Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
File:                     3BCJyUK2gDNoO03VBsDDb3S-DqM.mft (raw, json)
Hash identifier:          qtiEiLwWQAJ0E0si+5n830gS7cQ4bapWcqa9Sf2OjnI=
Subject key identifier:   8C:4E:82:FB:FC:B4:94:78:4A:71:5F:C1:44:8F:D6:12:89:37:66:6A
Authority key identifier: DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3
Certificate issuer:       /CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
Certificate serial:       0198277E4AB890A9DDFF3E473B411B800EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
Manifest number:          15F1
Signing time:             Sun 20 Jul 2025 11:00:44 +0000
Manifest this update:     Sun 20 Jul 2025 11:00:44 +0000
Manifest next update:     Mon 21 Jul 2025 11:00:44 +0000
Files and hashes:         1: 3BCJyUK2gDNoO03VBsDDb3S-DqM.crl (hash: G/Vq0NFQjP+jty0N3qKRjxaIlkrtNmgTdZbp4DnV2wc=)
                          2: 57HaC7393494-Kydk1JdAp5sP5I.roa (hash: MC5zLYnL7jsECqxeDtP30qM0sWScy6N43eUhfx207aw=)
                          3: m5gUSNnJ2hKaiWTW0ODmWqqDw-s.roa (hash: EE2S7AYIPyyJZqEsdRi77q99LaNKBqMzcLpUq4bS+A8=)
                          4: nX1l9uEaP3hKft0f6nr66330FaY.roa (hash: Ify3evSlWibc6XFuSTIlXp6BEPgQD/cUtILAv8sgqKU=)
                          5: rYOTmI6zBWy0_qXug-7vEbI5-NE.roa (hash: WCnXAEMnH2mCY9gWHiuKlZ1HO6eQUoArgriFfc+fAVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:4a:b8:90:a9:dd:ff:3e:47:3b:41:1b:80:0e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1089c942b68033683b4dd506c0c36f74be0ea3
        Validity
            Not Before: Jul 20 11:00:44 2025 GMT
            Not After : Jul 21 11:00:44 2025 GMT
        Subject: CN=8c4e82fbfcb494784a715fc1448fd6128937666a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:6c:36:e7:92:25:fb:a1:2b:4f:81:66:68:
                    6b:3a:68:33:86:30:cb:7b:74:a2:fc:87:92:a7:21:
                    b3:ef:18:01:c3:3e:6b:02:ca:1e:e2:af:42:54:be:
                    22:e0:25:f3:47:7a:f5:4a:e5:b2:2e:ac:51:6b:17:
                    fe:01:26:bd:92:5a:20:63:0a:a0:d4:66:05:12:e2:
                    07:13:6d:82:1e:36:b9:0f:e4:81:be:84:fd:09:f4:
                    4f:98:bd:7c:55:7d:31:5e:9e:95:e2:be:5f:24:02:
                    98:f9:4a:34:92:27:1e:d9:da:d3:8a:8b:d1:28:9f:
                    a4:88:18:e3:24:ad:9b:44:dc:fd:c4:e4:fe:9a:3c:
                    f4:7d:ed:19:8a:b0:cd:d0:c2:ab:08:1c:18:8b:75:
                    38:f0:02:86:ae:6e:19:8d:df:38:79:e1:a0:6a:b6:
                    a3:77:0f:39:68:92:2e:cc:fb:28:8e:4d:41:15:43:
                    b8:85:96:65:c4:87:7b:c3:05:ee:0b:32:07:46:7c:
                    27:3c:1a:bb:79:bf:10:6a:1f:8f:84:a8:34:e7:a9:
                    b8:85:a9:ba:cb:17:e9:c9:a0:dd:b1:3d:9c:e4:23:
                    33:04:7e:1a:7b:23:99:1a:3a:e9:1e:eb:46:cd:5a:
                    9f:2d:3c:f9:75:4e:65:2c:04:f6:06:49:f9:63:b4:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4E:82:FB:FC:B4:94:78:4A:71:5F:C1:44:8F:D6:12:89:37:66:6A
            X509v3 Authority Key Identifier:
                keyid:DC:10:89:C9:42:B6:80:33:68:3B:4D:D5:06:C0:C3:6F:74:BE:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BCJyUK2gDNoO03VBsDDb3S-DqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/3BCJyUK2gDNoO03VBsDDb3S-DqM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:38:62:26:fa:77:a2:16:8b:c6:fb:31:86:56:d3:8d:83:e6:
         99:b5:3c:80:0d:83:ed:79:8a:57:f3:72:23:fe:45:97:b7:89:
         7a:d9:04:c6:d3:78:9d:06:af:2d:ef:ec:cb:d3:cf:1b:35:ea:
         fd:f6:cf:39:74:e8:15:0a:d9:ab:67:69:e4:34:1a:8f:40:54:
         c3:20:a9:13:b4:38:2e:a3:8b:63:ca:2a:93:5c:83:59:4f:a7:
         d9:4e:53:c1:eb:9d:4a:1e:57:39:d0:94:40:5b:4b:df:af:0d:
         8a:13:c0:54:cd:0f:6e:85:ef:b1:74:2d:ff:e0:a3:a3:53:3e:
         2b:10:4b:9f:b0:d9:96:bb:fe:59:1b:2b:99:4e:03:c3:20:c8:
         98:d8:6b:34:ae:0a:da:9d:e9:84:ae:04:9e:83:bd:00:be:1a:
         c8:7c:66:d1:b5:17:11:bc:96:49:2f:b5:90:c8:4b:2c:12:29:
         06:77:6b:99:c0:79:74:90:86:e4:92:6b:03:b8:27:4b:80:de:
         e5:02:bb:8a:77:33:f3:6e:57:f8:44:9b:28:14:d1:06:49:69:
         22:88:68:b5:9b:47:a8:b1:4b:06:20:e1:cd:40:23:32:97:45:
         ef:72:01:1e:57:25:92:23:3c:34:44:b7:ee:90:a1:93:1c:66:
         22:a4:9a:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgnfkq4kKnd/z5HO0EbgA7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMTA4OWM5NDJiNjgwMzM2ODNiNGRkNTA2YzBjMzZmNzRi
ZTBlYTMwHhcNMjUwNzIwMTEwMDQ0WhcNMjUwNzIxMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg4YzRlODJmYmZjYjQ5NDc4NGE3MTVmYzE0NDhmZDYxMjg5Mzc2NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeZsNueSJfuhK0+BZmhrOmgzhjDL
e3Si/IeSpyGz7xgBwz5rAsoe4q9CVL4i4CXzR3r1SuWyLqxRaxf+ASa9klogYwqg
1GYFEuIHE22CHja5D+SBvoT9CfRPmL18VX0xXp6V4r5fJAKY+Uo0kice2drTiovR
KJ+kiBjjJK2bRNz9xOT+mjz0fe0ZirDN0MKrCBwYi3U48AKGrm4Zjd84eeGgaraj
dw85aJIuzPsojk1BFUO4hZZlxId7wwXuCzIHRnwnPBq7eb8Qah+PhKg056m4ham6
yxfpyaDdsT2c5CMzBH4aeyOZGjrpHutGzVqfLTz5dU5lLAT2Bkn5Y7QKjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxOgvv8tJR4SnFfwUSP1hKJN2ZqMB8GA1UdIwQY
MBaAFNwQiclCtoAzaDtN1QbAw290vg6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDkt
Y2I1NmVkM2VhN2ZhLzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy8yNDE0OWQtZDExNS00MzMwLWJkNDktY2I1NmVkM2VhN2Zh
LzEvM0JDSnlVSzJnRE5vTzAzVkJzRERiM1MtRHFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeThiJvp3
ohaLxvsxhlbTjYPmmbU8gA2D7XmKV/NyI/5Fl7eJetkExtN4nQavLe/sy9PPGzXq
/fbPOXToFQrZq2dp5DQaj0BUwyCpE7Q4LqOLY8oqk1yDWU+n2U5TweudSh5XOdCU
QFtL368NihPAVM0PboXvsXQt/+Cjo1M+KxBLn7DZlrv+WRsrmU4DwyDImNhrNK4K
2p3phK4EnoO9AL4ayHxm0bUXEbyWSS+1kMhLLBIpBndrmcB5dJCG5JJrA7gnS4De
5QK7incz825X+ESbKBTRBklpIohotZtHqLFLBiDhzUAjMpdF73IBHlclkiM8NES3
7pChkxxmIqSaFg==
-----END CERTIFICATE-----
Generated at Sun Jul 20 16:33:52 2025 by rpki-client