Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          gIDYfl79Ms+ARhFUeZd8YiQQOK6ie6mQQwXdogWVmcU=
Subject key identifier:   0A:D0:20:2F:6F:71:78:4D:8E:90:C1:08:40:44:98:F3:10:88:16:E4
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       019847AD95DCDE12843760964DDFBC77AA18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          1591
Signing time:             Sat 26 Jul 2025 17:00:15 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:15 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:15 +0000
Files and hashes:         1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: MxCwWIiFe+ly3qAaga7OUR43vDfJzQ4a308nCBr2h84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:95:dc:de:12:84:37:60:96:4d:df:bc:77:aa:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: Jul 26 17:00:15 2025 GMT
            Not After : Jul 27 17:00:15 2025 GMT
        Subject: CN=0ad0202f6f71784d8e90c108404498f3108816e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:5f:cf:d0:e9:b9:bc:3e:e4:3c:db:7d:52:
                    07:e5:4e:68:75:d8:9e:3e:50:e1:e8:64:d8:18:c2:
                    5e:a4:41:13:43:27:fc:9d:b9:9c:18:62:bb:a8:51:
                    0d:ae:8f:cd:60:49:3b:50:a8:79:46:fd:05:b2:d6:
                    62:cb:48:46:e8:49:2d:75:4a:ba:43:82:ab:51:7e:
                    c4:c7:d2:60:f3:bc:89:ec:39:2d:cb:25:a3:48:c9:
                    f0:3c:b9:e8:7d:0e:95:10:6e:3a:96:46:ae:fb:dd:
                    64:07:7f:0f:66:97:97:19:ba:c9:21:08:5c:30:47:
                    7a:91:83:3c:05:98:6f:8f:37:bb:2e:ab:1e:1b:23:
                    3d:75:dd:d5:ff:cc:fe:43:f1:c3:7d:ea:23:46:d0:
                    1b:46:e1:57:08:8b:c4:cf:a7:01:f7:23:b9:48:17:
                    20:3a:0c:bd:87:9b:bd:5c:21:da:8d:d3:b9:9a:43:
                    5e:7f:ea:f8:c9:20:9d:0c:17:c1:de:c6:93:71:7e:
                    d6:ab:5b:46:c3:35:08:63:2b:4b:03:84:5a:38:8d:
                    89:fd:3e:fe:b0:32:6a:1a:ba:9c:a4:2a:84:00:8e:
                    a6:fd:c6:f7:aa:39:e2:48:ca:23:b4:70:91:cb:33:
                    36:bf:75:be:c3:12:a6:16:82:39:da:d5:d6:ef:9c:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D0:20:2F:6F:71:78:4D:8E:90:C1:08:40:44:98:F3:10:88:16:E4
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:c4:4b:9d:90:6a:cb:a5:36:a7:24:e5:f9:00:b3:0e:66:cf:
         54:89:e4:e1:f6:1d:de:49:6d:53:a9:7d:de:87:09:fc:46:61:
         8b:9c:e2:04:e0:22:6d:dd:68:53:6f:2f:9d:d1:ed:20:ca:1d:
         6e:2c:ab:08:d7:98:56:f6:90:37:84:78:71:df:5e:1b:1b:a8:
         d7:94:47:4f:ec:89:9a:7a:a4:7f:91:fc:89:ba:35:44:f2:58:
         8f:60:c0:cb:bf:7d:0f:4d:76:33:a1:95:f0:ec:5e:98:d9:fa:
         c3:d5:b0:27:6f:b3:e6:6c:1b:d3:e5:5b:02:ce:96:9b:b0:96:
         82:b0:1c:c8:bf:42:c3:5f:b1:a7:66:e4:d4:32:9a:d1:ef:ba:
         fe:55:e1:3d:46:a6:e6:21:08:ff:5a:d4:c2:c7:b8:52:59:81:
         7a:b2:36:d1:e1:25:8b:af:ce:06:65:ce:8f:e7:ab:ff:1d:86:
         0d:cc:67:2a:02:cb:9a:27:94:6b:ee:2c:65:65:34:29:92:19:
         cc:13:ba:ed:e0:ee:38:a2:94:76:14:cd:bc:b4:0e:55:3c:8c:
         14:b7:21:3b:7b:c7:66:42:45:07:ad:d5:2a:1b:53:69:fd:ee:
         d0:81:ea:76:26:03:9f:ff:ee:6f:5d:2a:44:74:03:f3:c9:6a:
         b5:54:07:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHrZXc3hKEN2CWTd+8d6oYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NTA0YTRlZmQ1MWRjOTU4NDdjMTU2ZjRhMzZkYmZlNTU4
M2MyYjAwHhcNMjUwNzI2MTcwMDE1WhcNMjUwNzI3MTcwMDE1WjAzMTEwLwYDVQQD
EygwYWQwMjAyZjZmNzE3ODRkOGU5MGMxMDg0MDQ0OThmMzEwODgxNmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25xfz9Dpubw+5DzbfVIH5U5oddie
PlDh6GTYGMJepEETQyf8nbmcGGK7qFENro/NYEk7UKh5Rv0FstZiy0hG6EktdUq6
Q4KrUX7Ex9Jg87yJ7DktyyWjSMnwPLnofQ6VEG46lkau+91kB38PZpeXGbrJIQhc
MEd6kYM8BZhvjze7LqseGyM9dd3V/8z+Q/HDfeojRtAbRuFXCIvEz6cB9yO5SBcg
Ogy9h5u9XCHajdO5mkNef+r4ySCdDBfB3saTcX7Wq1tGwzUIYytLA4RaOI2J/T7+
sDJqGrqcpCqEAI6m/cb3qjniSMojtHCRyzM2v3W+wxKmFoI52tXW75xcEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArQIC9vcXhNjpDBCEBEmPMQiBbkMB8GA1UdIwQY
MBaAFFdQSk79UdyVhHwVb0o22/5Vg8KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wMjI2MDYtNGZhYS00ZTk5LWJlMjkt
OTYzNDgwZTliZTc5LzEvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8wMjI2MDYtNGZhYS00ZTk5LWJlMjktOTYzNDgwZTliZTc5
LzEvVjFCS1R2MVIzSldFZkJWdlNqYmJfbFdEd3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd8RLnZBq
y6U2pyTl+QCzDmbPVInk4fYd3kltU6l93ocJ/EZhi5ziBOAibd1oU28vndHtIMod
biyrCNeYVvaQN4R4cd9eGxuo15RHT+yJmnqkf5H8ibo1RPJYj2DAy799D012M6GV
8OxemNn6w9WwJ2+z5mwb0+VbAs6Wm7CWgrAcyL9Cw1+xp2bk1DKa0e+6/lXhPUam
5iEI/1rUwse4UlmBerI20eEli6/OBmXOj+er/x2GDcxnKgLLmieUa+4sZWU0KZIZ
zBO67eDuOKKUdhTNvLQOVTyMFLchO3vHZkJFB63VKhtTaf3u0IHqdiYDn//ub10q
RHQD88lqtVQHAg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:14:26 2025 by rpki-client