Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          /NydR5yMs8CfJ5SIXC09MQkLfSiw2FmE6mp2vShb3jY=
Subject key identifier:   FA:4A:D2:5B:F9:DB:C6:CA:4E:46:86:40:84:6C:EF:9E:AA:46:E2:93
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       0197B88F18CA5A66A7BD4814784BAE0A6D7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          15B6
Signing time:             Sat 28 Jun 2025 22:01:15 +0000
Manifest this update:     Sat 28 Jun 2025 22:01:15 +0000
Manifest next update:     Sun 29 Jun 2025 22:01:15 +0000
Files and hashes:         1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
                          2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 6Fg37uWFPYFFoWw0QKnhmalP2Fv1fiHQN1DypRxeVLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:8f:18:ca:5a:66:a7:bd:48:14:78:4b:ae:0a:6d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Jun 28 22:01:15 2025 GMT
            Not After : Jun 29 22:01:15 2025 GMT
        Subject: CN=fa4ad25bf9dbc6ca4e468640846cef9eaa46e293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:7d:a9:3f:41:57:7a:24:3e:0e:cc:1b:30:
                    36:3d:34:04:fc:86:61:58:d7:76:cf:dc:2a:cb:3e:
                    d4:ea:74:f3:84:0c:db:a0:e4:c2:d0:75:00:d1:f5:
                    74:e3:e0:f7:ee:92:5d:73:f9:4f:f1:02:cb:7b:95:
                    b1:e9:f8:16:5e:e8:ad:e6:c4:bd:f7:8a:c1:8a:02:
                    79:ef:5b:4b:d1:98:ba:3f:58:bd:a7:fa:04:21:a6:
                    3e:4f:97:b7:78:68:10:11:64:2e:09:b7:40:dc:fa:
                    f5:2d:18:2d:82:73:5c:a9:9e:7c:05:77:dd:de:d8:
                    e1:43:55:c5:d8:1e:10:25:c1:2d:ea:2f:35:c9:e0:
                    ae:d5:80:7a:55:9e:ad:db:b3:94:83:09:1b:79:8d:
                    99:24:b5:c8:ce:81:59:f8:e9:4e:83:6e:1a:59:1e:
                    8e:6b:28:17:32:22:52:7d:04:a8:96:af:9f:8a:a9:
                    49:30:de:2b:52:05:40:01:74:c8:a4:33:8b:0d:a1:
                    d9:62:82:ed:b2:83:ea:b6:74:90:b5:e3:2b:1d:63:
                    70:4e:40:0d:a1:02:87:62:cb:99:f7:6b:3c:cc:18:
                    02:a2:df:6a:36:0b:91:4c:43:df:4e:e1:1a:b6:28:
                    b1:62:ec:69:dc:92:9b:2f:b3:fe:78:4d:dc:48:1d:
                    4f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4A:D2:5B:F9:DB:C6:CA:4E:46:86:40:84:6C:EF:9E:AA:46:E2:93
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:44:63:b7:b0:bf:c7:c8:04:0e:08:8c:c1:dd:f8:35:75:94:
         b9:9e:ca:d9:5b:90:7a:47:b7:42:0b:2d:fd:df:3e:9d:0f:1e:
         f8:87:e9:6c:25:e5:d9:29:4b:d4:40:87:a1:2b:fb:68:cc:6c:
         bd:67:54:3a:80:cd:8e:3e:4a:59:83:9f:85:d8:f0:00:bc:ca:
         e8:37:7a:27:e8:ff:f3:57:8f:8a:d0:9e:62:a9:47:8e:75:5f:
         12:97:f8:52:72:4b:36:6e:8c:32:9c:4f:8d:c8:11:b1:82:cd:
         cc:c3:8f:82:46:fe:7f:c6:17:8c:be:d4:d9:78:7e:cf:50:f3:
         a9:15:8f:68:9c:02:10:b3:08:49:b4:84:79:74:9e:12:a9:d5:
         00:29:d8:cc:da:d7:ff:b0:60:0d:40:2a:2a:11:ce:6f:e2:67:
         78:b3:78:74:a9:58:12:d1:08:de:7d:e4:11:ae:6d:13:0d:0e:
         0a:a8:f7:82:0e:aa:a0:33:bb:20:34:61:dd:ae:09:c3:6a:59:
         57:eb:be:30:c9:c5:35:af:0e:72:07:91:8b:fd:9a:6d:85:6c:
         2a:e2:e8:73:a1:26:47:b3:97:ba:16:18:12:d3:a4:d4:03:5d:
         ed:7c:d2:22:47:69:0d:6c:f9:a1:a6:68:20:87:3c:d9:5d:86:
         d2:68:66:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jxjKWmanvUgUeEuuCm17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5
ZTViM2UwHhcNMjUwNjI4MjIwMTE1WhcNMjUwNjI5MjIwMTE1WjAzMTEwLwYDVQQD
EyhmYTRhZDI1YmY5ZGJjNmNhNGU0Njg2NDA4NDZjZWY5ZWFhNDZlMjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWt9qT9BV3okPg7MGzA2PTQE/IZh
WNd2z9wqyz7U6nTzhAzboOTC0HUA0fV04+D37pJdc/lP8QLLe5Wx6fgWXuit5sS9
94rBigJ571tL0Zi6P1i9p/oEIaY+T5e3eGgQEWQuCbdA3Pr1LRgtgnNcqZ58BXfd
3tjhQ1XF2B4QJcEt6i81yeCu1YB6VZ6t27OUgwkbeY2ZJLXIzoFZ+OlOg24aWR6O
aygXMiJSfQSolq+fiqlJMN4rUgVAAXTIpDOLDaHZYoLtsoPqtnSQteMrHWNwTkAN
oQKHYsuZ92s8zBgCot9qNguRTEPfTuEatiixYuxp3JKbL7P+eE3cSB1PVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpK0lv528bKTkaGQIRs756qRuKTMB8GA1UdIwQY
MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIkRjt7C/
x8gEDgiMwd34NXWUuZ7K2VuQeke3Qgst/d8+nQ8e+IfpbCXl2SlL1ECHoSv7aMxs
vWdUOoDNjj5KWYOfhdjwALzK6Dd6J+j/81ePitCeYqlHjnVfEpf4UnJLNm6MMpxP
jcgRsYLNzMOPgkb+f8YXjL7U2Xh+z1DzqRWPaJwCELMISbSEeXSeEqnVACnYzNrX
/7BgDUAqKhHOb+JneLN4dKlYEtEI3n3kEa5tEw0OCqj3gg6qoDO7IDRh3a4Jw2pZ
V+u+MMnFNa8OcgeRi/2abYVsKuLoc6EmR7OXuhYYEtOk1ANd7XzSIkdpDWz5oaZo
IIc82V2G0mhmzw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:35:15 2025 by rpki-client