Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
File:                     Be02xlZG2ssRSqcsG7y3QYG3_0M.mft (raw, json)
Hash identifier:          jLV7cnW/wjn9BizaLtdkbcepv3XIyiITSihk7YcmYCw=
Subject key identifier:   06:C4:07:76:AC:85:39:1A:47:93:CB:6C:60:3D:DF:6E:87:CE:28:58
Authority key identifier: 05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43
Certificate issuer:       /CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
Certificate serial:       019922559D15CDC28B796F5C283CF4609FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
Manifest number:          119E
Signing time:             Sun 07 Sep 2025 04:01:00 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:00 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:00 +0000
Files and hashes:         1: Be02xlZG2ssRSqcsG7y3QYG3_0M.crl (hash: JibP4LPk7Y6KY/um3a2idDc91Cw2RPE3f3rUL4YB+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:9d:15:cd:c2:8b:79:6f:5c:28:3c:f4:60:9f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ed36c65646dacb114aa72c1bbcb74181b7ff43
        Validity
            Not Before: Sep  7 04:01:00 2025 GMT
            Not After : Sep  8 04:01:00 2025 GMT
        Subject: CN=06c40776ac85391a4793cb6c603ddf6e87ce2858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3f:9f:03:fb:52:4f:5e:47:52:f0:60:59:f4:
                    0c:38:40:c7:cf:c0:76:c5:a3:fd:db:71:74:f4:3d:
                    c4:5d:9f:e3:b2:9c:be:b1:81:03:27:56:f9:74:61:
                    52:27:b3:21:60:5c:97:c9:eb:29:76:f2:f9:5e:9e:
                    59:3d:6e:c7:51:e2:64:8a:44:ac:5f:9e:06:4c:28:
                    49:2e:3e:7e:4f:55:81:2e:c1:a3:35:77:88:9c:3b:
                    bb:d1:c4:ec:02:ac:03:21:f9:2a:e4:46:c3:df:69:
                    94:49:39:40:95:c4:96:62:0c:18:92:cb:cf:43:ab:
                    67:7c:03:1d:28:d7:c6:59:9a:78:a9:44:c0:d8:61:
                    69:47:4d:b5:a2:eb:4e:60:54:dc:20:db:a1:cf:d0:
                    c4:39:25:18:a3:d2:28:88:95:6e:02:a9:5b:07:71:
                    29:2a:b4:93:e2:56:56:eb:bc:64:e6:d7:47:c1:f1:
                    f5:2a:8a:a1:4d:ad:c1:56:3a:be:6e:f2:aa:e9:d4:
                    c7:cb:b2:4d:81:f2:20:34:a3:ac:0b:e5:36:8d:ba:
                    99:94:f8:a1:f8:c3:42:d3:ba:06:77:b3:ea:10:79:
                    a9:d2:ce:44:63:a7:8f:ad:7f:72:3a:f2:e5:63:02:
                    3b:18:65:cb:a1:42:b8:21:7a:5f:01:da:9a:24:98:
                    0a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:07:76:AC:85:39:1A:47:93:CB:6C:60:3D:DF:6E:87:CE:28:58
            X509v3 Authority Key Identifier:
                keyid:05:ED:36:C6:56:46:DA:CB:11:4A:A7:2C:1B:BC:B7:41:81:B7:FF:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Be02xlZG2ssRSqcsG7y3QYG3_0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e95822-1813-4958-bf64-8dddb9c34d97/1/Be02xlZG2ssRSqcsG7y3QYG3_0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:79:b4:51:3a:e6:d0:d0:f3:ea:49:5d:0f:dd:f9:64:7a:c4:
         3f:bd:6c:37:78:0e:79:87:97:19:0d:14:67:64:e6:33:e2:3b:
         b8:9c:43:a2:9d:b8:42:f6:47:3a:71:21:b5:2f:98:d7:5b:61:
         09:55:ee:bd:0f:20:08:94:05:b0:e5:6d:2e:d2:37:72:9b:dd:
         05:8e:7f:1d:d2:81:03:82:aa:e8:2f:1c:ab:a1:70:8f:d8:bd:
         8e:41:3f:bd:ca:18:09:0c:ec:ea:bc:35:6d:bb:04:64:92:cd:
         c2:71:7d:0c:46:3d:da:c7:44:92:ac:85:ee:9d:cb:b4:8b:b0:
         d8:a7:f1:91:cf:30:7d:62:b6:d4:15:79:15:45:c8:83:ec:fd:
         25:88:7e:37:8f:3c:23:13:82:01:89:60:df:16:35:4d:46:70:
         9f:ac:28:63:ab:f1:f5:7f:55:81:68:b0:53:60:7d:9f:1c:b0:
         93:7c:44:e3:95:97:bd:f8:ab:97:59:a1:f9:db:5f:82:27:cb:
         6d:55:ed:34:79:5a:ae:36:5a:3f:4f:51:22:c7:77:3b:8d:01:
         96:98:9f:86:81:88:aa:14:e4:31:23:56:3a:f8:ac:8b:3d:72:
         dd:5d:d8:72:6c:70:1c:66:41:06:fc:59:51:df:f6:74:2c:6a:
         cf:ef:b1:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVZ0VzcKLeW9cKDz0YJ/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWQzNmM2NTY0NmRhY2IxMTRhYTcyYzFiYmNiNzQxODFi
N2ZmNDMwHhcNMjUwOTA3MDQwMTAwWhcNMjUwOTA4MDQwMTAwWjAzMTEwLwYDVQQD
EygwNmM0MDc3NmFjODUzOTFhNDc5M2NiNmM2MDNkZGY2ZTg3Y2UyODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD+fA/tST15HUvBgWfQMOEDHz8B2
xaP923F09D3EXZ/jspy+sYEDJ1b5dGFSJ7MhYFyXyespdvL5Xp5ZPW7HUeJkikSs
X54GTChJLj5+T1WBLsGjNXeInDu70cTsAqwDIfkq5EbD32mUSTlAlcSWYgwYksvP
Q6tnfAMdKNfGWZp4qUTA2GFpR021outOYFTcINuhz9DEOSUYo9IoiJVuAqlbB3Ep
KrST4lZW67xk5tdHwfH1KoqhTa3BVjq+bvKq6dTHy7JNgfIgNKOsC+U2jbqZlPih
+MNC07oGd7PqEHmp0s5EY6ePrX9yOvLlYwI7GGXLoUK4IXpfAdqaJJgK1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbEB3ashTkaR5PLbGA9326HzihYMB8GA1UdIwQY
MBaAFAXtNsZWRtrLEUqnLBu8t0GBt/9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQt
OGRkZGI5YzM0ZDk3LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9lOTU4MjItMTgxMy00OTU4LWJmNjQtOGRkZGI5YzM0ZDk3
LzEvQmUwMnhsWkcyc3NSU3Fjc0c3eTNRWUczXzBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXm0UTrm
0NDz6kldD935ZHrEP71sN3gOeYeXGQ0UZ2TmM+I7uJxDop24QvZHOnEhtS+Y11th
CVXuvQ8gCJQFsOVtLtI3cpvdBY5/HdKBA4Kq6C8cq6Fwj9i9jkE/vcoYCQzs6rw1
bbsEZJLNwnF9DEY92sdEkqyF7p3LtIuw2Kfxkc8wfWK21BV5FUXIg+z9JYh+N488
IxOCAYlg3xY1TUZwn6woY6vx9X9VgWiwU2B9nxywk3xE45WXvfirl1mh+dtfgifL
bVXtNHlarjZaP09RIsd3O40BlpifhoGIqhTkMSNWOvisiz1y3V3YcmxwHGZBBvxZ
Ud/2dCxqz++xMg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:26 2025 by rpki-client