Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File:                     B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier:          QGXQOoW7ALA1ZwLN729Hera0dMQBEc/RZEr9O6b3PT8=
Subject key identifier:   F6:8F:4B:E6:00:15:11:97:02:8E:9D:F0:35:BF:A3:26:33:10:2D:37
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer:       /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial:       019845F65D8C4C88751F30025D9ACD5CCD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 09:00:30 +0000
Manifest this update:     Sat 26 Jul 2025 09:00:30 +0000
Manifest next update:     Sun 27 Jul 2025 09:00:30 +0000
Files and hashes:         1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: k8MMuTPO8sg86F03CH7FFkjRR18JKBA4tXLuO6x3Omo=)
                          2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 02:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:f6:5d:8c:4c:88:75:1f:30:02:5d:9a:cd:5c:cd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
        Validity
            Not Before: Jul 26 09:00:30 2025 GMT
            Not After : Jul 27 09:00:30 2025 GMT
        Subject: CN=f68f4be600151197028e9df035bfa32633102d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:6a:55:ec:b6:05:27:57:d9:f1:11:b0:b7:
                    df:27:43:2f:84:77:7b:89:e7:2f:a5:ca:25:cd:25:
                    b8:2d:39:a4:51:0a:2f:6f:61:0f:09:d9:e6:d8:70:
                    bd:3d:80:30:6d:bb:bb:52:99:07:86:0f:92:48:c0:
                    59:8a:20:32:ca:37:d9:05:ed:80:d9:8f:ac:4c:4b:
                    75:2d:2b:1f:3b:ae:9c:60:16:b9:31:68:99:0f:7b:
                    9f:e6:3c:8d:32:05:85:b0:da:02:85:04:25:ff:11:
                    c6:35:81:0c:4b:ca:e3:cd:3a:60:38:b8:19:da:74:
                    c6:d8:b0:2f:b0:66:07:4e:38:bc:e5:e1:fc:72:d3:
                    62:1a:62:35:28:35:07:1f:6f:66:33:55:af:29:f3:
                    32:1b:0c:8c:57:8e:3c:b4:fa:c2:46:d7:c3:21:1f:
                    60:d7:61:55:b8:d8:e3:78:69:f8:ae:20:96:15:14:
                    21:06:e1:41:b7:43:88:3a:59:0d:73:f4:bc:cd:2f:
                    05:53:d9:d6:45:59:ff:1e:7a:95:96:39:52:ff:4c:
                    66:fa:5b:41:ca:f8:25:90:a4:8e:d3:86:16:81:94:
                    8b:03:a0:5d:74:38:78:d2:3f:ea:88:f6:35:68:59:
                    69:98:fa:7a:3a:7e:7e:fe:92:aa:d1:ac:80:df:46:
                    31:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8F:4B:E6:00:15:11:97:02:8E:9D:F0:35:BF:A3:26:33:10:2D:37
            X509v3 Authority Key Identifier:
                keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:17:6a:6e:46:e3:56:19:eb:e8:08:08:41:39:32:be:15:60:
         7b:e0:d5:c6:a9:b2:41:81:b2:a2:25:4a:9a:1e:85:f9:9b:14:
         43:f2:20:6b:6f:16:17:df:95:6c:d4:10:f7:cd:81:2b:5c:ab:
         0b:da:20:76:47:00:98:b1:c8:57:0b:31:78:c5:25:04:59:42:
         d7:7b:95:0b:d4:9e:0b:b9:3c:7a:fe:cb:df:85:eb:83:d3:11:
         22:54:84:1d:78:52:a2:c8:db:00:5a:a5:6c:97:fa:10:2f:41:
         94:35:13:82:ec:6a:42:60:66:e7:bd:de:f5:fa:99:cd:6d:29:
         c3:c3:dc:a1:f4:49:fe:b4:bf:bb:ce:0e:09:9c:34:19:98:e8:
         46:dc:f4:df:f5:91:1f:cf:6c:25:58:92:aa:e9:e0:41:14:75:
         9d:85:66:5e:bb:74:36:5f:81:f7:ef:50:49:ec:bb:91:ca:3e:
         b1:f0:61:8d:9f:25:b5:32:3e:55:c1:5c:21:8a:c6:80:5e:60:
         ee:37:ff:d2:b9:e9:4b:14:76:15:6a:1d:3c:f3:c6:f6:18:00:
         50:c3:37:f8:82:64:47:8c:44:b3:96:bc:69:a6:79:a4:47:88:
         4d:2e:fb:b7:c1:16:1f:fb:3e:9c:f3:f6:78:d0:ad:51:31:cc:
         86:c6:ad:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhF9l2MTIh1HzACXZrNXM0fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YTA0ODZkYzBiNGJhNzMwOTAzNzg4ZmYzZjNmN2M4MjQ5
YjkyMWYwHhcNMjUwNzI2MDkwMDMwWhcNMjUwNzI3MDkwMDMwWjAzMTEwLwYDVQQD
EyhmNjhmNGJlNjAwMTUxMTk3MDI4ZTlkZjAzNWJmYTMyNjMzMTAyZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudxqVey2BSdX2fERsLffJ0MvhHd7
iecvpcolzSW4LTmkUQovb2EPCdnm2HC9PYAwbbu7UpkHhg+SSMBZiiAyyjfZBe2A
2Y+sTEt1LSsfO66cYBa5MWiZD3uf5jyNMgWFsNoChQQl/xHGNYEMS8rjzTpgOLgZ
2nTG2LAvsGYHTji85eH8ctNiGmI1KDUHH29mM1WvKfMyGwyMV448tPrCRtfDIR9g
12FVuNjjeGn4riCWFRQhBuFBt0OIOlkNc/S8zS8FU9nWRVn/HnqVljlS/0xm+ltB
yvglkKSO04YWgZSLA6BddDh40j/qiPY1aFlpmPp6On5+/pKq0ayA30YxrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaPS+YAFRGXAo6d8DW/oyYzEC03MB8GA1UdIwQY
MBaAFAegSG3AtLpzCQN4j/Pz98gkm5IfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2Yt
NmJkZGIzMTdlNzhiLzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NmNjOTEtYmE2Mi00MDM3LWI1N2YtNmJkZGIzMTdlNzhi
LzEvQjZCSWJjQzB1bk1KQTNpUDhfUDN5Q1Nia2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBdqbkbj
Vhnr6AgIQTkyvhVge+DVxqmyQYGyoiVKmh6F+ZsUQ/Iga28WF9+VbNQQ982BK1yr
C9ogdkcAmLHIVwsxeMUlBFlC13uVC9SeC7k8ev7L34Xrg9MRIlSEHXhSosjbAFql
bJf6EC9BlDUTguxqQmBm573e9fqZzW0pw8PcofRJ/rS/u84OCZw0GZjoRtz03/WR
H89sJViSqungQRR1nYVmXrt0Nl+B9+9QSey7kco+sfBhjZ8ltTI+VcFcIYrGgF5g
7jf/0rnpSxR2FWodPPPG9hgAUMM3+IJkR4xEs5a8aaZ5pEeITS77t8EWH/s+nPP2
eNCtUTHMhsat7w==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:57:43 2025 by rpki-client