Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
File:                     btSqOMC1kdSms-WFaFxtQ4gNrHg.mft (raw, json)
Hash identifier:          HFz2+cW2fxx46sdsxDRq9iXFNLRrCfA7WI2RYR8b0xk=
Subject key identifier:   94:35:F4:61:58:A5:0F:C8:8A:B2:48:1C:18:B0:91:11:3B:DD:44:E9
Authority key identifier: 6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78
Certificate issuer:       /CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
Certificate serial:       01974A0C7D1DC174A6CE768313BB484F8160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
Manifest number:          0250
Signing time:             Sat 07 Jun 2025 11:00:21 +0000
Manifest this update:     Sat 07 Jun 2025 11:00:21 +0000
Manifest next update:     Sun 08 Jun 2025 11:00:21 +0000
Files and hashes:         1: ZkPBKtmtCeMiCdYBf2wfRvrO9YI.roa (hash: LuN9s57PZoZuxYZxd6mXt4JH7Ba+GwQQeoNwNSpbFME=)
                          2: btSqOMC1kdSms-WFaFxtQ4gNrHg.crl (hash: qo133j/s2qVPHc193KSFy3Xc90eGOcEWCH+q/oWfT9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:0c:7d:1d:c1:74:a6:ce:76:83:13:bb:48:4f:81:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed4aa38c0b591d4a6b3e585685c6d43880dac78
        Validity
            Not Before: Jun  7 11:00:21 2025 GMT
            Not After : Jun  8 11:00:21 2025 GMT
        Subject: CN=9435f46158a50fc88ab2481c18b091113bdd44e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:27:c5:aa:45:a4:f3:af:4b:bc:ce:57:5c:
                    1a:04:0a:47:2c:83:f1:88:fe:6f:d1:c9:7b:c1:90:
                    b6:6d:e5:4b:07:1a:6a:c5:3a:6b:80:c2:1f:47:d8:
                    ff:76:20:f9:0c:71:85:db:75:bc:7d:d0:ef:56:5e:
                    b8:67:92:9d:96:c9:a9:be:6d:5c:41:45:13:ab:74:
                    1f:c4:76:b6:36:95:d4:9e:13:57:08:02:6c:60:46:
                    02:15:6d:eb:40:c5:c5:b2:93:05:5b:36:9f:38:c5:
                    1c:16:5b:dd:c8:cb:fd:17:d1:ed:79:3d:28:2b:3d:
                    ed:37:a7:14:9c:02:11:26:35:fd:17:d3:05:ba:79:
                    b7:ac:73:d2:14:bd:ba:9c:6e:f1:24:7f:d5:e9:8c:
                    6d:b0:04:d3:5a:79:55:ef:a5:c5:99:9a:16:88:ee:
                    f6:79:98:b3:93:f9:76:b5:85:8f:d4:2e:be:74:1b:
                    8c:9b:eb:58:e4:bf:69:f4:72:46:11:ec:28:f0:a2:
                    54:a5:a6:91:44:c3:b4:f9:50:78:5d:ff:8d:15:a1:
                    d6:ad:61:aa:84:81:c6:fa:3a:3b:fe:b2:d4:da:50:
                    24:be:51:f3:3a:d4:93:27:3d:44:9b:3e:a4:06:67:
                    48:44:ea:1c:b8:17:9a:87:c6:8c:dc:a1:f2:59:8f:
                    c9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:35:F4:61:58:A5:0F:C8:8A:B2:48:1C:18:B0:91:11:3B:DD:44:E9
            X509v3 Authority Key Identifier:
                keyid:6E:D4:AA:38:C0:B5:91:D4:A6:B3:E5:85:68:5C:6D:43:88:0D:AC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btSqOMC1kdSms-WFaFxtQ4gNrHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9a8786-09f4-4b60-867a-c8b2df23d519/1/btSqOMC1kdSms-WFaFxtQ4gNrHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c7:98:34:a4:10:9a:b4:ec:0b:d5:ea:7f:fc:8f:03:b3:cf:
         ff:b6:de:d0:6e:be:0a:31:c6:53:92:3a:af:60:78:0e:94:95:
         a3:90:04:21:f0:6d:df:e8:1b:c4:d0:7c:f4:e2:42:0c:ef:5a:
         b0:ed:86:1f:13:b5:26:33:7f:ab:20:30:65:19:90:e8:df:ee:
         ef:b8:22:43:8e:81:eb:16:9b:61:8b:91:98:c2:9f:3a:f9:78:
         ff:3a:d4:b3:48:71:a7:29:8b:d4:c1:cb:77:ca:c0:8f:b0:f5:
         8e:91:cd:9e:39:36:fb:7f:f7:59:b5:e8:1c:d1:3c:db:32:23:
         c6:76:59:3c:a2:ce:86:89:c7:0b:b2:de:05:65:69:d9:b5:a0:
         85:74:7d:04:8a:82:63:65:2f:a4:e2:26:57:8a:25:11:c3:40:
         82:e9:cb:9d:8c:54:26:f8:e5:4d:16:ce:55:e0:68:6a:b8:f0:
         99:4b:2d:97:8c:3b:fe:ac:dc:ce:2c:56:b7:86:12:41:e9:ad:
         9b:3e:94:07:8b:2e:0d:8d:59:75:d4:f4:bb:6f:a9:cc:e6:a3:
         9c:90:06:08:c2:b6:e7:d0:46:93:2a:eb:07:f5:97:6e:26:73:
         19:b1:e5:eb:af:15:48:10:27:8d:1c:66:4d:03:59:41:6e:aa:
         7a:37:b6:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDH0dwXSmznaDE7tIT4FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDRhYTM4YzBiNTkxZDRhNmIzZTU4NTY4NWM2ZDQzODgw
ZGFjNzgwHhcNMjUwNjA3MTEwMDIxWhcNMjUwNjA4MTEwMDIxWjAzMTEwLwYDVQQD
Eyg5NDM1ZjQ2MTU4YTUwZmM4OGFiMjQ4MWMxOGIwOTExMTNiZGQ0NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEInxapFpPOvS7zOV1waBApHLIPx
iP5v0cl7wZC2beVLBxpqxTprgMIfR9j/diD5DHGF23W8fdDvVl64Z5Kdlsmpvm1c
QUUTq3QfxHa2NpXUnhNXCAJsYEYCFW3rQMXFspMFWzafOMUcFlvdyMv9F9HteT0o
Kz3tN6cUnAIRJjX9F9MFunm3rHPSFL26nG7xJH/V6YxtsATTWnlV76XFmZoWiO72
eZizk/l2tYWP1C6+dBuMm+tY5L9p9HJGEewo8KJUpaaRRMO0+VB4Xf+NFaHWrWGq
hIHG+jo7/rLU2lAkvlHzOtSTJz1Emz6kBmdIROocuBeah8aM3KHyWY/J4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQ19GFYpQ/IirJIHBiwkRE73UTpMB8GA1UdIwQY
MBaAFG7UqjjAtZHUprPlhWhcbUOIDax4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2Et
YzhiMmRmMjNkNTE5LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85YTg3ODYtMDlmNC00YjYwLTg2N2EtYzhiMmRmMjNkNTE5
LzEvYnRTcU9NQzFrZFNtcy1XRmFGeHRRNGdOckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJceYNKQQ
mrTsC9Xqf/yPA7PP/7be0G6+CjHGU5I6r2B4DpSVo5AEIfBt3+gbxNB89OJCDO9a
sO2GHxO1JjN/qyAwZRmQ6N/u77giQ46B6xabYYuRmMKfOvl4/zrUs0hxpymL1MHL
d8rAj7D1jpHNnjk2+3/3WbXoHNE82zIjxnZZPKLOhonHC7LeBWVp2bWghXR9BIqC
Y2UvpOImV4olEcNAgunLnYxUJvjlTRbOVeBoarjwmUstl4w7/qzczixWt4YSQemt
mz6UB4suDY1ZddT0u2+pzOajnJAGCMK259BGkyrrB/WXbiZzGbHl668VSBAnjRxm
TQNZQW6qeje2OA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:43:21 2025 by rpki-client