Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File:                     bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier:          UFO6+YLd35zCLO6K/dQP9bXuBKCFoiiAO/dh0vJsEBc=
Subject key identifier:   54:40:65:49:F4:01:3B:B0:E0:BB:3A:D8:74:4E:2C:54:3F:4F:42:60
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer:       /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial:       0197722CBE2E828063FC9EC7E4C1D749E160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number:          1592
Signing time:             Sun 15 Jun 2025 06:00:24 +0000
Manifest this update:     Sun 15 Jun 2025 06:00:24 +0000
Manifest next update:     Mon 16 Jun 2025 06:00:24 +0000
Files and hashes:         1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
                          2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: ATyugchupA8F5VQQoTuSRnwysvwFL4pZSmYuDExJyns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Jun 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:72:2c:be:2e:82:80:63:fc:9e:c7:e4:c1:d7:49:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
        Validity
            Not Before: Jun 15 06:00:24 2025 GMT
            Not After : Jun 16 06:00:24 2025 GMT
        Subject: CN=54406549f4013bb0e0bb3ad8744e2c543f4f4260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f8:6d:0e:b5:27:5a:5d:fe:55:0c:9c:8d:96:
                    21:c1:94:77:fa:1a:43:f6:48:0b:bc:03:27:ac:01:
                    20:6b:8b:c1:28:c6:e5:49:f4:9f:5f:fd:06:d6:ff:
                    2c:72:f9:91:d4:63:41:67:eb:8c:7c:4b:bd:68:e8:
                    f2:45:1f:c4:1a:3c:c3:6c:90:94:d8:9d:d7:66:f8:
                    d2:bb:86:b4:14:f8:3b:79:56:92:06:40:12:9d:4c:
                    18:9b:64:59:7e:36:46:2e:67:87:e2:ca:f9:c6:e4:
                    a5:a2:04:8d:c5:c6:7e:3e:e6:ad:3e:27:3c:d0:1d:
                    b3:d7:81:16:b9:6e:fe:28:8d:46:3c:7f:bc:b0:5b:
                    cc:af:c3:2a:4a:c8:d7:75:68:6e:d4:ef:1f:6d:5c:
                    dd:4b:06:8e:13:c5:55:0a:5f:7c:e4:5c:ba:1a:f1:
                    3b:f2:36:27:af:61:b0:21:62:03:91:ad:57:83:6a:
                    42:c0:ee:96:0b:5f:13:4e:b9:e2:4b:4b:d4:b5:cf:
                    58:45:03:e3:47:ec:fe:57:c7:c8:58:d4:9e:ff:f3:
                    76:ad:0c:15:29:ba:61:18:c7:3c:ca:83:b4:6c:9e:
                    c0:6e:12:a5:b6:56:e2:e3:2c:89:39:a3:6c:3f:68:
                    33:eb:50:f3:94:6b:dc:56:84:e0:d8:56:c5:16:d5:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:40:65:49:F4:01:3B:B0:E0:BB:3A:D8:74:4E:2C:54:3F:4F:42:60
            X509v3 Authority Key Identifier:
                keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:63:f3:be:d3:a3:6a:9a:53:67:1d:0a:12:a5:ac:cc:f9:d0:
         55:1a:ec:d6:15:3d:07:b8:ff:e6:cf:4a:17:1a:30:15:9e:13:
         e4:53:63:d4:e9:75:fc:d3:1e:57:18:eb:5d:18:37:04:72:5e:
         33:14:10:d5:6a:b9:58:9b:26:e8:74:d1:e2:66:a6:22:f6:06:
         71:c6:ba:64:12:30:1e:32:5f:d9:df:4d:8d:b5:7e:85:8c:59:
         92:90:af:d8:45:0c:a6:90:9d:f9:4f:04:cd:28:a7:8e:3a:de:
         23:66:ea:e6:54:dc:bc:8f:ac:43:56:70:dd:da:3d:ef:c1:4d:
         cb:4c:f3:4f:d1:89:a8:11:cd:fe:0d:65:38:64:3d:34:8a:a2:
         86:8c:a0:96:07:da:a4:c3:42:80:ed:7a:bd:a4:dd:27:0c:05:
         f6:a5:1c:4a:75:f6:3c:30:fb:e5:a2:8e:9a:b4:64:fe:ff:a8:
         79:72:bf:4e:bf:bf:32:ad:eb:00:eb:68:88:45:f0:ac:08:a8:
         e5:9b:b5:1e:5e:65:c6:be:d0:f3:e6:de:28:eb:32:ae:90:ba:
         9a:b5:8f:dd:cb:8c:d5:f9:4d:af:10:ba:02:61:59:c8:ae:76:
         46:11:ac:54:88:8e:0d:57:8c:c6:f6:20:41:6b:2d:cd:db:66:
         ab:7d:62:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLL4ugoBj/J7H5MHXSeFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1
NGY0ODEwHhcNMjUwNjE1MDYwMDI0WhcNMjUwNjE2MDYwMDI0WjAzMTEwLwYDVQQD
Eyg1NDQwNjU0OWY0MDEzYmIwZTBiYjNhZDg3NDRlMmM1NDNmNGY0MjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPhtDrUnWl3+VQycjZYhwZR3+hpD
9kgLvAMnrAEga4vBKMblSfSfX/0G1v8scvmR1GNBZ+uMfEu9aOjyRR/EGjzDbJCU
2J3XZvjSu4a0FPg7eVaSBkASnUwYm2RZfjZGLmeH4sr5xuSlogSNxcZ+PuatPic8
0B2z14EWuW7+KI1GPH+8sFvMr8MqSsjXdWhu1O8fbVzdSwaOE8VVCl985Fy6GvE7
8jYnr2GwIWIDka1Xg2pCwO6WC18TTrniS0vUtc9YRQPjR+z+V8fIWNSe//N2rQwV
KbphGMc8yoO0bJ7AbhKltlbi4yyJOaNsP2gz61DzlGvcVoTg2FbFFtU5+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRAZUn0ATuw4Ls62HROLFQ/T0JgMB8GA1UdIwQY
MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt
YzJjNjE1MTg1ODlmLzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm
LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWPzvtOj
appTZx0KEqWszPnQVRrs1hU9B7j/5s9KFxowFZ4T5FNj1Ol1/NMeVxjrXRg3BHJe
MxQQ1Wq5WJsm6HTR4mamIvYGcca6ZBIwHjJf2d9NjbV+hYxZkpCv2EUMppCd+U8E
zSinjjreI2bq5lTcvI+sQ1Zw3do978FNy0zzT9GJqBHN/g1lOGQ9NIqihoyglgfa
pMNCgO16vaTdJwwF9qUcSnX2PDD75aKOmrRk/v+oeXK/Tr+/Mq3rAOtoiEXwrAio
5Zu1Hl5lxr7Q8+beKOsyrpC6mrWP3cuM1flNrxC6AmFZyK52RhGsVIiODVeMxvYg
QWstzdtmq31iYg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:39:02 2025 by rpki-client