Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          4e3qS6uzWpoBRpD0P4J9rnZb2h25i8OzyJa/Sdt/wVY=
Subject key identifier:   72:3C:B8:54:9C:24:32:A2:19:D8:93:17:F4:1F:57:17:32:20:DE:13
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       0198733DD21B8591541C72F15BFE04EF52F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          1612
Signing time:             Mon 04 Aug 2025 04:01:27 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:27 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:27 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: BQ1bub0N/QrF23+iJV7H6eRLbRvrkVsOGY+oj/uPWNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:d2:1b:85:91:54:1c:72:f1:5b:fe:04:ef:52:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: Aug  4 04:01:27 2025 GMT
            Not After : Aug  5 04:01:27 2025 GMT
        Subject: CN=723cb8549c2432a219d89317f41f57173220de13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:58:fd:3a:fc:99:09:5d:fd:f1:10:9a:94:
                    5d:6b:24:17:8c:93:c6:c2:88:cc:09:94:54:f9:1e:
                    cc:a0:2a:5f:5c:c6:74:c0:18:fe:58:02:fa:5b:38:
                    fd:9d:06:75:89:e4:fd:81:74:93:43:e3:03:45:eb:
                    2b:0b:58:7e:e2:3e:bc:18:89:31:d4:78:8c:57:6a:
                    08:4e:2e:3b:e4:6b:46:8f:6a:1d:9f:ae:e8:9e:99:
                    55:9c:e4:8d:a9:46:76:36:20:47:cb:8e:8b:8c:be:
                    ca:8e:98:aa:91:f1:d9:d8:f6:55:9f:fa:ee:a5:5e:
                    ec:7f:12:0b:f6:c7:19:74:94:d1:c8:c6:fc:c3:7f:
                    72:7f:36:d2:73:d2:dd:b3:d0:1d:29:ca:2a:5b:4a:
                    f2:fe:7f:cf:81:26:52:8e:51:66:21:89:e6:a1:e0:
                    eb:79:e4:e3:1d:a7:72:02:0c:fc:f6:6d:ab:b0:2c:
                    87:d8:4f:d5:9e:e8:73:45:6e:12:f7:fe:fd:49:e1:
                    ec:46:28:aa:60:e1:50:ed:b1:d9:95:a8:2d:89:39:
                    44:82:71:cb:de:5e:04:06:62:d3:49:79:29:ae:16:
                    7a:62:45:a3:ca:7b:75:54:73:24:3b:78:8a:f7:7a:
                    17:dd:96:55:e4:7d:27:06:19:3c:3a:0a:71:ea:20:
                    1f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:B8:54:9C:24:32:A2:19:D8:93:17:F4:1F:57:17:32:20:DE:13
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:59:8d:e5:8f:6c:52:f3:d9:bf:f9:12:94:98:4a:10:0e:22:
         1e:8e:81:aa:c0:7b:22:78:73:44:00:5d:01:3b:e0:25:55:bc:
         69:ae:e6:5f:89:3e:de:b8:2c:0d:72:42:e8:d4:9d:6a:5e:03:
         c8:44:5f:4f:ee:e9:1e:b4:49:b6:1f:68:25:42:bc:98:f1:d7:
         01:1d:6b:8e:a2:e1:a3:ec:9e:b9:16:e4:62:ef:aa:f4:35:cd:
         a8:04:fb:88:ba:20:cb:5f:b2:9e:34:94:39:e9:0d:b9:3f:b5:
         5e:96:5a:fb:9c:a2:33:f9:0e:34:f2:ff:6e:86:7e:c1:12:85:
         4c:0e:13:b1:34:16:c3:3e:3e:6c:9c:d5:f1:b5:29:15:e2:fa:
         6f:22:7d:81:7a:e8:28:fb:ce:ce:8e:5e:cd:42:6a:32:c4:d3:
         11:66:be:39:a6:88:84:96:37:bf:8e:00:18:b3:ed:4a:54:6a:
         a3:f1:63:02:ed:65:2a:97:e1:7f:4e:b1:80:9c:70:e4:4e:71:
         44:4a:91:24:de:43:b8:b0:43:cb:5f:22:18:df:17:38:a7:09:
         0c:f1:01:c0:fa:84:1a:16:e2:07:bd:b4:62:0d:e5:84:c8:1a:
         fe:df:cd:3c:6f:91:22:bd:a2:88:61:28:59:fb:82:80:2b:e7:
         b1:f7:98:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPdIbhZFUHHLxW/4E71L5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZThkZTZhNjc0YzFmZWFhZDlhOWNjZDNjZWEyMmRmMjYx
NzRmMjIwHhcNMjUwODA0MDQwMTI3WhcNMjUwODA1MDQwMTI3WjAzMTEwLwYDVQQD
Eyg3MjNjYjg1NDljMjQzMmEyMTlkODkzMTdmNDFmNTcxNzMyMjBkZTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUpY/Tr8mQld/fEQmpRdayQXjJPG
wojMCZRU+R7MoCpfXMZ0wBj+WAL6Wzj9nQZ1ieT9gXSTQ+MDResrC1h+4j68GIkx
1HiMV2oITi475GtGj2odn67onplVnOSNqUZ2NiBHy46LjL7KjpiqkfHZ2PZVn/ru
pV7sfxIL9scZdJTRyMb8w39yfzbSc9Lds9AdKcoqW0ry/n/PgSZSjlFmIYnmoeDr
eeTjHadyAgz89m2rsCyH2E/VnuhzRW4S9/79SeHsRiiqYOFQ7bHZlagtiTlEgnHL
3l4EBmLTSXkprhZ6YkWjynt1VHMkO3iK93oX3ZZV5H0nBhk8Ogpx6iAfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHI8uFScJDKiGdiTF/QfVxcyIN4TMB8GA1UdIwQY
MBaAFAfo3mpnTB/qrZqczTzqIt8mF08iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQt
OWJlYTcxNzFiZThhLzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQtOWJlYTcxNzFiZThh
LzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFmN5Y9s
UvPZv/kSlJhKEA4iHo6BqsB7InhzRABdATvgJVW8aa7mX4k+3rgsDXJC6NSdal4D
yERfT+7pHrRJth9oJUK8mPHXAR1rjqLho+yeuRbkYu+q9DXNqAT7iLogy1+ynjSU
OekNuT+1XpZa+5yiM/kONPL/boZ+wRKFTA4TsTQWwz4+bJzV8bUpFeL6byJ9gXro
KPvOzo5ezUJqMsTTEWa+OaaIhJY3v44AGLPtSlRqo/FjAu1lKpfhf06xgJxw5E5x
REqRJN5DuLBDy18iGN8XOKcJDPEBwPqEGhbiB720Yg3lhMga/t/NPG+RIr2iiGEo
WfuCgCvnsfeY5A==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:41 2025 by rpki-client