Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          TmiiyK90krJ7ED5lz7/UU+zkVSPU6JSUtxkqONrKmD8=
Subject key identifier:   86:5B:DE:E8:09:51:3B:72:15:2B:21:F7:35:A5:2D:2F:82:94:03:85
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019A31C56418C6CEA3CDED4A30BC20D325EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1705
Signing time:             Wed 29 Oct 2025 21:00:11 +0000
Manifest this update:     Wed 29 Oct 2025 21:00:11 +0000
Manifest next update:     Thu 30 Oct 2025 21:00:11 +0000
Files and hashes:         1: 1-MjuqmBpsWgnIe94Ni9tG7TR67o.roa (hash: gyQfa4gE1hnrW3PZFgjLBZrA6G2ASLJW2A+0qIwPVfs=)
                          2: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          3: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: iRgOscesfdWxNaw5cJIX8DFbsDaRjg87MzCspaVY+HY=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 21:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:31:c5:64:18:c6:ce:a3:cd:ed:4a:30:bc:20:d3:25:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Oct 29 21:00:11 2025 GMT
            Not After : Oct 30 21:00:11 2025 GMT
        Subject: CN=865bdee809513b72152b21f735a52d2f82940385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:d1:4d:b4:da:2c:2e:5a:1f:f9:12:b1:a8:
                    3d:06:8e:e9:d2:50:00:da:40:8a:ca:52:35:65:3e:
                    43:64:58:8a:62:06:8c:c2:17:98:0c:0f:cf:86:43:
                    35:7a:7d:e5:be:b8:25:3c:16:88:c5:fb:f8:45:be:
                    c7:aa:2a:89:57:59:16:22:69:43:a7:6a:7c:a2:7c:
                    1e:5e:ef:53:c8:b8:39:c9:ee:68:eb:02:f0:e5:d1:
                    7c:8e:fb:6f:ac:5b:d8:2d:1d:c7:aa:1e:70:12:49:
                    d0:63:ef:b6:e2:33:7c:23:ed:19:21:22:7b:db:86:
                    c8:1c:67:1c:e6:48:9e:0b:19:d1:71:3c:63:58:67:
                    5c:62:d4:30:1f:7b:6d:db:e2:ac:af:63:90:27:45:
                    13:7b:75:01:45:b3:ba:d9:dc:d9:12:76:fd:49:f5:
                    e5:a6:d5:b6:08:d5:06:86:c8:45:0d:2f:88:bd:7e:
                    4f:2a:ac:32:a6:dc:dc:12:b5:fb:4b:5d:2f:7f:be:
                    5b:37:7e:21:e8:06:f0:f1:18:9b:2e:6a:f6:be:db:
                    62:29:e5:69:d1:c9:32:4c:d1:76:9b:cc:55:85:84:
                    3c:91:62:2f:91:d6:30:96:9b:90:a3:c5:af:94:0c:
                    f0:97:21:a7:65:a3:83:f7:9c:82:45:e5:61:66:7b:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5B:DE:E8:09:51:3B:72:15:2B:21:F7:35:A5:2D:2F:82:94:03:85
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:69:c1:13:ed:d4:e1:e0:f1:1a:49:d5:0f:df:c9:48:f6:cf:
         c7:00:81:e9:1e:6e:03:6d:de:47:3f:dc:7e:ef:f2:32:39:eb:
         27:89:99:17:55:4b:c3:c1:24:ba:2e:ae:fd:8c:5f:db:16:f5:
         cc:8b:54:a6:26:e2:95:42:bd:fb:86:74:95:dd:d0:36:e4:b8:
         43:a7:4a:ee:9f:a4:ea:36:16:1d:a2:de:55:b0:2d:dd:83:07:
         b3:7d:fc:e8:51:ff:8d:f7:9c:7b:13:53:03:ab:4b:b8:11:ee:
         f8:0c:13:34:f5:1f:b3:db:64:39:7c:66:0a:9f:58:d9:cc:4c:
         3e:0a:15:f9:01:70:82:19:04:69:d6:17:37:d3:9f:10:06:d2:
         e9:ec:f0:a0:1d:44:6d:13:99:73:d2:99:cb:c8:17:64:14:82:
         e5:d2:08:a7:2c:56:77:1a:9e:da:c7:46:a6:25:cd:3d:e5:0d:
         ae:f6:e0:f5:e2:b0:d0:ea:5c:1e:f6:04:af:4d:8f:d2:14:94:
         18:a0:d2:db:3e:03:81:87:4b:c5:18:77:5e:85:70:74:85:64:
         1e:f6:dd:a6:50:e6:bc:13:ef:2e:7b:c7:39:8b:5f:5c:dd:ca:
         7b:99:b2:c2:98:88:66:ba:c2:b0:6f:79:ab:33:f5:b8:a0:39:
         2e:44:c1:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoxxWQYxs6jze1KMLwg0yXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjUxMDI5MjEwMDExWhcNMjUxMDMwMjEwMDExWjAzMTEwLwYDVQQD
Eyg4NjViZGVlODA5NTEzYjcyMTUyYjIxZjczNWE1MmQyZjgyOTQwMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTDRTbTaLC5aH/kSsag9Bo7p0lAA
2kCKylI1ZT5DZFiKYgaMwheYDA/PhkM1en3lvrglPBaIxfv4Rb7HqiqJV1kWImlD
p2p8onweXu9TyLg5ye5o6wLw5dF8jvtvrFvYLR3Hqh5wEknQY++24jN8I+0ZISJ7
24bIHGcc5kieCxnRcTxjWGdcYtQwH3tt2+Ksr2OQJ0UTe3UBRbO62dzZEnb9SfXl
ptW2CNUGhshFDS+IvX5PKqwyptzcErX7S10vf75bN34h6Abw8RibLmr2vttiKeVp
0ckyTNF2m8xVhYQ8kWIvkdYwlpuQo8WvlAzwlyGnZaOD95yCReVhZntIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZb3ugJUTtyFSsh9zWlLS+ClAOFMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImnBE+3U
4eDxGknVD9/JSPbPxwCB6R5uA23eRz/cfu/yMjnrJ4mZF1VLw8Ekui6u/Yxf2xb1
zItUpibilUK9+4Z0ld3QNuS4Q6dK7p+k6jYWHaLeVbAt3YMHs3386FH/jfecexNT
A6tLuBHu+AwTNPUfs9tkOXxmCp9Y2cxMPgoV+QFwghkEadYXN9OfEAbS6ezwoB1E
bROZc9KZy8gXZBSC5dIIpyxWdxqe2sdGpiXNPeUNrvbg9eKw0OpcHvYEr02P0hSU
GKDS2z4DgYdLxRh3XoVwdIVkHvbdplDmvBPvLnvHOYtfXN3Ke5mywpiIZrrCsG95
qzP1uKA5LkTBiQ==
-----END CERTIFICATE-----
Generated at Thu Oct 30 05:21:01 2025 by rpki-client