Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
File:                     1-BogUgUmddRTm4f1-5xpTb9DJh4.mft (raw, json)
Hash identifier:          bN92hAb4BhcQDziikuHxk1tX6ZRWAJKbWtm6wY0Wh1U=
Subject key identifier:   6C:2F:E6:D3:04:3B:0C:74:3B:F2:43:A8:A4:26:EC:C0:12:71:9F:B9
Authority key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Certificate issuer:       /CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Certificate serial:       0198D4E00357720437B72A9B080571DA5843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
Manifest number:          0C9B
Signing time:             Sat 23 Aug 2025 03:01:47 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:47 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:47 +0000
Files and hashes:         1: 1-BogUgUmddRTm4f1-5xpTb9DJh4.crl (hash: MaqROSo+KGuXem0HvaKX2buLVSNPzA/IM5g1xn8fYSk=)
                          2: FAKXs32RTJhJGvnWYSpaYh74Joo.roa (hash: GNLsP2LR6gKVvZU85Er+QUF1ICOlY9gVJmojhgR/T8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:03:57:72:04:37:b7:2a:9b:08:05:71:da:58:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
        Validity
            Not Before: Aug 23 03:01:47 2025 GMT
            Not After : Aug 24 03:01:47 2025 GMT
        Subject: CN=6c2fe6d3043b0c743bf243a8a426ecc012719fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:d5:9f:a6:36:7a:be:15:66:64:97:32:fc:
                    f9:4c:45:e7:dd:4d:4c:f1:60:a0:ef:a5:b7:32:77:
                    46:33:b4:97:90:ae:88:c4:ab:f8:cc:a0:60:12:81:
                    fe:c6:ed:34:19:f8:64:32:33:c8:cc:ee:a0:61:03:
                    f5:0c:03:03:d0:13:7a:a2:e3:fd:ab:bb:ce:30:4d:
                    57:a9:3e:10:9b:09:c7:6c:8a:f1:a6:d3:a9:fa:2a:
                    51:33:97:58:0f:42:c7:b3:25:53:f7:df:cc:d8:74:
                    8b:10:66:89:ba:1a:3f:c0:44:87:96:7c:da:15:a9:
                    0e:ae:95:b1:fc:66:73:7f:84:6c:62:a6:9a:7b:55:
                    e0:b5:cd:33:e3:9a:0f:72:dc:6a:83:84:1e:81:d0:
                    8e:2c:ca:bf:05:e6:56:bc:8a:0a:e1:85:0a:bc:5b:
                    f6:91:bf:ab:15:32:b6:98:10:92:21:8e:d5:59:88:
                    f0:fb:5a:1b:5a:cb:00:21:38:5f:f4:fd:66:51:fd:
                    73:01:41:f5:06:f8:af:15:d4:27:aa:69:d5:99:96:
                    d9:7d:7d:7d:85:a3:b3:a2:74:a3:41:7a:4b:a6:11:
                    b7:d8:ab:30:a6:ef:bb:4d:4d:97:83:79:34:f6:c4:
                    71:a9:ee:48:c7:9d:c3:46:1c:e8:2e:32:21:a7:c8:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2F:E6:D3:04:3B:0C:74:3B:F2:43:A8:A4:26:EC:C0:12:71:9F:B9
            X509v3 Authority Key Identifier:
                keyid:F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:db:21:9b:d8:63:6c:2e:a7:a6:09:9d:8d:44:23:12:53:
         3c:e4:d7:22:6e:9a:57:8f:02:7d:1f:bf:29:5e:0d:b1:33:8d:
         32:e5:7d:5c:09:7a:14:e2:16:36:9a:b7:90:12:b0:66:2b:30:
         4a:50:fe:10:04:9e:99:20:ea:04:a7:41:df:f3:6f:2e:0c:1c:
         c1:84:28:af:a9:ba:a7:b4:5f:de:00:2d:0e:43:4f:32:7b:fd:
         37:33:1b:6f:ad:32:de:45:4a:c4:db:30:71:6a:7e:29:15:ab:
         27:d0:87:1b:f7:d3:15:e9:4a:39:44:c2:00:ac:f1:79:79:46:
         e1:4f:d9:1a:a7:e6:c6:0f:dd:7c:bb:88:cf:b8:c4:d0:c7:3f:
         51:d6:03:67:f5:f9:13:2e:27:53:33:59:51:a1:96:64:c5:89:
         ac:dc:52:f3:96:d3:5c:0f:87:50:d1:52:2c:ff:cb:1a:0e:a2:
         c7:07:26:bf:77:a0:09:1f:1f:36:23:73:9f:fa:ea:db:cb:bd:
         9f:42:56:ca:85:68:a2:de:fa:5e:1f:07:f4:a9:8c:36:08:cb:
         09:f6:33:f6:6e:a6:17:ad:9b:7e:0a:0a:80:90:6d:d3:f2:27:
         07:55:9f:19:e5:52:09:0b:d0:e4:b9:42:a7:26:67:cf:a8:dc:
         02:1f:23:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZjU4ANXcgQ3tyqbCAVx2lhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4MWEyMDUyMDUyNjc1ZDQ1MzliODdmNWZiOWM2OTRkYmY0
MzI2MWUwHhcNMjUwODIzMDMwMTQ3WhcNMjUwODI0MDMwMTQ3WjAzMTEwLwYDVQQD
Eyg2YzJmZTZkMzA0M2IwYzc0M2JmMjQzYThhNDI2ZWNjMDEyNzE5ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfTVn6Y2er4VZmSXMvz5TEXn3U1M
8WCg76W3MndGM7SXkK6IxKv4zKBgEoH+xu00GfhkMjPIzO6gYQP1DAMD0BN6ouP9
q7vOME1XqT4QmwnHbIrxptOp+ipRM5dYD0LHsyVT99/M2HSLEGaJuho/wESHlnza
FakOrpWx/GZzf4RsYqaae1Xgtc0z45oPctxqg4QegdCOLMq/BeZWvIoK4YUKvFv2
kb+rFTK2mBCSIY7VWYjw+1obWssAIThf9P1mUf1zAUH1BvivFdQnqmnVmZbZfX19
haOzonSjQXpLphG32Kswpu+7TU2Xg3k09sRxqe5Ix53DRhzoLjIhp8gYJwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGwv5tMEOwx0O/JDqKQm7MAScZ+5MB8GA1UdIwQY
MBaAFPgaIFIFJnXUU5uH9fucaU2/QyYeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Cb2dVZ1VtZGRSVG00ZjEtNXhwVGI5REpoNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvMGRmMmVmLWZmYzktNDQ1Ny05ZjRh
LTc3MTJmYmYxNjFjMS8xLzEtQm9nVWdVbWRkUlRtNGYxLTV4cFRiOURKaDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ5LzBkZjJlZi1mZmM5LTQ0NTctOWY0YS03NzEyZmJmMTYx
YzEvMS8xLUJvZ1VnVW1kZFJUbTRmMS01eHBUYjlESmg0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4Hb
IZvYY2wup6YJnY1EIxJTPOTXIm6aV48CfR+/KV4NsTONMuV9XAl6FOIWNpq3kBKw
ZiswSlD+EASemSDqBKdB3/NvLgwcwYQor6m6p7Rf3gAtDkNPMnv9NzMbb60y3kVK
xNswcWp+KRWrJ9CHG/fTFelKOUTCAKzxeXlG4U/ZGqfmxg/dfLuIz7jE0Mc/UdYD
Z/X5Ey4nUzNZUaGWZMWJrNxS85bTXA+HUNFSLP/LGg6ixwcmv3egCR8fNiNzn/rq
28u9n0JWyoVoot76Xh8H9KmMNgjLCfYz9m6mF62bfgoKgJBt0/InB1WfGeVSCQvQ
5LlCpyZnz6jcAh8jzw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:23 2025 by rpki-client