qolzSIe8
RZlNtDYbcEVuU+q+jaJAC4+QFvXKoSwoNJAnPWfnrxeH6HfTuzODJv/7ZSICCfBt
vJ7+GseVsT9e3lf/4hWxTdeesHCY0JLC7vFWAL5GOM0zuxtGLoGpxMu88HKl+sAA
akZQNoIrEGwIFeL3rykdg8kNNC8zqBKN1W4STGIqTOaS5NZ7xtOfsJ7NkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZ8IMM3HeZwko2Mbz2s2ulKn4pMMB8GA1UdIwQY
MBaAFAUWB6ho2vSEYkXzyLv56+dpgprZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEt
NzJjZmRhYTk1OWEyLzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNzA3MTAtZmRkNy00MTQ2LTk4MjEtNzJjZmRhYTk1OWEy
LzEvQlJZSHFHamE5SVJpUmZQSXVfbnI1Mm1DbXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm5K+N9d
nZaq1t20oNZ1MbV+DroTSu1Qvoyl08UJHezI+5cd1ByPHdR5srMIOCpbSuea8TWu
5bNwq4hmgN/dkgN6PPbBUuuK4JyNQLNu0sdQF2+/hE6Czx2AAxyDAWvYK8tBdrET
O32SnEzJ2/liji42OzCkMZtsONFafY+XUIGcTN3CwxF1UelqYz5LmPG/nN9X33np
ZElzz4BoZ0UwUYckTGK1pjqu4u3mbS1xVPviOFfcQcl+czfhaueD9WZnJzNIC9DW
YtB4P3S9N6d9Ef7HN/COBNcXIVMW8OLWdg0pWz0URcVgI4kBSiA6n9gwEWEfV74V
heWTurypIeq9Bg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:00 2025 by rpki-client