Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          VdXfnefZsqD6A3ZjXYz45Qh8t16M6J+fl+zEd785nRQ=
Subject key identifier:   26:ED:FD:82:F2:AA:E1:5A:2C:45:FC:48:E6:0A:AC:BD:95:4E:81:EE
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019837283F785993DD5808CE55C5400AA1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          15FA
Signing time:             Wed 23 Jul 2025 12:00:41 +0000
Manifest this update:     Wed 23 Jul 2025 12:00:41 +0000
Manifest next update:     Thu 24 Jul 2025 12:00:41 +0000
Files and hashes:         1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
                          2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
                          3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: QgClfVwetyGTxZo+AQPdgeGBlbAzYoOIKGOpY97mSOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:37:28:3f:78:59:93:dd:58:08:ce:55:c5:40:0a:a1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Jul 23 12:00:41 2025 GMT
            Not After : Jul 24 12:00:41 2025 GMT
        Subject: CN=26edfd82f2aae15a2c45fc48e60aacbd954e81ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:be:e1:eb:9c:45:ae:ad:c9:76:8f:cf:52:ec:
                    fe:ad:0f:78:98:48:92:e1:1d:a5:e8:fd:73:f7:e2:
                    f9:6a:b3:dc:7f:16:47:5f:bd:3c:68:2f:f4:89:c1:
                    78:39:0a:56:4f:4b:50:90:2d:a6:1f:ea:a2:69:c1:
                    a3:9f:34:3b:82:7d:f2:54:da:38:87:d1:2c:85:c7:
                    dc:1d:34:5a:0b:bf:2a:f6:3b:bf:de:f7:06:bd:c8:
                    5e:f8:6f:8a:8e:26:c9:07:92:b8:24:85:30:ee:06:
                    cf:e3:e4:09:52:a0:2f:32:01:a2:d6:d7:70:c3:4a:
                    cd:e2:72:e1:c5:b4:57:84:16:22:47:0c:76:7b:13:
                    c2:a2:df:8f:9c:89:2a:83:f8:67:4c:aa:fd:cb:dd:
                    5b:f7:a9:a9:c7:af:04:c0:28:01:05:f6:a8:f0:d7:
                    cc:21:bf:ec:a5:6b:d2:8f:62:58:37:31:23:45:c5:
                    f5:ad:5e:92:9f:b2:ca:c4:5f:e2:d9:d9:9d:f0:24:
                    51:93:dc:c2:71:b1:ea:20:b8:ee:6c:a2:2f:2d:89:
                    ba:bc:48:54:96:3e:05:ad:58:c1:33:13:cf:b4:49:
                    b9:f3:97:72:94:ca:56:f8:2c:f9:d9:8a:9a:e7:f5:
                    17:e2:8c:f5:1c:d1:c1:fb:4f:41:6d:74:b5:a9:e6:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:ED:FD:82:F2:AA:E1:5A:2C:45:FC:48:E6:0A:AC:BD:95:4E:81:EE
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:f0:1e:d3:89:56:da:d6:e6:c2:3e:16:3e:04:82:5c:36:1f:
         d4:e0:af:c0:f7:fd:85:6d:a0:17:c7:cc:0d:4c:80:94:82:8a:
         6b:95:e1:62:74:4b:a1:b4:21:b0:61:28:8e:80:0f:98:de:8f:
         60:a4:ad:18:59:76:57:65:99:47:4b:a4:d9:89:cf:e2:85:20:
         a4:ff:93:41:2b:d6:23:69:2a:ba:8d:3e:ed:8d:ac:55:df:f3:
         d7:8d:18:41:49:7b:ce:0c:03:4c:12:05:f7:7b:5c:da:86:80:
         af:00:37:b4:e1:83:6e:69:b4:f8:a7:d0:2a:d2:7f:c0:dd:e0:
         43:66:3a:76:57:8c:be:e9:05:9d:7e:18:fe:1f:b0:10:88:84:
         51:f8:6a:20:97:9f:ba:f9:b6:68:a8:97:d2:47:ef:00:2d:e9:
         51:77:4b:de:77:a9:e1:7b:33:9a:71:47:0e:3e:1b:38:a6:92:
         0d:f5:fb:1b:a8:c4:b8:de:f3:a6:94:62:ae:c3:a3:c4:78:44:
         78:ae:20:6f:ed:13:d7:ca:35:36:da:4e:25:e7:6f:ae:19:c3:
         17:94:d9:6d:3c:d9:46:bd:38:ef:35:ee:ef:e8:92:4c:fa:62:
         65:0d:5d:64:0a:72:bb:d4:a5:a0:ee:17:23:64:d6:52:ce:b4:
         13:bb:c8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg3KD94WZPdWAjOVcVACqGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDFkYzRkMmViN2JmMmEzZjA4ZDU0NTc1NTQ3NzA1NTE0
M2YxNzQwHhcNMjUwNzIzMTIwMDQxWhcNMjUwNzI0MTIwMDQxWjAzMTEwLwYDVQQD
EygyNmVkZmQ4MmYyYWFlMTVhMmM0NWZjNDhlNjBhYWNiZDk1NGU4MWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr7h65xFrq3Jdo/PUuz+rQ94mEiS
4R2l6P1z9+L5arPcfxZHX708aC/0icF4OQpWT0tQkC2mH+qiacGjnzQ7gn3yVNo4
h9EshcfcHTRaC78q9ju/3vcGvche+G+KjibJB5K4JIUw7gbP4+QJUqAvMgGi1tdw
w0rN4nLhxbRXhBYiRwx2exPCot+PnIkqg/hnTKr9y91b96mpx68EwCgBBfao8NfM
Ib/spWvSj2JYNzEjRcX1rV6Sn7LKxF/i2dmd8CRRk9zCcbHqILjubKIvLYm6vEhU
lj4FrVjBMxPPtEm585dylMpW+Cz52Yqa5/UX4oz1HNHB+09BbXS1qebBRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbt/YLyquFaLEX8SOYKrL2VToHuMB8GA1UdIwQY
MBaAFG3R3E0ut78qPwjVRXVUdwVRQ/F0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYt
ZmI0YzU0YjY3MzNhLzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9iZWU0ODMtZWViMy00YzUzLWE0NTYtZmI0YzU0YjY3MzNh
LzEvYmRIY1RTNjN2eW9fQ05WRmRWUjNCVkZEOFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfAe04lW
2tbmwj4WPgSCXDYf1OCvwPf9hW2gF8fMDUyAlIKKa5XhYnRLobQhsGEojoAPmN6P
YKStGFl2V2WZR0uk2YnP4oUgpP+TQSvWI2kquo0+7Y2sVd/z140YQUl7zgwDTBIF
93tc2oaArwA3tOGDbmm0+KfQKtJ/wN3gQ2Y6dleMvukFnX4Y/h+wEIiEUfhqIJef
uvm2aKiX0kfvAC3pUXdL3nep4XszmnFHDj4bOKaSDfX7G6jEuN7zppRirsOjxHhE
eK4gb+0T18o1NtpOJedvrhnDF5TZbTzZRr047zXu7+iSTPpiZQ1dZApyu9SloO4X
I2TWUs60E7vIQQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 18:01:33 2025 by rpki-client