Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
File:                     bfwUOO4IFam_i3P5p87QlPIax54.mft (raw, json)
Hash identifier:          3sDYYAmRKZXVihBgYxxzNm66SiggMpmgXwv4521lQNY=
Subject key identifier:   E3:9B:A5:D3:62:14:34:0C:C2:3B:87:48:A2:63:39:15:EF:BE:CC:E5
Authority key identifier: 6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E
Certificate issuer:       /CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
Certificate serial:       0199FBEBE5EC8AEF3B009AC542984E0F3FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
Manifest number:          0A32
Signing time:             Sun 19 Oct 2025 10:02:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:44 +0000
Files and hashes:         1: D9a5tzSXaB3YCXB51ESBfxmocyM.roa (hash: PgS49lglth99HhTvLssigXqfh7TfLNAP1ou+sfSqOKE=)
                          2: UBhFR3OZMj_R8VlXXyVrvKRDJfU.roa (hash: rvFp0ktgwJ1/3eTonU7/7v6UyJ5UYW+gGNm92KfeHQY=)
                          3: bfwUOO4IFam_i3P5p87QlPIax54.crl (hash: EZJN4LDCtJdJ+lsYwHGIHA6sBrKqQuhAVxmYM1QU6eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e5:ec:8a:ef:3b:00:9a:c5:42:98:4e:0f:3f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc1438ee0815a9bf8b73f9a7ced094f21ac79e
        Validity
            Not Before: Oct 19 10:02:44 2025 GMT
            Not After : Oct 20 10:02:44 2025 GMT
        Subject: CN=e39ba5d36214340cc23b8748a2633915efbecce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:43:7d:32:f3:6f:29:ce:ff:40:37:e1:37:
                    f7:f4:8d:d5:e7:80:30:e1:97:d6:ce:fd:7d:3d:a9:
                    cc:28:93:f0:ef:cc:c0:f4:6d:d0:14:5c:9c:b9:c5:
                    3e:90:25:5e:49:cb:eb:23:2b:51:a7:1f:59:b5:1a:
                    4e:32:48:ed:9f:59:c5:1c:28:6c:50:76:98:d4:c3:
                    99:80:f8:6e:04:35:a4:f2:97:49:60:ad:b1:b7:98:
                    76:32:ce:97:7b:f8:79:3e:60:4a:4f:29:f5:9d:d4:
                    6a:b9:c8:d5:77:b2:b4:41:11:16:8b:b4:ba:59:5f:
                    7f:ee:43:cd:95:80:e9:d5:5f:02:7e:38:b7:6b:c9:
                    14:a6:c6:a4:d2:99:8d:7c:01:63:2f:4a:dc:53:9b:
                    27:fb:7f:4a:a6:c3:bf:e3:57:cc:b2:69:fb:5c:e4:
                    d3:7d:68:ca:6e:f1:81:b2:91:8f:7a:49:6b:40:34:
                    43:3f:aa:97:6a:33:0a:6f:32:df:89:3c:b5:3c:f9:
                    0b:a5:04:6f:2b:68:87:63:fd:c9:71:1a:56:8a:f5:
                    64:0f:db:11:d0:8d:62:c3:71:2a:b1:62:3a:52:c1:
                    4f:41:af:ac:49:38:11:76:98:d9:d4:19:d2:cb:4b:
                    61:83:64:e5:c3:14:30:ca:58:bd:bd:b9:45:bb:81:
                    f3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:9B:A5:D3:62:14:34:0C:C2:3B:87:48:A2:63:39:15:EF:BE:CC:E5
            X509v3 Authority Key Identifier:
                keyid:6D:FC:14:38:EE:08:15:A9:BF:8B:73:F9:A7:CE:D0:94:F2:1A:C7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfwUOO4IFam_i3P5p87QlPIax54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2f98cb-6d94-48a1-8dba-d646767c5f13/1/bfwUOO4IFam_i3P5p87QlPIax54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c5:40:90:ff:69:ed:61:ea:be:49:65:4b:a4:25:94:58:83:
         67:3c:e4:3b:43:d8:fc:6d:4a:00:6e:3d:f9:20:cd:79:89:cd:
         89:1f:a1:d8:c8:6d:51:d0:34:d0:d6:d9:43:4c:47:aa:89:ae:
         76:55:24:0f:f2:37:ea:1a:5f:2f:c1:23:eb:35:cc:db:a2:77:
         ae:f4:a9:21:6d:82:38:c6:9d:0f:9c:33:01:12:5f:c9:65:a4:
         04:40:16:84:e4:dd:42:50:54:16:0c:69:0a:9e:49:e7:c6:58:
         26:f4:7f:08:c2:e2:ba:10:88:10:d6:98:cd:45:d3:f7:d3:ad:
         c0:1c:a2:ec:92:9c:fd:6f:df:76:e5:fd:0f:d1:b4:2a:32:25:
         7f:b3:d8:db:18:d4:f4:2c:45:97:c7:a4:d5:e6:db:98:57:13:
         24:29:98:26:b7:83:22:0d:c5:93:b4:57:51:3f:e9:0c:0b:49:
         9e:2c:c2:71:26:99:ab:0d:e6:32:44:b8:4b:fb:e7:bd:95:11:
         27:c5:28:4a:bd:ac:ff:4b:a4:41:b9:bf:7d:ac:8f:f8:5a:0b:
         71:30:6e:d9:b7:16:91:f5:dd:65:c6:8d:3d:0e:ec:ea:48:d4:
         55:08:37:76:e3:6c:d7:9d:c9:92:3b:58:93:c4:32:de:eb:a1:
         96:bf:58:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76+Xsiu87AJrFQphODz/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMxNDM4ZWUwODE1YTliZjhiNzNmOWE3Y2VkMDk0ZjIx
YWM3OWUwHhcNMjUxMDE5MTAwMjQ0WhcNMjUxMDIwMTAwMjQ0WjAzMTEwLwYDVQQD
EyhlMzliYTVkMzYyMTQzNDBjYzIzYjg3NDhhMjYzMzkxNWVmYmVjY2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsztDfTLzbynO/0A34Tf39I3V54Aw
4ZfWzv19PanMKJPw78zA9G3QFFycucU+kCVeScvrIytRpx9ZtRpOMkjtn1nFHChs
UHaY1MOZgPhuBDWk8pdJYK2xt5h2Ms6Xe/h5PmBKTyn1ndRqucjVd7K0QREWi7S6
WV9/7kPNlYDp1V8Cfji3a8kUpsak0pmNfAFjL0rcU5sn+39KpsO/41fMsmn7XOTT
fWjKbvGBspGPeklrQDRDP6qXajMKbzLfiTy1PPkLpQRvK2iHY/3JcRpWivVkD9sR
0I1iw3EqsWI6UsFPQa+sSTgRdpjZ1BnSy0thg2TlwxQwyli9vblFu4HzNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOObpdNiFDQMwjuHSKJjORXvvszlMB8GA1UdIwQY
MBaAFG38FDjuCBWpv4tz+afO0JTyGseeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEt
ZDY0Njc2N2M1ZjEzLzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8yZjk4Y2ItNmQ5NC00OGExLThkYmEtZDY0Njc2N2M1ZjEz
LzEvYmZ3VU9PNElGYW1faTNQNXA4N1FsUElheDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8VAkP9p
7WHqvkllS6QllFiDZzzkO0PY/G1KAG49+SDNeYnNiR+h2MhtUdA00NbZQ0xHqomu
dlUkD/I36hpfL8Ej6zXM26J3rvSpIW2COMadD5wzARJfyWWkBEAWhOTdQlBUFgxp
Cp5J58ZYJvR/CMLiuhCIENaYzUXT99OtwByi7JKc/W/fduX9D9G0KjIlf7PY2xjU
9CxFl8ek1ebbmFcTJCmYJreDIg3Fk7RXUT/pDAtJnizCcSaZqw3mMkS4S/vnvZUR
J8UoSr2s/0ukQbm/fayP+FoLcTBu2bcWkfXdZcaNPQ7s6kjUVQg3duNs153JkjtY
k8Qy3uuhlr9Y1Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:12 2025 by rpki-client