Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
File:                     GiR0zlteIgufQxr8hq9OwUD18Ww.mft (raw, json)
Hash identifier:          TfEVDxZ0RnBVODpIDMWLypMVsnY7hYiZBVfoQmAIV/c=
Subject key identifier:   BD:D0:7C:98:39:32:D5:E4:58:05:7E:DA:06:24:8C:FA:91:7E:69:C5
Authority key identifier: 1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C
Certificate issuer:       /CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
Certificate serial:       0198D65FA2AD95A7A3942ABD5348B1CD7AB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
Manifest number:          0B27
Signing time:             Sat 23 Aug 2025 10:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:48 +0000
Files and hashes:         1: GiR0zlteIgufQxr8hq9OwUD18Ww.crl (hash: xNBmnXf9+ur2ffDnUOv4K3hF9jLc0xV1uCBc6jY073g=)
                          2: xkDVDS74gDDghtjYO_lZo1jkZAw.roa (hash: U2DpQz2gMSrA9mkY42SKxIWprno9ie8cfBuo5TlCH84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:a2:ad:95:a7:a3:94:2a:bd:53:48:b1:cd:7a:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2474ce5b5e220b9f431afc86af4ec140f5f16c
        Validity
            Not Before: Aug 23 10:00:48 2025 GMT
            Not After : Aug 24 10:00:48 2025 GMT
        Subject: CN=bdd07c983932d5e458057eda06248cfa917e69c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:ea:3f:2e:30:29:4c:32:a8:4d:75:cb:21:
                    d0:36:b3:63:bd:ac:e2:f7:ac:2d:d8:37:2e:a3:64:
                    a6:c5:ab:0e:4c:03:f4:c5:95:f4:ab:6b:b9:61:52:
                    80:71:9e:f7:da:cb:1a:65:a0:b1:5c:51:76:8f:df:
                    c2:53:f0:0c:a4:4c:e8:97:cc:c9:ea:67:50:45:bf:
                    fe:03:06:6b:fb:72:3c:b7:fc:9a:be:53:c9:38:06:
                    ea:f5:19:9d:69:52:2f:06:08:45:46:9a:94:5b:d6:
                    3a:81:95:3b:48:07:0f:da:53:10:d3:2c:b0:13:f3:
                    66:45:1d:a6:fc:bc:a1:d7:f8:4d:f8:c1:05:a7:45:
                    55:11:dd:3b:9b:5d:20:0d:61:fa:18:ba:04:60:ba:
                    b8:3e:b0:67:54:db:5d:a4:06:65:07:ba:94:d1:f4:
                    15:f5:8d:78:34:1f:0f:cf:e2:f4:e7:54:e1:37:6e:
                    bc:e6:bf:f0:7f:76:64:10:6d:94:88:e9:0b:64:5a:
                    28:cb:c4:5a:97:f0:7a:e3:35:36:0c:1c:8b:2d:16:
                    56:48:1f:0f:7a:17:9a:35:e2:e0:39:82:1e:bf:96:
                    c5:8f:5b:2c:11:f9:9f:a9:5a:04:58:61:3e:b6:85:
                    1f:97:fd:56:5e:12:20:10:f5:84:4d:8c:39:b2:6d:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D0:7C:98:39:32:D5:E4:58:05:7E:DA:06:24:8C:FA:91:7E:69:C5
            X509v3 Authority Key Identifier:
                keyid:1A:24:74:CE:5B:5E:22:0B:9F:43:1A:FC:86:AF:4E:C1:40:F5:F1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiR0zlteIgufQxr8hq9OwUD18Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c04359-4ae4-4e47-91cb-d7d02e97e25d/1/GiR0zlteIgufQxr8hq9OwUD18Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:14:b3:36:85:9b:b7:cf:d2:cb:3e:96:0e:a7:cf:ae:ed:
         df:f0:6b:db:12:66:e3:f9:31:02:76:59:5d:c9:1a:1f:78:53:
         ee:2d:48:23:69:b8:30:2a:99:34:15:ce:bf:69:03:35:c1:dd:
         8a:c3:3e:ce:44:40:53:9d:98:7a:85:19:7b:d9:12:60:80:34:
         6f:7c:61:b5:d6:be:84:de:be:35:eb:2c:3a:f7:bb:29:21:b5:
         91:7c:b9:0e:8f:76:4c:bf:60:1c:0b:14:aa:2b:ca:40:14:4f:
         b4:08:c8:9a:5c:05:f4:3c:30:c2:54:30:a7:99:3e:23:14:10:
         86:38:30:1b:ea:fc:1e:07:2a:78:e5:25:9c:db:f9:04:37:4e:
         17:ae:1e:6a:09:86:d2:d2:a1:f4:7a:f6:60:5c:6e:a0:2d:c9:
         4c:c9:74:60:c4:0e:03:5c:af:f5:44:2f:ea:56:2e:39:ac:d9:
         d5:d5:da:65:ce:a2:ae:48:d2:02:aa:57:ac:38:b6:d3:ac:d3:
         66:e6:0e:ba:19:2d:e7:0f:8c:43:da:b9:8b:35:43:94:7d:2c:
         ba:71:1b:5f:00:2b:03:97:39:7d:0e:e1:69:be:d3:77:17:49:
         05:a6:30:aa:31:94:fd:7e:76:86:d4:57:3a:e1:f4:62:4e:1c:
         e8:0f:51:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX6KtlaejlCq9U0ixzXq3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMjQ3NGNlNWI1ZTIyMGI5ZjQzMWFmYzg2YWY0ZWMxNDBm
NWYxNmMwHhcNMjUwODIzMTAwMDQ4WhcNMjUwODI0MTAwMDQ4WjAzMTEwLwYDVQQD
EyhiZGQwN2M5ODM5MzJkNWU0NTgwNTdlZGEwNjI0OGNmYTkxN2U2OWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6zqPy4wKUwyqE11yyHQNrNjvazi
96wt2Dcuo2SmxasOTAP0xZX0q2u5YVKAcZ732ssaZaCxXFF2j9/CU/AMpEzol8zJ
6mdQRb/+AwZr+3I8t/yavlPJOAbq9RmdaVIvBghFRpqUW9Y6gZU7SAcP2lMQ0yyw
E/NmRR2m/Lyh1/hN+MEFp0VVEd07m10gDWH6GLoEYLq4PrBnVNtdpAZlB7qU0fQV
9Y14NB8Pz+L051ThN2685r/wf3ZkEG2UiOkLZFooy8Ral/B64zU2DByLLRZWSB8P
eheaNeLgOYIev5bFj1ssEfmfqVoEWGE+toUfl/1WXhIgEPWETYw5sm1vPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3QfJg5MtXkWAV+2gYkjPqRfmnFMB8GA1UdIwQY
MBaAFBokdM5bXiILn0Ma/IavTsFA9fFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2It
ZDdkMDJlOTdlMjVkLzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMDQzNTktNGFlNC00ZTQ3LTkxY2ItZDdkMDJlOTdlMjVk
LzEvR2lSMHpsdGVJZ3VmUXhyOGhxOU93VUQxOFd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnI0UszaF
m7fP0ss+lg6nz67t3/Br2xJm4/kxAnZZXckaH3hT7i1II2m4MCqZNBXOv2kDNcHd
isM+zkRAU52YeoUZe9kSYIA0b3xhtda+hN6+NessOve7KSG1kXy5Do92TL9gHAsU
qivKQBRPtAjImlwF9DwwwlQwp5k+IxQQhjgwG+r8HgcqeOUlnNv5BDdOF64eagmG
0tKh9Hr2YFxuoC3JTMl0YMQOA1yv9UQv6lYuOazZ1dXaZc6irkjSAqpXrDi206zT
ZuYOuhkt5w+MQ9q5izVDlH0sunEbXwArA5c5fQ7hab7TdxdJBaYwqjGU/X52htRX
OuH0Yk4c6A9RjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:27:14 2025 by rpki-client