Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
File:                     buKspS4zrI1YnzIhdZLNHmm_cEw.mft (raw, json)
Hash identifier:          AD+xT2UQSN58sY9whOY/BaAL9UR9x073IHpSZImclyA=
Subject key identifier:   6D:C5:D8:08:B4:75:5D:D1:65:19:63:93:87:B5:B2:27:47:4F:A3:D4
Authority key identifier: 6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C
Certificate issuer:       /CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
Certificate serial:       0198D5161FED7067DC38D6F3928C31947089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 04:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:53 +0000
Files and hashes:         1: buKspS4zrI1YnzIhdZLNHmm_cEw.crl (hash: 6akmaBI/qLEcbUpc8PKlSqKpybLtiEyiW9BXNrP79OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:1f:ed:70:67:dc:38:d6:f3:92:8c:31:94:70:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ee2aca52e33ac8d589f32217592cd1e69bf704c
        Validity
            Not Before: Aug 23 04:00:53 2025 GMT
            Not After : Aug 24 04:00:53 2025 GMT
        Subject: CN=6dc5d808b4755dd16519639387b5b227474fa3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:05:70:62:c2:d9:ed:a0:a1:5a:21:25:f2:
                    09:df:cd:de:4e:70:63:e1:6e:fb:8c:7a:7e:6c:79:
                    f7:33:f8:78:b7:a9:97:8f:02:63:42:d1:d9:a8:dd:
                    2b:c5:f4:9b:d1:58:f5:8f:2c:c7:c0:c6:0f:79:e5:
                    8d:cf:96:d1:36:96:43:cf:c0:0f:e6:57:b7:a1:90:
                    99:b3:00:40:62:56:6a:a8:3b:9d:94:60:13:03:e5:
                    a7:f7:54:bf:4e:79:ee:e5:d6:78:6f:2f:8f:0e:76:
                    31:69:8b:e4:b9:b9:69:5f:51:00:0a:73:1b:23:f1:
                    75:b4:15:7d:31:30:41:bf:c1:97:96:6f:c5:4f:e0:
                    bf:b9:68:e0:6d:c5:e7:ab:f5:49:ea:9d:95:41:b5:
                    3d:bc:93:0f:22:b7:b9:23:f7:ff:3c:53:4c:de:b0:
                    aa:66:cb:8e:ad:8a:e1:9c:1c:20:aa:8e:48:5b:db:
                    f1:ee:2c:0e:60:57:8a:ef:32:3a:33:56:a7:73:e0:
                    02:31:a3:e8:a7:49:fc:61:3d:f9:59:27:8d:2f:1f:
                    c1:9c:f8:2f:a3:c7:c8:21:f6:97:2d:98:97:51:94:
                    ea:df:d9:0c:b1:80:f4:08:e0:af:3f:22:cf:e5:f8:
                    aa:2d:39:38:3d:e0:fc:b4:65:58:d0:74:fb:22:b5:
                    dd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:C5:D8:08:B4:75:5D:D1:65:19:63:93:87:B5:B2:27:47:4F:A3:D4
            X509v3 Authority Key Identifier:
                keyid:6E:E2:AC:A5:2E:33:AC:8D:58:9F:32:21:75:92:CD:1E:69:BF:70:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buKspS4zrI1YnzIhdZLNHmm_cEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e03688-b93d-4a9b-98c1-aa3964377a00/1/buKspS4zrI1YnzIhdZLNHmm_cEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:df:a6:f1:eb:24:3e:d5:35:90:3f:13:45:28:d7:36:c4:93:
         ac:cd:1e:02:c5:8c:0f:ba:b1:10:33:4e:45:5e:c3:5a:a9:cf:
         68:e3:d7:4c:a1:86:ab:67:17:0c:80:09:eb:ff:66:d0:ee:e8:
         09:36:c9:d5:97:6a:7b:3e:aa:6e:20:7d:4c:8c:97:dd:23:47:
         99:48:cb:80:cc:7c:e4:10:b3:1b:b5:7e:cb:93:85:87:d8:02:
         ae:ea:84:c6:e6:3b:f6:51:54:1c:4b:83:64:67:60:9a:c2:1b:
         bc:89:4f:2f:b5:fb:e0:5b:d9:45:04:08:0e:19:8b:4d:d2:21:
         ba:7f:3c:d0:f2:b8:22:d6:18:b9:58:11:db:5e:f0:83:7d:a8:
         f5:47:93:35:ec:a5:c5:d2:d1:32:e6:16:b5:2b:c8:f8:85:22:
         4e:4a:4c:aa:7f:8e:d7:b8:dd:d2:b5:5c:c0:1b:e9:88:1b:60:
         0f:89:0c:8a:a5:1a:d1:f5:d1:cb:85:de:8b:fb:1f:37:4f:d6:
         8c:7f:a7:ed:df:91:20:c1:91:8c:80:7c:af:4e:03:a2:df:11:
         eb:5f:a1:17:57:3c:94:c4:df:f1:48:b4:8e:33:10:44:b9:14:
         48:3c:f0:3c:4f:4b:84:81:02:3f:56:6a:8b:c9:9c:32:27:8e:
         ce:aa:dc:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFh/tcGfcONbzkowxlHCJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZTJhY2E1MmUzM2FjOGQ1ODlmMzIyMTc1OTJjZDFlNjli
ZjcwNGMwHhcNMjUwODIzMDQwMDUzWhcNMjUwODI0MDQwMDUzWjAzMTEwLwYDVQQD
Eyg2ZGM1ZDgwOGI0NzU1ZGQxNjUxOTYzOTM4N2I1YjIyNzQ3NGZhM2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPAFcGLC2e2goVohJfIJ383eTnBj
4W77jHp+bHn3M/h4t6mXjwJjQtHZqN0rxfSb0Vj1jyzHwMYPeeWNz5bRNpZDz8AP
5le3oZCZswBAYlZqqDudlGATA+Wn91S/Tnnu5dZ4by+PDnYxaYvkublpX1EACnMb
I/F1tBV9MTBBv8GXlm/FT+C/uWjgbcXnq/VJ6p2VQbU9vJMPIre5I/f/PFNM3rCq
ZsuOrYrhnBwgqo5IW9vx7iwOYFeK7zI6M1anc+ACMaPop0n8YT35WSeNLx/BnPgv
o8fIIfaXLZiXUZTq39kMsYD0COCvPyLP5fiqLTk4PeD8tGVY0HT7IrXd+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3F2Ai0dV3RZRljk4e1sidHT6PUMB8GA1UdIwQY
MBaAFG7irKUuM6yNWJ8yIXWSzR5pv3BMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnVLc3BTNHpySTFZbnpJaGRaTE5IbW1fY0V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMDM2ODgtYjkzZC00YTliLTk4YzEt
YWEzOTY0Mzc3YTAwLzEvYnVLc3BTNHpySTFZbnpJaGRaTE5IbW1fY0V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMDM2ODgtYjkzZC00YTliLTk4YzEtYWEzOTY0Mzc3YTAw
LzEvYnVLc3BTNHpySTFZbnpJaGRaTE5IbW1fY0V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9+m8esk
PtU1kD8TRSjXNsSTrM0eAsWMD7qxEDNORV7DWqnPaOPXTKGGq2cXDIAJ6/9m0O7o
CTbJ1Zdqez6qbiB9TIyX3SNHmUjLgMx85BCzG7V+y5OFh9gCruqExuY79lFUHEuD
ZGdgmsIbvIlPL7X74FvZRQQIDhmLTdIhun880PK4ItYYuVgR217wg32o9UeTNeyl
xdLRMuYWtSvI+IUiTkpMqn+O17jd0rVcwBvpiBtgD4kMiqUa0fXRy4Xei/sfN0/W
jH+n7d+RIMGRjIB8r04Dot8R61+hF1c8lMTf8Ui0jjMQRLkUSDzwPE9LhIECP1Zq
i8mcMieOzqrc8w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:05 2025 by rpki-client