Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          wChBPJo1wtNS5RssrZSC/aP1tB4D4HtLYPoYdRlseS0=
Subject key identifier:   93:6D:77:95:42:31:6B:AE:2B:4F:BE:44:43:8F:FB:25:A1:D3:18:18
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       0198D54E3A757034D19A8E80B8C334052352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          055F
Signing time:             Sat 23 Aug 2025 05:02:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:10 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:10 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: kTTkov/yP9eHiaG2DkMCSeJYdbXYhV2X4CZ2Fqtw+YA=)
                          2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:3a:75:70:34:d1:9a:8e:80:b8:c3:34:05:23:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Aug 23 05:02:10 2025 GMT
            Not After : Aug 24 05:02:10 2025 GMT
        Subject: CN=936d779542316bae2b4fbe44438ffb25a1d31818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:e8:2d:9b:80:c9:a6:ed:5f:98:44:f4:58:
                    51:a9:52:57:fe:0e:da:ba:f4:0d:90:45:47:7c:e7:
                    fd:9a:67:a8:d1:57:db:07:c7:4d:ff:25:8b:54:05:
                    a2:61:2d:62:3b:31:84:7a:3f:ec:84:fa:e4:61:e7:
                    8a:a7:98:31:b9:c8:be:93:4b:d0:7d:65:c1:6d:b4:
                    ee:a8:d8:6c:14:fd:f7:a8:14:97:98:e1:ca:5b:27:
                    65:1c:e1:31:87:28:23:70:b1:4d:6b:03:ca:13:a9:
                    4c:45:58:bf:28:8d:43:08:8e:c5:cb:41:a8:d6:dd:
                    9e:fc:37:9d:48:05:7b:e2:6e:ac:83:9a:dc:c2:de:
                    86:95:00:d8:b4:f5:29:c5:b5:ec:1d:2e:21:ee:e0:
                    62:6c:66:9a:f8:d0:f9:7e:07:af:ab:00:7e:ba:b8:
                    5c:52:1e:2c:22:88:c4:15:11:76:c7:a5:c2:b7:c9:
                    39:86:39:31:2a:b1:62:de:b2:f7:c6:ac:cd:e6:ac:
                    6f:cf:4f:53:60:14:d5:21:97:6d:e6:93:0a:42:29:
                    39:c4:07:93:19:c3:3a:e8:2e:b5:dd:5a:37:d2:df:
                    8d:67:ed:d4:3b:e7:33:b5:21:e8:75:56:2e:ba:f4:
                    55:37:71:34:0b:f8:29:84:c9:b2:6c:5f:36:33:a8:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6D:77:95:42:31:6B:AE:2B:4F:BE:44:43:8F:FB:25:A1:D3:18:18
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:f8:e4:1e:53:a7:df:98:13:10:16:02:83:be:67:c3:61:
         9a:48:7d:95:9b:d2:a0:73:ec:05:b8:63:75:92:ed:ad:dc:07:
         30:96:41:7a:e6:ce:ae:4d:73:47:4e:f2:76:a1:f7:7c:f1:d1:
         b6:8f:32:cb:b6:f0:65:d1:2e:f4:3f:59:d2:de:3a:b8:95:9e:
         a2:15:41:1f:64:6b:93:6a:cb:18:f9:64:70:0c:43:92:26:a0:
         80:74:8c:98:ed:54:cc:34:28:a7:f6:7f:00:08:c0:1c:44:70:
         6b:09:f8:a4:14:62:43:49:f4:d1:9e:59:c8:07:98:58:b8:38:
         a1:22:e2:22:91:ce:c3:0a:e4:cc:3a:68:56:db:97:51:df:03:
         e3:98:db:13:03:cb:c4:ac:20:a4:76:66:7d:dd:eb:72:29:64:
         7f:e5:1b:bf:7a:7c:8e:e6:f0:88:bf:e6:d3:ba:d5:00:9b:75:
         6f:05:7c:cc:9b:57:df:51:da:45:fd:0a:7b:b1:a9:09:14:11:
         39:1c:64:7f:51:a6:d3:5e:78:56:36:54:4b:d8:be:3a:f3:06:
         00:99:02:c9:51:1c:ce:b7:b8:b5:bf:3a:0e:c8:aa:df:09:62:
         ea:30:78:bf:1a:5e:67:3a:05:fc:1a:f2:f6:b3:b0:7c:8a:2a:
         69:de:e0:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjp1cDTRmo6AuMM0BSNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh
ZTdjMGQwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
Eyg5MzZkNzc5NTQyMzE2YmFlMmI0ZmJlNDQ0MzhmZmIyNWExZDMxODE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwzoLZuAyabtX5hE9FhRqVJX/g7a
uvQNkEVHfOf9mmeo0VfbB8dN/yWLVAWiYS1iOzGEej/shPrkYeeKp5gxuci+k0vQ
fWXBbbTuqNhsFP33qBSXmOHKWydlHOExhygjcLFNawPKE6lMRVi/KI1DCI7Fy0Go
1t2e/DedSAV74m6sg5rcwt6GlQDYtPUpxbXsHS4h7uBibGaa+ND5fgevqwB+urhc
Uh4sIojEFRF2x6XCt8k5hjkxKrFi3rL3xqzN5qxvz09TYBTVIZdt5pMKQik5xAeT
GcM66C613Vo30t+NZ+3UO+cztSHodVYuuvRVN3E0C/gphMmybF82M6ik4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNtd5VCMWuuK0++REOP+yWh0xgYMB8GA1UdIwQY
MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt
NjRlZGQyN2M1ZDdhLzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh
LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATK345B5T
p9+YExAWAoO+Z8Nhmkh9lZvSoHPsBbhjdZLtrdwHMJZBeubOrk1zR07ydqH3fPHR
to8yy7bwZdEu9D9Z0t46uJWeohVBH2Rrk2rLGPlkcAxDkiaggHSMmO1UzDQop/Z/
AAjAHERwawn4pBRiQ0n00Z5ZyAeYWLg4oSLiIpHOwwrkzDpoVtuXUd8D45jbEwPL
xKwgpHZmfd3rcilkf+Ubv3p8jubwiL/m07rVAJt1bwV8zJtX31HaRf0Ke7GpCRQR
ORxkf1Gm0154VjZUS9i+OvMGAJkCyVEczre4tb86Dsiq3wli6jB4vxpeZzoF/Bry
9rOwfIoqad7g1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:08 2025 by rpki-client