Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File:                     bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier:          4hmxCi3h74HLdPY5ftete4VmdJI8EpXhy1k2KDCHyZI=
Subject key identifier:   4A:A5:8F:73:1A:26:3F:AC:2E:22:9E:C0:2C:6E:A3:2F:81:BE:05:B2
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer:       /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial:       0198C97F4BBCB1131A9604157C28A84F0114
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number:          1648
Signing time:             Wed 20 Aug 2025 22:00:19 +0000
Manifest this update:     Wed 20 Aug 2025 22:00:19 +0000
Manifest next update:     Thu 21 Aug 2025 22:00:19 +0000
Files and hashes:         1: McJBsphQoDhzeVnNZjQXJIWaZ6Y.roa (hash: yKUH9/jSgEvNGo/3nepkm1/S5OFTD0l9/lzqCHYZgCY=)
                          2: QbMtJCyeS1UwQoNdxpT73PMGteE.roa (hash: KMhN38u0GEau5JeuxrI2EEIJMxGmIw0+9n/GLuFP0so=)
                          3: _67lsUignKt8Nnk8BSoRjTdfgFs.roa (hash: EwUQ5YdDP6IxVHJrGKIoeKh0+wuab5Kte+I8jHzRujs=)
                          4: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: YJNVd2ayqSg/BLL7tj7k6HfL0w+sALYdC+imw4VJR8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Aug 2025 22:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:c9:7f:4b:bc:b1:13:1a:96:04:15:7c:28:a8:4f:01:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
        Validity
            Not Before: Aug 20 22:00:19 2025 GMT
            Not After : Aug 21 22:00:19 2025 GMT
        Subject: CN=4aa58f731a263fac2e229ec02c6ea32f81be05b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c3:a0:c2:24:a6:27:35:5c:b9:74:ee:aa:02:
                    32:fc:70:ac:93:93:6d:a8:8a:81:ae:e9:d8:3d:5b:
                    92:3b:ee:e6:dc:bf:b9:e0:6a:76:57:4b:c7:fe:72:
                    ad:02:26:9d:97:2a:12:75:02:60:6c:45:22:fb:fb:
                    ef:c5:ae:86:7a:7f:62:85:b2:54:39:40:c6:a2:aa:
                    76:71:95:75:ed:cf:9f:cc:4b:a5:42:b7:9a:0f:b6:
                    66:72:a4:3c:e1:ae:bb:21:ce:93:cb:ef:47:17:67:
                    27:57:32:86:e8:45:fb:68:55:5e:ae:23:e9:20:df:
                    72:bd:73:0f:76:25:bf:73:98:6c:54:41:0f:1f:f3:
                    99:0e:98:96:9f:6b:2f:33:d0:08:80:89:24:57:99:
                    2e:e5:4c:b5:89:f0:c5:a1:f9:87:c7:66:f5:df:66:
                    19:9e:3e:8a:f9:f4:bd:a7:be:09:86:7a:33:10:1a:
                    68:a0:17:43:72:d4:d5:06:8a:73:57:36:36:7d:2e:
                    c2:14:d0:63:9d:b7:0e:af:1a:e8:dc:86:9c:e6:ef:
                    d6:5c:3b:0d:15:e3:10:a2:8b:48:b6:82:f1:47:7e:
                    29:13:09:84:61:97:0a:6f:21:9c:94:2e:8a:a0:21:
                    1e:be:60:f5:89:cf:62:c6:48:ff:d7:57:0f:9f:d9:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A5:8F:73:1A:26:3F:AC:2E:22:9E:C0:2C:6E:A3:2F:81:BE:05:B2
            X509v3 Authority Key Identifier:
                keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4c:e6:3c:1a:1a:e7:fa:50:36:3d:29:0b:3e:bf:f7:2c:fa:
         28:52:be:b6:31:08:0b:74:a1:f7:59:e8:d5:fd:31:8d:6a:98:
         fa:64:5f:37:b1:03:66:d9:61:9f:db:72:00:6d:67:dc:ca:b6:
         f5:c8:95:d2:c4:2a:1a:93:77:16:55:06:a2:7c:52:ac:d8:c2:
         1f:f8:e6:e6:00:d1:4e:65:68:8c:34:c1:b7:97:e0:c7:83:3e:
         6e:a8:c5:b8:a7:6f:61:6d:76:1f:86:c7:6b:c2:23:4f:9d:54:
         48:38:a6:40:00:72:3a:49:55:c8:6d:c1:dd:2d:2d:c1:ec:cc:
         99:db:05:16:c3:c1:39:bc:54:8f:3c:04:ba:43:ed:ce:58:b4:
         61:74:31:93:d2:8b:d9:a9:25:38:48:3d:43:f8:3f:ad:a7:ad:
         9b:0d:89:69:e4:81:08:31:67:bf:e3:41:cd:b4:d3:03:f8:c4:
         b6:d2:0e:db:41:6d:ca:9f:74:38:26:ed:f3:b8:5e:de:67:d6:
         7c:ec:33:e5:84:98:5a:25:80:4c:ad:47:67:72:fc:69:54:12:
         61:42:6b:bc:19:c9:b3:f9:ae:73:86:b2:9f:0a:a5:4d:b6:56:
         fa:9e:1b:39:29:0d:b6:2d:b3:95:00:bf:84:7d:fe:fd:e8:0a:
         e1:7f:18:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjJf0u8sRMalgQVfCioTwEUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWYzOTczZDZlMDc2ODE0MTliYWU4NjdiZDUxNDU0NWU3
ZGY1ZGEwHhcNMjUwODIwMjIwMDE5WhcNMjUwODIxMjIwMDE5WjAzMTEwLwYDVQQD
Eyg0YWE1OGY3MzFhMjYzZmFjMmUyMjllYzAyYzZlYTMyZjgxYmUwNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssOgwiSmJzVcuXTuqgIy/HCsk5Nt
qIqBrunYPVuSO+7m3L+54Gp2V0vH/nKtAiadlyoSdQJgbEUi+/vvxa6Gen9ihbJU
OUDGoqp2cZV17c+fzEulQreaD7ZmcqQ84a67Ic6Ty+9HF2cnVzKG6EX7aFVeriPp
IN9yvXMPdiW/c5hsVEEPH/OZDpiWn2svM9AIgIkkV5ku5Uy1ifDFofmHx2b132YZ
nj6K+fS9p74JhnozEBpooBdDctTVBopzVzY2fS7CFNBjnbcOrxro3Iac5u/WXDsN
FeMQootItoLxR34pEwmEYZcKbyGclC6KoCEevmD1ic9ixkj/11cPn9nvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqlj3MaJj+sLiKewCxuoy+BvgWyMB8GA1UdIwQY
MBaAFG7vOXPW4HaBQZuuhnvVFFReffXaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzkt
MjJmMGFhYTgxMzI3LzEvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8wODc1MTMtZDJkNi00M2M2LTliNzktMjJmMGFhYTgxMzI3
LzEvYnU4NWM5Ymdkb0ZCbTY2R2U5VVVWRjU5OWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0zmPBoa
5/pQNj0pCz6/9yz6KFK+tjEIC3Sh91no1f0xjWqY+mRfN7EDZtlhn9tyAG1n3Mq2
9ciV0sQqGpN3FlUGonxSrNjCH/jm5gDRTmVojDTBt5fgx4M+bqjFuKdvYW12H4bH
a8IjT51USDimQAByOklVyG3B3S0twezMmdsFFsPBObxUjzwEukPtzli0YXQxk9KL
2aklOEg9Q/g/raetmw2JaeSBCDFnv+NBzbTTA/jEttIO20Ftyp90OCbt87he3mfW
fOwz5YSYWiWATK1HZ3L8aVQSYUJrvBnJs/muc4aynwqlTbZW+p4bOSkNti2zlQC/
hH3+/egK4X8Yyw==
-----END CERTIFICATE-----
Generated at Thu Aug 21 06:53:23 2025 by rpki-client