Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File:                     ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier:          bx9UAZ2L4q/os3ku6Q4WY1NG+q0PNE4PJIDoLATHCv4=
Subject key identifier:   99:DC:98:01:13:34:AD:E1:20:3A:3A:BB:7B:1A:31:F1:B0:B8:77:E0
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer:       /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial:       019848531A7438BAED5ED873555E31D065E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number:          0516
Signing time:             Sat 26 Jul 2025 20:01:02 +0000
Manifest this update:     Sat 26 Jul 2025 20:01:02 +0000
Manifest next update:     Sun 27 Jul 2025 20:01:02 +0000
Files and hashes:         1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: adfLO4tgauJQpPK+5go/lc1xG7lhCe2T1JajYko4tX0=)
                          2: n51LqiSA0rMUtUWDquU9cWqaMtU.roa (hash: iPh7pjJVqIiLkGRXh6FLV/CJeq5XVyPi9Pp+8BYdKNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:53:1a:74:38:ba:ed:5e:d8:73:55:5e:31:d0:65:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
        Validity
            Not Before: Jul 26 20:01:02 2025 GMT
            Not After : Jul 27 20:01:02 2025 GMT
        Subject: CN=99dc98011334ade1203a3abb7b1a31f1b0b877e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4f:61:77:3d:3e:7c:50:e1:ad:1c:8b:28:62:
                    66:8a:89:76:ca:f1:dd:a4:c7:08:92:1d:59:3d:d8:
                    af:14:ba:56:7c:67:01:ed:d8:61:fb:64:b0:58:ba:
                    4f:81:3b:38:ad:71:99:cd:4f:34:16:28:d7:f7:49:
                    5c:ea:d8:e3:14:c6:00:cf:2d:97:7e:a4:53:ff:d2:
                    7e:8b:77:fa:dc:7f:79:a7:e0:49:a9:ed:08:52:b5:
                    c3:61:e6:4c:fb:4c:b0:3a:d3:7d:8d:7a:ae:34:bb:
                    77:75:d3:f2:57:5b:e8:df:24:25:9b:0d:1f:1e:6a:
                    be:77:0f:6b:16:87:80:57:b3:14:4e:7f:9e:6a:0b:
                    ea:02:42:3a:7a:6e:6a:dd:04:34:93:90:f3:6c:d1:
                    07:af:36:06:91:de:dd:66:f1:bc:f1:2e:40:3b:b2:
                    55:92:0f:a0:0d:24:60:fb:d2:a5:e6:53:91:76:c5:
                    aa:c4:81:15:d6:09:aa:fe:8f:97:db:9f:0a:be:8e:
                    62:07:8c:87:bf:9c:24:91:40:ac:de:96:98:8d:ae:
                    3e:cf:99:a2:00:1b:01:8d:08:e0:c2:93:2e:4b:21:
                    b8:17:5b:f4:13:e3:a1:2b:cc:07:e9:46:9d:f7:e9:
                    bd:2a:1a:16:71:2f:24:87:e8:c9:01:07:17:88:3d:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DC:98:01:13:34:AD:E1:20:3A:3A:BB:7B:1A:31:F1:B0:B8:77:E0
            X509v3 Authority Key Identifier:
                keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4c:71:5b:11:87:71:36:d2:cc:dd:fd:20:12:0b:7e:f3:e0:
         02:e9:e6:a9:24:dd:a8:8f:44:c8:87:5a:d1:ce:0d:32:ae:7d:
         2a:53:e5:17:9c:83:5a:fe:3e:46:8e:62:ca:89:e9:32:74:bb:
         fd:ff:ce:ec:51:04:36:d9:a7:73:82:4a:af:7b:7d:dc:6f:0e:
         3e:51:54:e0:ed:d6:1b:99:a8:a4:ea:15:94:02:f2:08:f4:35:
         aa:21:30:12:52:31:7e:a6:33:7c:d1:e5:dd:05:54:29:3c:ae:
         bf:64:f8:61:25:76:74:7b:5e:0b:10:40:5e:3a:e0:cc:c2:eb:
         00:03:70:e4:51:1c:a7:31:97:b5:0b:40:c0:ee:29:d6:90:e7:
         25:1b:c7:e9:ea:80:ad:c0:60:9f:06:1b:5f:9a:d3:7a:6b:78:
         11:b6:6c:c2:c5:df:f0:cf:97:96:a6:7f:a4:7d:0a:4e:be:f3:
         1a:33:ae:d3:b0:ab:d0:8c:b5:5d:c1:23:81:ba:a7:fe:b4:1c:
         e5:20:f7:6b:13:01:fe:8e:2e:1c:6b:de:f2:99:b6:4c:a7:27:
         02:70:c8:6f:05:83:55:a5:0d:1b:9b:2d:9c:17:d9:62:0d:40:
         56:2d:06:2c:11:4a:20:de:21:c7:4a:e7:94:2f:2b:ba:0c:00:
         67:bf:04:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUxp0OLrtXthzVV4x0GXoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh
ZTdjMGQwHhcNMjUwNzI2MjAwMTAyWhcNMjUwNzI3MjAwMTAyWjAzMTEwLwYDVQQD
Eyg5OWRjOTgwMTEzMzRhZGUxMjAzYTNhYmI3YjFhMzFmMWIwYjg3N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm09hdz0+fFDhrRyLKGJmiol2yvHd
pMcIkh1ZPdivFLpWfGcB7dhh+2SwWLpPgTs4rXGZzU80FijX90lc6tjjFMYAzy2X
fqRT/9J+i3f63H95p+BJqe0IUrXDYeZM+0ywOtN9jXquNLt3ddPyV1vo3yQlmw0f
Hmq+dw9rFoeAV7MUTn+eagvqAkI6em5q3QQ0k5DzbNEHrzYGkd7dZvG88S5AO7JV
kg+gDSRg+9Kl5lORdsWqxIEV1gmq/o+X258Kvo5iB4yHv5wkkUCs3paYja4+z5mi
ABsBjQjgwpMuSyG4F1v0E+OhK8wH6Uad9+m9KhoWcS8kh+jJAQcXiD3AvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJncmAETNK3hIDo6u3saMfGwuHfgMB8GA1UdIwQY
MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt
NjRlZGQyN2M1ZDdhLzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh
LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhExxWxGH
cTbSzN39IBILfvPgAunmqSTdqI9EyIda0c4NMq59KlPlF5yDWv4+Ro5iyonpMnS7
/f/O7FEENtmnc4JKr3t93G8OPlFU4O3WG5mopOoVlALyCPQ1qiEwElIxfqYzfNHl
3QVUKTyuv2T4YSV2dHteCxBAXjrgzMLrAANw5FEcpzGXtQtAwO4p1pDnJRvH6eqA
rcBgnwYbX5rTemt4EbZswsXf8M+XlqZ/pH0KTr7zGjOu07Cr0Iy1XcEjgbqn/rQc
5SD3axMB/o4uHGve8pm2TKcnAnDIbwWDVaUNG5stnBfZYg1AVi0GLBFKIN4hx0rn
lC8rugwAZ78E+A==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:32:07 2025 by rpki-client