Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File:                     BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier:          ZRpYKku9xtlGOtaiJrjq7NbYqAMmHhQDN9jFrTqeXVg=
Subject key identifier:   6D:F5:93:D0:9A:B2:7C:A0:C3:FA:EC:E3:A3:BB:E2:97:5D:DB:19:D6
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer:       /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial:       019768F2C5B8D543F085E3BA60505B3EEB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number:          04C8
Signing time:             Fri 13 Jun 2025 11:00:30 +0000
Manifest this update:     Fri 13 Jun 2025 11:00:30 +0000
Manifest next update:     Sat 14 Jun 2025 11:00:30 +0000
Files and hashes:         1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
                          2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: uu8KT7BOKvGYHcvkpFG4XfxtVQkcVpBvps0kOekh8nE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 11:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:f2:c5:b8:d5:43:f0:85:e3:ba:60:50:5b:3e:eb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
        Validity
            Not Before: Jun 13 11:00:30 2025 GMT
            Not After : Jun 14 11:00:30 2025 GMT
        Subject: CN=6df593d09ab27ca0c3faece3a3bbe2975ddb19d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0a:07:69:e0:5f:95:cf:55:9b:d2:fc:f0:72:
                    78:ba:84:d9:fe:6d:c1:2a:29:09:4a:b6:10:1d:31:
                    e3:8d:a8:98:06:0e:28:61:0b:c9:1f:53:dc:07:8c:
                    7a:bf:de:eb:46:a6:e3:bd:d2:b7:9a:cb:5b:51:ff:
                    c9:2a:ce:3e:7c:2c:1b:fe:73:42:98:48:98:e0:7d:
                    9e:17:24:37:62:28:50:7c:5c:03:d1:ed:6d:e6:5e:
                    2c:4e:d1:72:a1:dc:27:24:6b:88:82:2d:24:67:46:
                    2f:4e:59:48:a5:b1:e3:90:df:9c:f2:d6:6c:c7:7d:
                    7b:eb:9a:40:19:70:9f:96:7a:85:a8:58:74:e2:b1:
                    4b:49:a6:47:3e:31:5f:3c:e5:54:aa:e9:1c:ca:7e:
                    22:42:c9:fc:85:17:1f:bc:20:d2:c1:df:f8:3f:35:
                    84:46:4f:15:63:3e:0b:7a:e6:b0:aa:b9:45:4e:bc:
                    52:2a:04:b9:12:68:3b:28:bf:22:0e:40:3d:fb:92:
                    8f:3f:80:7d:01:85:36:53:0e:00:42:ca:7e:6c:67:
                    72:e3:5a:ca:0a:77:38:22:95:02:59:2a:46:e7:06:
                    4e:5c:3d:de:11:a9:61:1c:cd:e2:06:c2:0f:7f:63:
                    11:db:33:f4:e5:93:e2:a1:a7:bc:a8:6c:bb:01:fa:
                    de:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F5:93:D0:9A:B2:7C:A0:C3:FA:EC:E3:A3:BB:E2:97:5D:DB:19:D6
            X509v3 Authority Key Identifier:
                keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:63:73:7a:4e:63:f1:fa:c7:2b:1a:3e:2e:42:2c:f4:9c:
         6d:0b:8e:38:ca:88:9e:ac:6a:24:f9:bb:7b:c8:75:30:99:dc:
         00:3b:51:59:47:d1:23:9c:aa:ee:10:08:f6:58:61:21:c7:76:
         31:bc:b2:49:60:61:e6:b9:fa:e2:5d:85:6a:ff:23:ee:31:59:
         df:f2:01:0d:e9:7b:cf:8b:9e:d7:5f:ee:5f:7c:79:1b:94:2c:
         3e:06:75:28:af:02:94:ae:fb:9f:f9:5a:2e:4c:34:a3:5e:04:
         1b:3d:6c:f5:32:ec:ca:1f:42:9e:9c:e6:64:e8:35:a5:4b:d6:
         fa:20:f0:0c:19:eb:fa:1c:70:1d:ea:22:2d:2c:ec:47:57:64:
         b6:42:4a:5e:86:eb:2b:87:50:bc:86:46:75:13:90:f4:d2:c9:
         15:90:3f:d6:7a:af:e8:78:9a:ac:63:de:9b:1b:c5:a0:3d:5b:
         1d:65:1d:9c:07:ca:05:4d:18:51:ba:b8:cb:cf:aa:99:e1:7a:
         b5:ca:c1:f0:d9:37:4f:99:32:7c:c7:37:57:5b:20:56:c1:1f:
         25:1f:d4:93:f3:67:43:a7:5d:3d:99:ae:a1:cc:6b:d2:d7:2d:
         2b:c4:2d:94:76:b0:4f:f3:e9:7b:76:5a:3e:69:26:b5:7c:2c:
         27:dc:3d:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8sW41UPwheO6YFBbPutIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2OTMwYmU4YzRjYTY5MDBlZWRiMmYzMjYwZDVkZDc4NTA1
NzAxMjkwHhcNMjUwNjEzMTEwMDMwWhcNMjUwNjE0MTEwMDMwWjAzMTEwLwYDVQQD
Eyg2ZGY1OTNkMDlhYjI3Y2EwYzNmYWVjZTNhM2JiZTI5NzVkZGIxOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5woHaeBflc9Vm9L88HJ4uoTZ/m3B
KikJSrYQHTHjjaiYBg4oYQvJH1PcB4x6v97rRqbjvdK3mstbUf/JKs4+fCwb/nNC
mEiY4H2eFyQ3YihQfFwD0e1t5l4sTtFyodwnJGuIgi0kZ0YvTllIpbHjkN+c8tZs
x31765pAGXCflnqFqFh04rFLSaZHPjFfPOVUqukcyn4iQsn8hRcfvCDSwd/4PzWE
Rk8VYz4LeuawqrlFTrxSKgS5Emg7KL8iDkA9+5KPP4B9AYU2Uw4AQsp+bGdy41rK
Cnc4IpUCWSpG5wZOXD3eEalhHM3iBsIPf2MR2zP05ZPioae8qGy7AfrelQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG31k9Casnygw/rs46O74pdd2xnWMB8GA1UdIwQY
MBaAFAaTC+jEymkA7tsvMmDV3XhQVwEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYt
ZmFiYWU4ZDU2ZmM2LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9hNjg1MTgtNDI5NS00NTI4LThlZTYtZmFiYWU4ZDU2ZmM2
LzEvQnBNTDZNVEthUUR1Mnk4eVlOWGRlRkJYQVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrdjc3pO
Y/H6xysaPi5CLPScbQuOOMqInqxqJPm7e8h1MJncADtRWUfRI5yq7hAI9lhhIcd2
MbyySWBh5rn64l2Fav8j7jFZ3/IBDel7z4ue11/uX3x5G5QsPgZ1KK8ClK77n/la
Lkw0o14EGz1s9TLsyh9CnpzmZOg1pUvW+iDwDBnr+hxwHeoiLSzsR1dktkJKXobr
K4dQvIZGdROQ9NLJFZA/1nqv6HiarGPemxvFoD1bHWUdnAfKBU0YUbq4y8+qmeF6
tcrB8Nk3T5kyfMc3V1sgVsEfJR/Uk/NnQ6ddPZmuocxr0tctK8QtlHawT/Ppe3Za
PmkmtXwsJ9w9Aw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:31 2025 by rpki-client