Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
File:                     XiYr5dEt_b4keeOiBxP0V-k_Bps.mft (raw, json)
Hash identifier:          jxuOc2n4a+xUO74vgdB9q9oBm8nJ7OeS16V1wIy5I6Y=
Subject key identifier:   A2:DB:DB:FB:D5:34:A8:F8:FF:6C:96:E6:A8:A4:06:52:33:62:A7:8A
Authority key identifier: 5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B
Certificate issuer:       /CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
Certificate serial:       01988BEA8BF1ACB71300137585645C3EA762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
Manifest number:          2E
Signing time:             Fri 08 Aug 2025 23:01:00 +0000
Manifest this update:     Fri 08 Aug 2025 23:01:00 +0000
Manifest next update:     Sat 09 Aug 2025 23:01:00 +0000
Files and hashes:         1: XiYr5dEt_b4keeOiBxP0V-k_Bps.crl (hash: pA4LwksJdUyrUqvXVyy8whOFE90NsZD3MQ8V/sHqhbU=)
                          2: w-bn-aCE5W30xtl3JcELkxoTsW8.roa (hash: BpJzwRV75hoQ0T1DnwfQt7T4AohZsZH+92QsoGclyp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:8b:f1:ac:b7:13:00:13:75:85:64:5c:3e:a7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e262be5d12dfdbe2479e3a20713f457e93f069b
        Validity
            Not Before: Aug  8 23:01:00 2025 GMT
            Not After : Aug  9 23:01:00 2025 GMT
        Subject: CN=a2dbdbfbd534a8f8ff6c96e6a8a406523362a78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:da:db:3b:ea:1e:45:27:d5:c5:b0:8b:bf:
                    d6:c4:d7:f7:f1:56:ee:c7:ed:bc:f8:62:b9:ff:1e:
                    8b:63:e6:61:37:1b:aa:04:8e:da:c8:3a:a6:a5:5e:
                    a9:21:d8:a5:04:a1:a7:b8:e9:07:c6:41:69:24:56:
                    19:55:5b:b4:04:d2:b5:ba:46:29:e8:f3:e4:17:85:
                    a1:61:4a:0e:7f:c6:f6:fc:a2:74:a9:4b:ec:07:46:
                    47:25:d6:df:2b:ff:c7:d3:5b:cc:83:f0:d0:3e:ca:
                    b9:e9:49:52:08:7a:7c:bc:2c:ef:0d:c6:69:db:49:
                    ef:c9:30:6c:d7:59:a4:31:db:f7:bb:a6:da:22:d2:
                    02:bb:90:62:8f:08:ea:4c:d4:ac:18:80:ec:eb:1b:
                    f1:90:71:c1:48:cf:46:3f:54:a6:7a:16:63:35:ba:
                    20:ff:3b:ea:cd:2c:ae:71:56:8f:78:9e:43:eb:22:
                    3f:5d:75:b6:5b:28:b4:73:a9:9c:f5:8f:8e:37:9c:
                    b6:52:70:59:52:47:cd:cf:09:01:76:4b:94:e6:23:
                    e9:c8:df:b7:92:1f:8c:0e:8e:0d:7a:eb:57:ee:b4:
                    79:7f:2d:f8:0c:c1:ad:38:b0:01:8d:33:e3:bc:1d:
                    c2:cc:f4:4a:24:d3:c0:99:5c:0a:a4:90:89:70:76:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DB:DB:FB:D5:34:A8:F8:FF:6C:96:E6:A8:A4:06:52:33:62:A7:8A
            X509v3 Authority Key Identifier:
                keyid:5E:26:2B:E5:D1:2D:FD:BE:24:79:E3:A2:07:13:F4:57:E9:3F:06:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiYr5dEt_b4keeOiBxP0V-k_Bps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/650c64-275d-44e1-84dc-f5b81ccf09cd/1/XiYr5dEt_b4keeOiBxP0V-k_Bps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:70:4a:c5:43:11:a8:2c:d6:d9:e4:7c:38:b6:c8:98:41:a6:
         7c:cc:7f:bf:74:58:64:75:23:56:6e:2d:51:70:ab:15:81:9e:
         c5:80:a3:3e:bc:e5:13:d8:7c:db:7a:86:c8:1d:5c:06:a0:c7:
         93:ea:8a:39:7e:ff:9e:d1:13:ae:9b:ae:0d:21:15:99:89:ba:
         ac:0b:97:cc:88:2c:c6:9c:72:84:fb:3d:cc:86:c5:17:dd:a3:
         70:b2:91:66:b4:14:ff:b8:15:15:b1:1c:f3:e0:da:ea:11:5a:
         da:d2:5b:a4:68:fa:73:0b:95:e2:61:3f:ac:ef:59:b2:b6:1f:
         88:57:41:4a:de:f6:ee:6e:c3:a4:50:aa:b0:8a:f3:a2:b4:09:
         a2:71:01:57:fa:08:f3:09:97:27:52:2d:03:cf:56:2a:10:12:
         e3:d6:e7:c1:f9:24:ad:40:d4:13:c6:25:50:65:98:46:f3:69:
         53:ab:ca:af:01:09:3e:74:d4:5b:c0:34:03:c6:0b:ee:9a:ce:
         6e:01:fa:ac:b9:9d:28:bf:3d:d7:6e:7a:f1:98:da:32:06:ee:
         3f:56:df:73:dc:f3:ea:b0:bd:68:27:ea:68:02:69:4b:3b:ba:
         7c:3a:a1:fc:ae:63:4c:b0:a8:a1:b3:1a:72:85:ae:d0:6f:04:
         9e:6e:c9:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiL6ovxrLcTABN1hWRcPqdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjYyYmU1ZDEyZGZkYmUyNDc5ZTNhMjA3MTNmNDU3ZTkz
ZjA2OWIwHhcNMjUwODA4MjMwMTAwWhcNMjUwODA5MjMwMTAwWjAzMTEwLwYDVQQD
EyhhMmRiZGJmYmQ1MzRhOGY4ZmY2Yzk2ZTZhOGE0MDY1MjMzNjJhNzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB/a2zvqHkUn1cWwi7/WxNf38Vbu
x+28+GK5/x6LY+ZhNxuqBI7ayDqmpV6pIdilBKGnuOkHxkFpJFYZVVu0BNK1ukYp
6PPkF4WhYUoOf8b2/KJ0qUvsB0ZHJdbfK//H01vMg/DQPsq56UlSCHp8vCzvDcZp
20nvyTBs11mkMdv3u6baItICu5BijwjqTNSsGIDs6xvxkHHBSM9GP1SmehZjNbog
/zvqzSyucVaPeJ5D6yI/XXW2Wyi0c6mc9Y+ON5y2UnBZUkfNzwkBdkuU5iPpyN+3
kh+MDo4NeutX7rR5fy34DMGtOLABjTPjvB3CzPRKJNPAmVwKpJCJcHZzEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLb2/vVNKj4/2yW5qikBlIzYqeKMB8GA1UdIwQY
MBaAFF4mK+XRLf2+JHnjogcT9FfpPwabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMt
ZjViODFjY2YwOWNkLzEvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82NTBjNjQtMjc1ZC00NGUxLTg0ZGMtZjViODFjY2YwOWNk
LzEvWGlZcjVkRXRfYjRrZWVPaUJ4UDBWLWtfQnBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3BKxUMR
qCzW2eR8OLbImEGmfMx/v3RYZHUjVm4tUXCrFYGexYCjPrzlE9h823qGyB1cBqDH
k+qKOX7/ntETrpuuDSEVmYm6rAuXzIgsxpxyhPs9zIbFF92jcLKRZrQU/7gVFbEc
8+Da6hFa2tJbpGj6cwuV4mE/rO9ZsrYfiFdBSt727m7DpFCqsIrzorQJonEBV/oI
8wmXJ1ItA89WKhAS49bnwfkkrUDUE8YlUGWYRvNpU6vKrwEJPnTUW8A0A8YL7prO
bgH6rLmdKL8912568ZjaMgbuP1bfc9zz6rC9aCfqaAJpSzu6fDqh/K5jTLCoobMa
coWu0G8Enm7JQg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:22 2025 by rpki-client