Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          jdgKtXi9M1jeYPRvf3srzXHc3mxgaODPtkHBfB3vEio=
Subject key identifier:   31:2A:5B:D3:7E:28:24:BD:A3:CC:EC:54:E7:D7:EA:39:89:FF:9E:BA
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       0199356F193455D7236B23A011A4320CF7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0AB2
Signing time:             Wed 10 Sep 2025 21:01:37 +0000
Manifest this update:     Wed 10 Sep 2025 21:01:37 +0000
Manifest next update:     Thu 11 Sep 2025 21:01:37 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: lJkL7FJf2rbDE2KvFrynKsOwxosDyc4iXSZl6uATglo=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6f:19:34:55:d7:23:6b:23:a0:11:a4:32:0c:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Sep 10 21:01:37 2025 GMT
            Not After : Sep 11 21:01:37 2025 GMT
        Subject: CN=312a5bd37e2824bda3ccec54e7d7ea3989ff9eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:cc:76:bc:07:0b:41:9f:10:0c:e8:b4:4a:
                    24:3b:ab:6c:bb:63:1f:78:58:b0:28:cd:e0:b8:01:
                    c1:e2:32:93:48:b5:af:3e:e7:cd:b4:84:bd:45:b4:
                    54:2a:c5:77:55:be:a2:42:c4:c7:57:09:c5:84:3a:
                    6a:11:36:0b:0a:aa:12:22:de:f2:94:b9:f1:e6:cf:
                    59:ad:b5:c2:6d:5b:63:6d:c7:75:8a:61:cf:a5:f8:
                    cb:d5:ed:bb:98:f5:13:e5:4d:e4:e0:f0:39:83:5f:
                    02:e3:92:43:b4:26:ef:b7:3e:e2:4c:9e:9d:cf:7c:
                    5a:04:07:72:fc:f8:03:ce:e7:ef:f1:16:e7:48:12:
                    7f:87:71:64:ec:45:09:e0:fa:ac:13:5f:80:93:2b:
                    7d:fc:57:7d:e1:e0:8d:c2:dd:5d:b4:2c:67:9e:ea:
                    be:95:a3:16:86:cd:a4:27:71:aa:ad:d8:c9:b6:7b:
                    78:bd:44:db:cc:19:ae:65:09:2c:35:0b:5c:6c:dd:
                    b5:99:76:c7:bc:48:aa:73:c7:83:b3:56:10:28:2b:
                    24:b0:16:4b:53:d4:e5:5b:fd:a9:6d:ee:ec:73:f4:
                    63:f4:8d:d1:fe:9f:a1:46:97:5b:ea:92:0f:db:0f:
                    57:39:de:25:b4:42:a8:a7:37:c0:b8:ca:ca:9b:0d:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2A:5B:D3:7E:28:24:BD:A3:CC:EC:54:E7:D7:EA:39:89:FF:9E:BA
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9f:7c:ac:a8:ae:6a:0c:86:84:29:31:57:3e:f0:7d:93:b7:
         be:a0:25:6b:09:21:a8:1e:44:25:d2:bd:f5:f1:f5:57:8d:a7:
         9c:0a:d6:e3:45:dd:25:c3:11:07:67:0f:3c:fa:db:61:76:3f:
         58:46:f2:24:c4:7b:d7:fc:4a:be:2b:4d:26:08:45:1f:92:05:
         1c:4d:f9:82:6a:90:08:b4:41:6d:df:89:a2:a4:ad:54:6b:39:
         e2:64:5c:16:40:c7:dd:90:4b:9c:08:1f:87:57:10:18:49:27:
         f5:c3:d4:b3:9c:de:ce:91:84:e7:23:8f:e8:94:ce:44:81:5c:
         39:0a:bc:b7:5d:30:6d:2b:1a:ab:13:9f:92:a5:45:0d:54:28:
         2f:74:40:d6:5a:40:56:fc:08:ed:10:9d:1c:20:b8:8d:ed:77:
         9c:6c:5e:d4:42:de:7d:f1:8a:43:b1:eb:5b:48:14:66:55:92:
         b1:12:50:7f:da:dc:e7:d6:39:cc:9d:14:c4:99:bd:0f:87:f4:
         71:91:69:39:d8:67:9e:63:1c:5c:9d:5a:e3:26:f7:19:6a:5b:
         7b:c9:e6:b8:db:96:b2:30:f0:8d:b5:bd:c4:52:bf:23:77:33:
         93:3c:67:7f:9c:7d:c9:ef:0d:5f:04:16:41:c2:36:38:ec:3c:
         f5:00:ac:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1bxk0VdcjayOgEaQyDPe5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk
NDQ3NTQwHhcNMjUwOTEwMjEwMTM3WhcNMjUwOTExMjEwMTM3WjAzMTEwLwYDVQQD
EygzMTJhNWJkMzdlMjgyNGJkYTNjY2VjNTRlN2Q3ZWEzOTg5ZmY5ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZDMdrwHC0GfEAzotEokO6tsu2Mf
eFiwKM3guAHB4jKTSLWvPufNtIS9RbRUKsV3Vb6iQsTHVwnFhDpqETYLCqoSIt7y
lLnx5s9ZrbXCbVtjbcd1imHPpfjL1e27mPUT5U3k4PA5g18C45JDtCbvtz7iTJ6d
z3xaBAdy/PgDzufv8RbnSBJ/h3Fk7EUJ4PqsE1+Akyt9/Fd94eCNwt1dtCxnnuq+
laMWhs2kJ3GqrdjJtnt4vUTbzBmuZQksNQtcbN21mXbHvEiqc8eDs1YQKCsksBZL
U9TlW/2pbe7sc/Rj9I3R/p+hRpdb6pIP2w9XOd4ltEKopzfAuMrKmw2IDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEqW9N+KCS9o8zsVOfX6jmJ/566MB8GA1UdIwQY
MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt
NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3
LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb598rKiu
agyGhCkxVz7wfZO3vqAlawkhqB5EJdK99fH1V42nnArW40XdJcMRB2cPPPrbYXY/
WEbyJMR71/xKvitNJghFH5IFHE35gmqQCLRBbd+JoqStVGs54mRcFkDH3ZBLnAgf
h1cQGEkn9cPUs5zezpGE5yOP6JTORIFcOQq8t10wbSsaqxOfkqVFDVQoL3RA1lpA
VvwI7RCdHCC4je13nGxe1ELeffGKQ7HrW0gUZlWSsRJQf9rc59Y5zJ0UxJm9D4f0
cZFpOdhnnmMcXJ1a4yb3GWpbe8nmuNuWsjDwjbW9xFK/I3czkzxnf5x9ye8NXwQW
QcI2OOw89QCsRA==
-----END CERTIFICATE-----
Generated at Wed Sep 10 23:00:47 2025 by rpki-client