Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File:                     bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier:          FgRPy7VWZkt3/kbcs1qp5geLOZ7tZrfCXAU4+wGeN5Y=
Subject key identifier:   1F:E1:93:BE:8F:5C:29:93:8C:25:39:D8:7B:CB:53:E2:80:E9:BE:AC
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer:       /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial:       0197C6B818EE126FCA59F77C281E894B6351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number:          15BF
Signing time:             Tue 01 Jul 2025 16:00:43 +0000
Manifest this update:     Tue 01 Jul 2025 16:00:43 +0000
Manifest next update:     Wed 02 Jul 2025 16:00:43 +0000
Files and hashes:         1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
                          2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: el6ZtDMdCU8gQf9hamit28xbHwMqSLA9hpsAOfuQbtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 08:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:18:ee:12:6f:ca:59:f7:7c:28:1e:89:4b:63:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
        Validity
            Not Before: Jul  1 16:00:43 2025 GMT
            Not After : Jul  2 16:00:43 2025 GMT
        Subject: CN=1fe193be8f5c29938c2539d87bcb53e280e9beac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:65:ed:d4:ea:64:18:c5:d9:14:29:74:f8:
                    51:25:80:8e:fa:23:7b:1e:ce:e2:8e:d0:89:6c:80:
                    96:27:8d:98:b1:4a:75:83:8e:3a:67:80:9b:bb:da:
                    e7:ba:29:79:af:39:12:42:66:15:08:56:d7:d5:74:
                    c2:ba:31:1e:57:69:9f:04:0f:fb:ed:a6:11:fc:0f:
                    64:c5:68:33:bd:dd:67:e1:cf:2f:0b:0c:46:7e:cf:
                    9c:9a:d3:de:97:c5:47:2d:39:aa:cb:53:87:fe:d8:
                    7a:1e:80:ff:fd:71:4c:75:67:d6:3f:ed:2c:6e:17:
                    23:ef:9a:a2:01:e0:0f:44:de:9f:ce:b1:76:16:7c:
                    31:a1:07:8f:78:64:ab:9c:95:4b:fb:32:91:8a:b4:
                    02:0c:54:5f:18:4b:48:d8:d1:84:69:9a:f1:c2:f3:
                    51:47:12:fa:3c:12:60:89:8f:ad:e4:32:99:d4:df:
                    2a:d2:9f:bf:14:9e:87:31:50:ba:4b:37:2e:e8:20:
                    42:28:54:eb:19:b1:55:fa:f9:3c:d0:38:4d:40:7c:
                    2e:5c:c5:77:65:41:2a:7e:7f:e7:bb:ce:38:d8:39:
                    88:4a:bf:5e:dc:cd:59:e1:cb:18:f1:e7:7e:f1:c2:
                    53:10:2f:95:ff:1c:55:30:e4:7c:25:23:ef:de:c0:
                    5a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E1:93:BE:8F:5C:29:93:8C:25:39:D8:7B:CB:53:E2:80:E9:BE:AC
            X509v3 Authority Key Identifier:
                keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7f:df:e8:78:63:e6:18:32:79:8b:b8:39:77:be:95:c7:d1:
         94:0b:05:c9:d6:1f:1e:2f:a8:73:9d:09:21:6f:aa:4f:b1:da:
         0c:c4:bc:80:56:13:ad:81:f1:aa:f4:f5:10:2d:1f:d2:43:e0:
         b9:4f:9b:d8:da:a8:93:fa:76:07:4a:10:69:4c:af:eb:c2:f2:
         ef:d3:5d:8e:aa:60:f6:80:97:19:a0:37:47:91:fb:a2:3b:7c:
         b0:f7:7c:e9:b3:46:8a:0c:23:30:6d:86:b4:7b:27:c7:57:5b:
         8d:f4:7c:2d:0a:52:55:25:fc:1e:06:29:d8:e2:f5:88:dd:30:
         95:4d:c6:98:71:9d:ae:9b:99:b6:55:bd:0f:2c:86:2f:45:ca:
         68:bc:51:58:d1:af:fa:1d:01:8a:bf:5b:8a:e4:04:2a:74:1a:
         b6:57:04:ab:7d:14:80:46:f4:77:6e:2f:fa:8f:e1:b1:dc:31:
         71:29:b6:c6:6e:18:59:af:9b:9e:42:d5:6e:1a:82:b4:39:41:
         09:69:ba:22:a4:f9:8c:01:8d:53:e9:73:5e:4a:72:e4:8b:ef:
         96:fc:82:5e:ac:94:2a:43:13:13:f7:24:7a:55:57:58:bb:2a:
         de:f8:da:a8:f2:8b:14:67:7c:20:05:f4:3c:93:4c:85:02:04:
         9c:84:50:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGuBjuEm/KWfd8KB6JS2NRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNDUzYzA5MWY2YzBjYTRiMDJiMWM0Y2ExN2JiNjVkMWRl
MTY4OTUwHhcNMjUwNzAxMTYwMDQzWhcNMjUwNzAyMTYwMDQzWjAzMTEwLwYDVQQD
EygxZmUxOTNiZThmNWMyOTkzOGMyNTM5ZDg3YmNiNTNlMjgwZTliZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZhl7dTqZBjF2RQpdPhRJYCO+iN7
Hs7ijtCJbICWJ42YsUp1g446Z4Cbu9rnuil5rzkSQmYVCFbX1XTCujEeV2mfBA/7
7aYR/A9kxWgzvd1n4c8vCwxGfs+cmtPel8VHLTmqy1OH/th6HoD//XFMdWfWP+0s
bhcj75qiAeAPRN6fzrF2FnwxoQePeGSrnJVL+zKRirQCDFRfGEtI2NGEaZrxwvNR
RxL6PBJgiY+t5DKZ1N8q0p+/FJ6HMVC6Szcu6CBCKFTrGbFV+vk80DhNQHwuXMV3
ZUEqfn/nu8442DmISr9e3M1Z4csY8ed+8cJTEC+V/xxVMOR8JSPv3sBakQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/hk76PXCmTjCU52HvLU+KA6b6sMB8GA1UdIwQY
MBaAFGxFPAkfbAyksCscTKF7tl0d4WiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2Et
YmVjMGU5ZWU0YTI1LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2EtYmVjMGU5ZWU0YTI1
LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgn/f6Hhj
5hgyeYu4OXe+lcfRlAsFydYfHi+oc50JIW+qT7HaDMS8gFYTrYHxqvT1EC0f0kPg
uU+b2Nqok/p2B0oQaUyv68Ly79Ndjqpg9oCXGaA3R5H7ojt8sPd86bNGigwjMG2G
tHsnx1dbjfR8LQpSVSX8HgYp2OL1iN0wlU3GmHGdrpuZtlW9DyyGL0XKaLxRWNGv
+h0Bir9biuQEKnQatlcEq30UgEb0d24v+o/hsdwxcSm2xm4YWa+bnkLVbhqCtDlB
CWm6IqT5jAGNU+lzXkpy5IvvlvyCXqyUKkMTE/ckelVXWLsq3vjaqPKLFGd8IAX0
PJNMhQIEnIRQsA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:55:19 2025 by rpki-client