Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          3KY7HODYYE7DcmrtdiM394z7bNYUU2+yMXbTfuF8CGU=
Subject key identifier:   3F:32:D9:80:E5:4C:BF:3D:70:3C:92:66:4C:CB:0C:38:F3:E7:33:E7
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       0198D73BDA4B2E8486852860E54F64570B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          0131
Signing time:             Sat 23 Aug 2025 14:01:20 +0000
Manifest this update:     Sat 23 Aug 2025 14:01:20 +0000
Manifest next update:     Sun 24 Aug 2025 14:01:20 +0000
Files and hashes:         1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: i73X+clqNJgvEq9hVVbPTqAwXF4Y8SAUqRGMRVetULE=)
                          2: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=)
                          3: MqKLCRU6qHco-aiXgHxMYY3EIRE.roa (hash: H27r8KGOSsDlSAiFBjBlkIjViM4Z2AjKZDp27Q2HyxY=)
                          4: S0JWHuECsZ6iuktpxbYUQRx-C6w.roa (hash: 98345m9+1a80pFN7NYYUPugpeCnwrYKSTv2S9SSzXYY=)
                          5: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=)
                          6: w18jUtmrOZJRWhemLj9RjwFNsjI.roa (hash: WrHytcRrwStiCvINSnhM6Ft3GSQ1csnMbWLO+Jsyj2w=)
                          7: wXTew-TPkdjNUtvmxaEVQj6UdWw.roa (hash: jAc59kyNNQm0JY9/5rcxdM0o5XwY1mg3VOw5oLtisLk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3b:da:4b:2e:84:86:85:28:60:e5:4f:64:57:0b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Aug 23 14:01:20 2025 GMT
            Not After : Aug 24 14:01:20 2025 GMT
        Subject: CN=3f32d980e54cbf3d703c92664ccb0c38f3e733e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:39:b3:21:cc:1c:56:38:a3:d0:81:ca:7b:
                    c7:b5:7c:93:c1:a8:36:0d:08:03:f0:d9:01:0c:75:
                    59:73:35:e5:c6:ed:d7:30:80:e9:ee:90:56:82:84:
                    89:af:f7:b9:26:e6:25:47:96:c1:b1:95:c4:00:8c:
                    19:a5:85:0d:ee:5a:5f:0e:28:b6:38:cc:07:34:ce:
                    89:13:fc:0f:2e:cb:ea:0b:00:69:31:c0:2e:8f:da:
                    13:34:2f:0a:e1:19:b7:26:97:e0:89:79:bb:aa:33:
                    b4:fc:8b:d6:d4:6c:34:84:95:74:7c:d3:2d:18:c1:
                    42:e6:2f:7f:d1:b2:33:e1:60:eb:16:2e:06:f9:b0:
                    a0:58:fb:28:cd:72:73:26:9e:bd:ae:c9:72:3d:76:
                    c1:9e:02:da:dd:65:08:c2:5c:54:07:56:0e:e1:60:
                    2d:7d:ee:bc:5c:70:b1:8f:86:e6:b0:70:85:81:ee:
                    e5:ca:a4:ac:be:8b:8f:3e:17:1e:e1:19:02:39:75:
                    f9:56:1f:27:35:a9:53:28:b5:30:2f:62:02:d8:09:
                    52:12:9d:bd:d3:df:5c:78:87:00:f4:e4:fb:62:99:
                    4b:63:a9:73:f5:2e:cc:93:9d:9f:a0:52:ce:f7:4e:
                    92:21:ad:e2:1a:3a:82:e9:dd:60:cb:10:e3:c6:fc:
                    03:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:D9:80:E5:4C:BF:3D:70:3C:92:66:4C:CB:0C:38:F3:E7:33:E7
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:a6:26:c8:e7:f3:5a:1a:fe:46:ed:e6:f9:ce:e4:45:72:
         96:d6:6c:de:77:82:b7:eb:9a:3b:d0:3f:fe:f2:7c:c4:85:f6:
         ba:0f:45:b5:8f:2e:8e:43:95:d3:66:1b:d7:5b:05:78:17:bd:
         77:ba:95:23:af:4f:40:5c:67:30:65:cd:9b:6a:93:7c:ff:4f:
         68:d9:ac:1a:46:8b:ca:01:da:e7:c4:42:70:e6:eb:a9:c4:48:
         b5:54:b0:0a:a2:2e:79:ca:f2:60:50:a4:2e:a6:28:e8:79:02:
         0d:40:9c:56:54:42:82:b6:69:a3:95:c3:2f:ba:49:bf:d5:d0:
         d1:5e:31:5d:57:9c:a6:b5:c2:11:35:90:9e:47:80:58:0a:e2:
         e2:d6:e7:ee:b7:98:72:cd:8f:0c:af:f3:bc:36:e3:48:9a:64:
         4c:ea:c9:fb:5f:35:d7:80:52:d5:8b:92:72:09:ae:71:2c:bd:
         d5:82:4e:63:52:54:82:5d:16:14:5d:ba:37:fd:58:81:51:07:
         9a:6e:88:c6:19:46:83:dc:90:f2:b0:fc:2f:45:c9:07:6a:9a:
         f8:58:2c:92:98:70:30:8a:7c:26:37:e6:a6:2b:67:c9:97:c7:
         36:f5:19:05:1e:d4:cc:9a:3d:44:b1:4f:4e:30:2b:22:6a:74:
         6b:9d:34:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO9pLLoSGhShg5U9kVwsaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy
MWY2OTAwHhcNMjUwODIzMTQwMTIwWhcNMjUwODI0MTQwMTIwWjAzMTEwLwYDVQQD
EygzZjMyZDk4MGU1NGNiZjNkNzAzYzkyNjY0Y2NiMGMzOGYzZTczM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQM5syHMHFY4o9CBynvHtXyTwag2
DQgD8NkBDHVZczXlxu3XMIDp7pBWgoSJr/e5JuYlR5bBsZXEAIwZpYUN7lpfDii2
OMwHNM6JE/wPLsvqCwBpMcAuj9oTNC8K4Rm3JpfgiXm7qjO0/IvW1Gw0hJV0fNMt
GMFC5i9/0bIz4WDrFi4G+bCgWPsozXJzJp69rslyPXbBngLa3WUIwlxUB1YO4WAt
fe68XHCxj4bmsHCFge7lyqSsvouPPhce4RkCOXX5Vh8nNalTKLUwL2IC2AlSEp29
099ceIcA9OT7YplLY6lz9S7Mk52foFLO906SIa3iGjqC6d1gyxDjxvwDEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8y2YDlTL89cDySZkzLDDjz5zPnMB8GA1UdIwQY
MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt
NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz
LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWCCmJsjn
81oa/kbt5vnO5EVyltZs3neCt+uaO9A//vJ8xIX2ug9FtY8ujkOV02Yb11sFeBe9
d7qVI69PQFxnMGXNm2qTfP9PaNmsGkaLygHa58RCcObrqcRItVSwCqIuecryYFCk
LqYo6HkCDUCcVlRCgrZpo5XDL7pJv9XQ0V4xXVecprXCETWQnkeAWAri4tbn7reY
cs2PDK/zvDbjSJpkTOrJ+18114BS1YuScgmucSy91YJOY1JUgl0WFF26N/1YgVEH
mm6IxhlGg9yQ8rD8L0XJB2qa+FgskphwMIp8JjfmpitnyZfHNvUZBR7UzJo9RLFP
TjArImp0a500+g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:49 2025 by rpki-client