Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File:                     BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier:          bD0gOZLbGSxNjYC9fX9X/jOsPkukJDqfemu/18y5MuI=
Subject key identifier:   6F:20:5E:D8:F1:EC:0E:3B:46:EC:22:15:ED:EA:69:2E:61:12:DA:71
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer:       /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial:       019A72265D4D21CAF4A42E908B83F5914F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number:          0407
Signing time:             Tue 11 Nov 2025 09:01:48 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:48 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:48 +0000
Files and hashes:         1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: 5sViL6KTJC9I2lDRqxMcFsrLfE0meSENVOA7/2vxKZ4=)
                          2: XlhaEzLsA7jWqPOILfz8Yhd9kdk.roa (hash: fE0R2m8vpEkHRD5syUluKcIvECTiC6hfTnpdsOL+n0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:5d:4d:21:ca:f4:a4:2e:90:8b:83:f5:91:4f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
        Validity
            Not Before: Nov 11 09:01:48 2025 GMT
            Not After : Nov 12 09:01:48 2025 GMT
        Subject: CN=6f205ed8f1ec0e3b46ec2215edea692e6112da71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:62:3c:29:bf:e5:2e:6d:ef:96:46:f5:d1:
                    27:44:e5:38:01:4b:7a:30:f1:b8:88:a6:64:74:54:
                    72:41:9e:12:e7:ba:3b:4b:60:2e:55:c0:c3:03:56:
                    e5:ad:90:7d:31:3c:ab:fc:b7:cd:93:89:6a:11:c9:
                    06:f2:77:d1:d9:48:e4:0a:0f:af:12:35:3b:f6:93:
                    79:5d:ed:ab:44:2e:9e:68:df:6d:24:fd:af:a6:c8:
                    68:a8:13:51:41:56:09:49:2a:8d:7f:bc:d5:46:06:
                    84:c7:c7:42:57:32:b6:56:64:17:01:f6:9b:31:d3:
                    81:88:35:bd:d5:00:f4:54:3a:49:25:d2:ce:6c:47:
                    c7:7b:04:eb:32:f0:a8:98:85:3a:ec:3d:14:af:c4:
                    07:ad:30:cf:20:94:17:75:99:35:77:be:1c:e8:e8:
                    90:a8:32:c4:8b:fe:5a:af:01:2c:62:79:44:32:34:
                    65:04:cb:dc:d7:ce:f9:99:2a:33:29:25:05:93:eb:
                    96:d2:89:57:5e:24:d6:58:1c:53:95:e3:8e:16:e8:
                    cd:37:ac:36:88:39:ad:07:99:53:47:f9:ae:2b:00:
                    4d:2e:35:d7:12:ee:06:88:69:17:45:54:ed:d5:cc:
                    d1:e2:4f:10:dd:07:17:a0:66:fc:13:51:6f:1f:cc:
                    22:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:5E:D8:F1:EC:0E:3B:46:EC:22:15:ED:EA:69:2E:61:12:DA:71
            X509v3 Authority Key Identifier:
                keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:3c:d7:57:69:d9:80:f9:e3:0c:4e:64:2b:1a:0c:d1:9b:58:
         67:49:83:ef:52:03:c6:1d:27:ba:1b:2f:71:cb:55:67:ca:67:
         aa:5f:85:71:75:81:f3:a7:a1:3d:35:92:5e:56:4f:05:df:3a:
         10:78:b7:62:95:00:a6:3f:17:1e:d1:6c:31:0c:45:c8:48:7f:
         62:0e:b0:b0:68:d5:4e:55:21:cc:b7:da:82:2f:ad:20:cd:a0:
         00:85:20:1d:24:ac:37:f5:79:51:ec:22:ae:01:52:bb:5c:92:
         cd:48:e8:54:41:73:73:26:9e:76:4f:1d:e0:eb:3b:67:bb:94:
         9b:af:8c:c3:8a:57:d4:4f:6c:d3:09:94:cc:18:bd:b4:a6:dd:
         4b:7d:ff:79:b7:df:9a:fe:2a:b0:81:fe:0e:7f:b2:b7:23:ab:
         91:e7:80:5d:00:ec:8a:32:06:8f:7f:b1:37:15:5b:da:9d:04:
         12:20:3e:4e:76:33:cc:08:1b:65:01:36:d1:22:cd:18:02:52:
         2b:d3:ed:35:8a:ac:77:03:df:6b:da:93:f9:35:6d:7a:62:6a:
         43:b1:e0:03:a3:a3:82:37:22:e8:2e:a5:67:b2:19:45:47:7c:
         ab:6d:b1:2d:18:ad:e3:9b:de:70:5f:3d:d8:cb:67:ab:9f:b4:
         2d:2d:87:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJl1NIcr0pC6Qi4P1kU8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjQ4YjUyZDIzZWJkMjM3YjhhOGI2ZTYzZWRkMDJkZmVl
Zjk4NGMwHhcNMjUxMTExMDkwMTQ4WhcNMjUxMTEyMDkwMTQ4WjAzMTEwLwYDVQQD
Eyg2ZjIwNWVkOGYxZWMwZTNiNDZlYzIyMTVlZGVhNjkyZTYxMTJkYTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJliPCm/5S5t75ZG9dEnROU4AUt6
MPG4iKZkdFRyQZ4S57o7S2AuVcDDA1blrZB9MTyr/LfNk4lqEckG8nfR2UjkCg+v
EjU79pN5Xe2rRC6eaN9tJP2vpshoqBNRQVYJSSqNf7zVRgaEx8dCVzK2VmQXAfab
MdOBiDW91QD0VDpJJdLObEfHewTrMvComIU67D0Ur8QHrTDPIJQXdZk1d74c6OiQ
qDLEi/5arwEsYnlEMjRlBMvc1875mSozKSUFk+uW0olXXiTWWBxTleOOFujNN6w2
iDmtB5lTR/muKwBNLjXXEu4GiGkXRVTt1czR4k8Q3QcXoGb8E1FvH8witQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8gXtjx7A47RuwiFe3qaS5hEtpxMB8GA1UdIwQY
MBaAFAcki1LSPr0je4qLbmPt0C3+75hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYt
MWIyZTQxMDVlYjdlLzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jZWQ5YjUtOTQ0MC00ZDBiLWJlMWYtMWIyZTQxMDVlYjdl
LzEvQnlTTFV0SS12U043aW90dVktM1FMZjd2bUV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnzzXV2nZ
gPnjDE5kKxoM0ZtYZ0mD71IDxh0nuhsvcctVZ8pnql+FcXWB86ehPTWSXlZPBd86
EHi3YpUApj8XHtFsMQxFyEh/Yg6wsGjVTlUhzLfagi+tIM2gAIUgHSSsN/V5Uewi
rgFSu1ySzUjoVEFzcyaedk8d4Os7Z7uUm6+Mw4pX1E9s0wmUzBi9tKbdS33/ebff
mv4qsIH+Dn+ytyOrkeeAXQDsijIGj3+xNxVb2p0EEiA+TnYzzAgbZQE20SLNGAJS
K9PtNYqsdwPfa9qT+TVtemJqQ7HgA6Ojgjci6C6lZ7IZRUd8q22xLRit45vecF89
2Mtnq5+0LS2H6Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:53 2025 by rpki-client