Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File:                     bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier:          sYlFQJXv/5i9xXYp1mninY8t3k6cKAvqpYmSD94iJsw=
Subject key identifier:   BC:63:F4:5D:9F:69:C0:B3:EF:6E:3F:7F:8F:77:29:73:16:03:4E:9E
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer:       /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial:       0197BAEB1CF23F75CAEE7E974C527F35E0A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number:          12FB
Signing time:             Sun 29 Jun 2025 09:00:59 +0000
Manifest this update:     Sun 29 Jun 2025 09:00:59 +0000
Manifest next update:     Mon 30 Jun 2025 09:00:59 +0000
Files and hashes:         1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
                          2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: PNe24EB5b8kFcev7Csfbh4avHJiyQOYx1eS6rVggoQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:eb:1c:f2:3f:75:ca:ee:7e:97:4c:52:7f:35:e0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
        Validity
            Not Before: Jun 29 09:00:59 2025 GMT
            Not After : Jun 30 09:00:59 2025 GMT
        Subject: CN=bc63f45d9f69c0b3ef6e3f7f8f77297316034e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:ad:68:75:5c:55:b5:7a:06:7e:2c:4f:60:
                    b7:10:f5:f8:14:31:8b:fa:a4:d2:ee:09:c7:87:a4:
                    17:f3:e3:c8:00:92:99:0e:0b:c5:b7:d2:e1:9c:0b:
                    8b:1b:f8:fd:ca:de:e7:92:4b:04:4c:09:c5:c2:89:
                    25:15:cd:9a:cf:88:88:73:fe:cb:bc:10:60:d8:ad:
                    cb:79:15:c4:bc:ea:d6:95:e7:ed:8f:f0:5b:d8:f6:
                    9e:69:9e:6a:15:27:8c:f6:8d:8a:ae:f1:f3:e2:dc:
                    8e:4c:e1:61:00:a8:5b:b4:f4:09:a9:80:5e:b2:57:
                    e3:5a:08:f5:ec:98:f9:04:11:b0:bf:97:16:99:98:
                    00:13:18:8c:74:85:bf:c0:0a:70:bc:7c:b4:3b:b1:
                    df:93:c6:b8:da:24:a2:94:ed:5c:77:8a:b9:d5:d5:
                    f8:a2:b9:d6:0b:9c:43:93:92:d3:9b:c1:46:df:69:
                    6c:95:fa:ba:65:f2:40:8f:0c:fb:23:c0:3a:03:ab:
                    7f:53:18:bd:39:a2:7c:27:c0:be:83:60:48:b3:eb:
                    5d:be:49:da:98:9e:54:a9:ac:83:1d:b1:37:4b:bf:
                    8c:d3:51:b1:0f:4d:7b:dc:a0:96:c9:b1:e5:b5:06:
                    ac:f4:b3:ba:b1:19:f8:9d:71:c2:6d:25:0d:46:c8:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:63:F4:5D:9F:69:C0:B3:EF:6E:3F:7F:8F:77:29:73:16:03:4E:9E
            X509v3 Authority Key Identifier:
                keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:60:53:e3:bf:47:ca:d1:94:cb:bd:1f:0a:b3:6d:d9:de:f1:
         15:e8:c6:d0:5c:56:e2:a9:7e:80:32:49:fc:f8:7c:73:3f:66:
         e1:d1:be:43:9a:ea:24:f7:81:a6:01:54:53:cf:28:8f:10:8c:
         fa:d0:c2:33:8f:6c:5b:ba:ad:99:d4:14:e9:39:45:60:90:7f:
         8b:28:e6:6a:81:2b:ca:1d:75:ef:57:c0:00:a4:b2:ff:6b:30:
         d3:1d:0a:f4:af:e0:98:01:f9:23:f4:02:ce:81:f6:b3:90:eb:
         1f:3f:4d:9e:8a:ff:c0:de:dc:3e:34:81:12:1a:bf:68:3d:29:
         f2:d0:08:b7:7e:19:9f:05:a6:c6:cd:63:97:9e:5d:c0:a3:8b:
         78:e3:bf:10:db:85:6d:bf:78:c8:e9:e5:da:d7:8f:1e:1c:f4:
         39:71:90:40:4a:73:be:df:1f:f3:bb:0c:39:9a:df:3d:c2:9a:
         a7:9c:2e:d4:08:15:51:9a:00:0f:39:9e:66:a7:1e:af:46:27:
         dc:b6:89:7a:c3:92:cf:1c:85:2f:a9:0a:b5:4c:de:d0:17:a8:
         ff:de:e6:fd:8e:6a:35:1c:7f:ed:20:4f:aa:79:13:6b:e0:b1:
         66:5c:7d:a3:52:5c:7c:e7:6e:8a:ab:c8:c0:31:71:f3:e7:f5:
         1a:04:41:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe66xzyP3XK7n6XTFJ/NeCoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi
ZmFlYmIwHhcNMjUwNjI5MDkwMDU5WhcNMjUwNjMwMDkwMDU5WjAzMTEwLwYDVQQD
EyhiYzYzZjQ1ZDlmNjljMGIzZWY2ZTNmN2Y4Zjc3Mjk3MzE2MDM0ZTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwGtaHVcVbV6Bn4sT2C3EPX4FDGL
+qTS7gnHh6QX8+PIAJKZDgvFt9LhnAuLG/j9yt7nkksETAnFwoklFc2az4iIc/7L
vBBg2K3LeRXEvOrWleftj/Bb2PaeaZ5qFSeM9o2KrvHz4tyOTOFhAKhbtPQJqYBe
slfjWgj17Jj5BBGwv5cWmZgAExiMdIW/wApwvHy0O7Hfk8a42iSilO1cd4q51dX4
ornWC5xDk5LTm8FG32lslfq6ZfJAjwz7I8A6A6t/Uxi9OaJ8J8C+g2BIs+tdvkna
mJ5UqayDHbE3S7+M01GxD0173KCWybHltQas9LO6sRn4nXHCbSUNRsiK2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxj9F2facCz724/f493KXMWA06eMB8GA1UdIwQY
MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt
ODRjM2QzMDJjZjA0LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0
LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWBT479H
ytGUy70fCrNt2d7xFejG0FxW4ql+gDJJ/Ph8cz9m4dG+Q5rqJPeBpgFUU88ojxCM
+tDCM49sW7qtmdQU6TlFYJB/iyjmaoEryh1171fAAKSy/2sw0x0K9K/gmAH5I/QC
zoH2s5DrHz9Nnor/wN7cPjSBEhq/aD0p8tAIt34ZnwWmxs1jl55dwKOLeOO/ENuF
bb94yOnl2tePHhz0OXGQQEpzvt8f87sMOZrfPcKap5wu1AgVUZoADzmeZqcer0Yn
3LaJesOSzxyFL6kKtUze0Beo/97m/Y5qNRx/7SBPqnkTa+CxZlx9o1JcfOduiqvI
wDFx8+f1GgRBiQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:38 2025 by rpki-client