Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File:                     bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier:          u8NADf0V5zFl/yc7XDzm0IvhalzJUUGdHGBqi41iWEc=
Subject key identifier:   90:2E:1A:B2:32:5A:53:EB:83:7D:CF:89:08:7D:D3:32:DD:13:91:8D
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer:       /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial:       01988CFD30291969C73C6D5E74321B771567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number:          0BD1
Signing time:             Sat 09 Aug 2025 04:00:59 +0000
Manifest this update:     Sat 09 Aug 2025 04:00:59 +0000
Manifest next update:     Sun 10 Aug 2025 04:00:59 +0000
Files and hashes:         1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: fDpdztB5X3aCt+Qwiqi2BWfiT0iQpnFWHY1KVhH908Q=)
                          2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fd:30:29:19:69:c7:3c:6d:5e:74:32:1b:77:15:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
        Validity
            Not Before: Aug  9 04:00:59 2025 GMT
            Not After : Aug 10 04:00:59 2025 GMT
        Subject: CN=902e1ab2325a53eb837dcf89087dd332dd13918d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:d5:ba:ca:6a:81:8d:e7:30:c2:04:fe:86:
                    d0:61:c4:76:fe:06:2e:a0:0f:fa:69:a4:b2:af:e1:
                    ed:ce:cb:33:66:f9:bc:c8:70:da:f9:fd:18:a6:54:
                    ee:43:ee:bb:5c:bc:c3:41:57:6b:39:9a:15:57:db:
                    bb:21:e8:4f:e6:99:4d:c5:d4:50:57:8e:64:de:68:
                    62:37:4c:b9:13:7a:bd:f6:24:2b:33:d0:36:00:4a:
                    a1:70:ac:5d:8d:fb:b5:17:ae:1d:26:be:54:31:6a:
                    2f:6a:a2:fe:4f:7b:8a:22:49:bc:91:82:bc:9f:b9:
                    75:95:7c:2f:f2:de:07:f0:a3:aa:90:96:47:92:7b:
                    d2:dd:13:2e:06:23:11:da:a7:0e:b0:53:c2:e7:b0:
                    12:a4:10:4c:59:e3:47:97:8b:41:29:be:87:40:3c:
                    fa:f0:f4:4b:23:36:1f:a5:f9:e7:48:a4:ce:c8:b4:
                    8b:56:c3:64:9d:8a:63:0f:f8:79:ec:43:6d:7b:bd:
                    dd:d6:0c:4e:39:31:33:34:6d:db:1f:43:c4:ac:f1:
                    ae:ec:35:75:23:2d:fa:ef:2b:53:12:03:9e:a1:3d:
                    43:c1:7f:7f:54:cf:fb:3f:fc:d4:9b:29:35:88:69:
                    e2:57:2e:b6:64:84:db:7c:16:69:1a:16:14:96:de:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2E:1A:B2:32:5A:53:EB:83:7D:CF:89:08:7D:D3:32:DD:13:91:8D
            X509v3 Authority Key Identifier:
                keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:bc:a7:c2:f0:f4:b9:27:61:3e:d3:98:50:2a:f4:72:2a:
         93:09:d6:7f:a0:b4:a2:9f:b5:6a:24:73:29:3e:79:05:8f:8d:
         b7:0b:7e:ac:a9:92:0d:de:d0:b8:c5:1e:68:d9:3f:63:18:2b:
         33:c3:c6:c2:8e:d2:1c:10:aa:27:ae:17:27:a3:e2:55:62:34:
         d5:72:d1:9c:53:6b:b1:a5:2a:65:97:1f:22:6f:62:8b:ac:4d:
         12:48:63:50:e2:f9:83:8f:58:e9:0b:e8:e4:ed:0a:3e:3e:67:
         d7:c2:34:93:f7:7f:47:ce:c5:8c:ee:52:8a:98:cf:cf:8e:49:
         f7:5d:81:11:12:48:c9:92:86:06:db:fa:06:50:f0:48:6c:db:
         d6:c6:8c:0a:a4:01:de:32:96:d1:38:d7:62:91:8a:b6:7a:59:
         47:49:af:a4:9c:c8:14:be:9e:db:72:e4:61:66:f5:3b:4c:8b:
         b3:d0:27:31:cf:eb:4a:fe:ec:64:7c:1e:b6:05:99:be:15:37:
         e7:0b:0f:c8:e8:5d:40:37:64:10:98:ad:c6:bc:90:6d:ee:90:
         7d:e4:90:b6:ef:ea:47:1b:44:aa:80:8b:34:78:27:24:56:a5:
         b3:04:e9:de:93:3f:93:f5:40:17:85:c7:3a:ca:59:dc:3e:7e:
         ac:cf:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:21 2025 by rpki-client