Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          KNzv/OsJ21XJwF2mGgkQSzkscqVgtSiXzgDktQEo9iI=
Subject key identifier:   89:AD:BA:73:A8:2A:A8:E8:FC:1F:04:A6:86:15:E0:44:EB:6D:1C:C0
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       01984AE5D4C44E920DF2D7446C4D99F627E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          0811
Signing time:             Sun 27 Jul 2025 08:00:32 +0000
Manifest this update:     Sun 27 Jul 2025 08:00:32 +0000
Manifest next update:     Mon 28 Jul 2025 08:00:32 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: B2pvTZGkF+Ff7hy5ZUXR+kWol/wApMUaaBrtYtvXBm0=)
                          2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
                          3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
                          4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:e5:d4:c4:4e:92:0d:f2:d7:44:6c:4d:99:f6:27:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Jul 27 08:00:32 2025 GMT
            Not After : Jul 28 08:00:32 2025 GMT
        Subject: CN=89adba73a82aa8e8fc1f04a68615e044eb6d1cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:99:b0:4a:31:da:b6:db:fe:24:7e:3f:eb:82:
                    83:fb:75:f6:8e:cd:62:9e:96:47:8f:3d:93:dd:b8:
                    e7:47:72:15:df:ff:cb:e6:f9:5c:e1:ce:e9:20:ab:
                    cd:8d:8d:40:d5:35:63:ce:d4:d2:59:78:e6:d3:ef:
                    c2:29:54:2c:6a:db:33:cb:73:e1:24:8e:ff:7e:0b:
                    af:00:3b:4b:23:b3:7c:dc:bc:e1:9a:cc:98:7a:0b:
                    61:3b:ac:d7:84:54:b4:94:68:78:c7:04:11:e6:99:
                    37:f7:c2:f4:b0:8f:5e:8b:aa:ff:65:0d:c5:94:1f:
                    b9:b1:2c:1d:7c:a7:52:87:b7:85:a6:64:57:fb:f7:
                    2b:90:40:89:d8:93:08:7d:ac:c9:8d:17:f4:a3:ef:
                    cb:67:f5:be:8a:d2:13:dc:87:1f:23:88:e5:dc:2d:
                    af:fc:59:d6:bc:73:b9:54:08:2a:62:69:f5:72:b2:
                    46:62:19:d4:01:c6:ea:47:f6:ae:74:4d:a4:8f:39:
                    59:70:8e:bf:4a:e3:0d:12:4f:95:9d:f9:5b:51:54:
                    05:26:cf:03:3c:76:42:9f:da:7c:16:4d:a5:f7:f4:
                    08:35:9b:a1:9d:14:73:f3:60:05:08:11:17:57:8e:
                    9d:68:db:c0:3b:33:51:74:8a:9b:3a:99:91:90:fb:
                    d0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AD:BA:73:A8:2A:A8:E8:FC:1F:04:A6:86:15:E0:44:EB:6D:1C:C0
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:25:a9:b6:3c:2e:fb:96:1a:c9:b7:83:25:14:25:27:a7:8e:
         7b:b1:f1:76:5b:19:51:67:2c:4b:b6:05:58:c1:1b:ca:be:3a:
         26:f8:63:56:ea:cc:3a:31:b6:14:3c:02:5f:0f:bf:d6:b1:72:
         9e:5a:3f:d1:85:16:fc:70:15:44:44:0c:9e:aa:ea:31:fb:25:
         01:0d:82:d4:d2:f6:a2:45:76:0a:0a:74:e0:99:1b:e4:4e:f3:
         78:92:dc:75:89:1a:c2:0c:0f:df:6b:e9:db:5f:66:2d:bb:a4:
         c4:5d:e7:f9:31:ad:58:3a:19:d6:bd:ec:e3:fd:9d:65:d9:09:
         d4:e2:33:1b:59:ac:b9:f7:3e:83:4d:f7:35:11:95:95:52:2d:
         40:34:fa:ec:3f:06:ba:97:87:ce:78:6b:b7:e1:d3:36:41:08:
         af:95:dc:ee:25:8d:41:b2:56:1f:1d:f6:50:be:58:c0:bf:ec:
         d3:a6:78:61:e6:95:1a:b9:b0:4e:24:80:ec:79:ca:88:8b:c9:
         81:f2:eb:01:38:1e:7c:24:ce:7e:80:42:cd:1a:33:7f:2d:86:
         4d:5c:e7:33:61:97:ec:31:ea:99:89:31:c8:24:d0:25:a6:bc:
         bf:af:f9:e6:48:95:5f:1c:e8:d2:ad:30:c5:05:53:74:20:30:
         19:6b:31:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5dTETpIN8tdEbE2Z9ifnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZjQ2YWY4ODVkMWNjYmIwYzA5YjA2ODcwNzg1YjVlNjkx
Nzg3ZTEwHhcNMjUwNzI3MDgwMDMyWhcNMjUwNzI4MDgwMDMyWjAzMTEwLwYDVQQD
Eyg4OWFkYmE3M2E4MmFhOGU4ZmMxZjA0YTY4NjE1ZTA0NGViNmQxY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJmwSjHattv+JH4/64KD+3X2js1i
npZHjz2T3bjnR3IV3//L5vlc4c7pIKvNjY1A1TVjztTSWXjm0+/CKVQsatszy3Ph
JI7/fguvADtLI7N83LzhmsyYegthO6zXhFS0lGh4xwQR5pk398L0sI9ei6r/ZQ3F
lB+5sSwdfKdSh7eFpmRX+/crkECJ2JMIfazJjRf0o+/LZ/W+itIT3IcfI4jl3C2v
/FnWvHO5VAgqYmn1crJGYhnUAcbqR/audE2kjzlZcI6/SuMNEk+VnflbUVQFJs8D
PHZCn9p8Fk2l9/QINZuhnRRz82AFCBEXV46daNvAOzNRdIqbOpmRkPvQFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImtunOoKqjo/B8EpoYV4ETrbRzAMB8GA1UdIwQY
MBaAFAT0aviF0cy7DAmwaHB4W15pF4fhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmIt
YzVjZjRiM2IxY2E2LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9mYjUzZDYtYWRhOC00MjZkLTk5ZmItYzVjZjRiM2IxY2E2
LzEvQlBScS1JWFJ6THNNQ2JCb2NIaGJYbWtYaC1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCWptjwu
+5YaybeDJRQlJ6eOe7HxdlsZUWcsS7YFWMEbyr46JvhjVurMOjG2FDwCXw+/1rFy
nlo/0YUW/HAVREQMnqrqMfslAQ2C1NL2okV2Cgp04Jkb5E7zeJLcdYkawgwP32vp
219mLbukxF3n+TGtWDoZ1r3s4/2dZdkJ1OIzG1msufc+g033NRGVlVItQDT67D8G
upeHznhrt+HTNkEIr5Xc7iWNQbJWHx32UL5YwL/s06Z4YeaVGrmwTiSA7HnKiIvJ
gfLrATgefCTOfoBCzRozfy2GTVznM2GX7DHqmYkxyCTQJaa8v6/55kiVXxzo0q0w
xQVTdCAwGWsxdg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:38:22 2025 by rpki-client