Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          gw0c1qATX8QGTsoZExRWy82C+zcu3lIl/JRyz5MlQ58=
Subject key identifier:   54:4C:7C:B1:E3:28:8C:95:E6:1F:2B:2B:6B:D0:73:52:24:8B:5F:B1
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       01987D8A33BB00D64C4DC271490F0951984F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          13BF
Signing time:             Wed 06 Aug 2025 04:01:05 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:05 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:05 +0000
Files and hashes:         1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: cnhRQgHq8vdIPp0I4260k9HNYkTGxu4FX+6/NxEEOzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:33:bb:00:d6:4c:4d:c2:71:49:0f:09:51:98:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Aug  6 04:01:05 2025 GMT
            Not After : Aug  7 04:01:05 2025 GMT
        Subject: CN=544c7cb1e3288c95e61f2b2b6bd07352248b5fb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:45:50:a6:4f:83:71:35:6c:5c:94:5c:5c:06:
                    f5:9f:93:41:ad:98:a0:9e:00:09:c6:51:3e:ac:b6:
                    f7:ba:d6:3a:af:ac:c1:de:63:56:41:7f:b0:1a:79:
                    2a:4e:66:a5:4c:e2:38:5f:c5:8b:d3:51:8f:8a:00:
                    05:86:cf:0f:45:44:98:df:68:1a:7b:06:a5:52:34:
                    6b:ea:31:58:96:72:b3:87:91:3e:d7:79:db:d1:72:
                    fb:f8:66:9d:4b:08:ad:77:58:29:62:bb:cf:72:0b:
                    22:3e:59:db:d1:bc:41:8f:0c:64:73:e8:bf:fe:d7:
                    e2:4b:d7:c7:f9:c7:01:7e:6c:38:c7:30:1b:9e:4d:
                    7f:fe:0b:de:86:b3:bd:bd:22:54:61:1e:f9:a7:33:
                    1b:d5:8b:4c:b6:97:85:c5:65:a7:d0:53:57:7c:18:
                    16:15:c3:49:c9:1b:f6:2a:a1:bc:7b:c1:76:b5:1d:
                    33:fe:8c:ab:64:0f:56:ec:44:cd:c4:48:bf:85:c9:
                    f8:41:e9:40:bc:0b:66:97:c5:4e:d3:02:2a:76:8e:
                    d6:d2:63:ce:06:9d:41:d2:20:7f:95:30:73:a6:b4:
                    6b:dd:ab:ed:0e:b0:7d:7c:b8:6c:40:7d:03:ed:88:
                    80:f5:48:08:07:d3:20:9b:d8:c2:7b:50:ed:d6:85:
                    7b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:7C:B1:E3:28:8C:95:E6:1F:2B:2B:6B:D0:73:52:24:8B:5F:B1
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9a:35:29:50:d7:1d:93:fb:c0:27:1f:b8:ba:52:c1:83:0f:
         3a:bc:67:9a:21:83:80:96:69:54:17:65:cc:3e:21:41:21:75:
         f5:25:7f:b7:d5:f0:e6:6e:31:d9:11:77:f0:d1:f2:ab:ef:1c:
         f3:dd:6f:32:f3:28:1a:e6:ed:22:3c:32:39:4c:65:84:c0:46:
         8f:64:b5:83:63:9e:27:39:ec:90:c3:24:be:a2:4e:07:72:d2:
         30:ed:5a:18:5f:71:f1:40:0e:d0:e6:46:8a:b1:07:ad:c0:97:
         89:89:0b:bc:94:34:1c:22:97:f2:bb:90:d1:9c:6c:6b:20:c1:
         51:77:ed:05:a2:75:a6:6d:1e:04:ce:c7:4b:fa:37:7f:c0:e2:
         e6:c0:ac:42:ec:97:7f:b2:0f:d4:20:dd:82:45:48:5d:11:8c:
         cb:b5:23:f1:8b:ca:dc:7e:30:d1:ff:28:08:bd:77:72:ef:74:
         f4:3f:b2:c4:14:74:1d:dd:da:09:24:96:16:f8:ff:4e:e8:a1:
         0a:f6:4a:b6:bd:bf:d9:45:9e:42:f7:b3:ab:0e:c7:61:51:d9:
         a0:c8:ff:fc:d2:5b:d6:64:bb:fe:ff:46:d8:8d:6e:e1:5d:bb:
         47:42:3e:d7:00:25:6a:b2:ae:50:ec:4c:db:15:a4:d9:0b:2d:
         70:02:e5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9ijO7ANZMTcJxSQ8JUZhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi
MWQ3OTkwHhcNMjUwODA2MDQwMTA1WhcNMjUwODA3MDQwMTA1WjAzMTEwLwYDVQQD
Eyg1NDRjN2NiMWUzMjg4Yzk1ZTYxZjJiMmI2YmQwNzM1MjI0OGI1ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0VQpk+DcTVsXJRcXAb1n5NBrZig
ngAJxlE+rLb3utY6r6zB3mNWQX+wGnkqTmalTOI4X8WL01GPigAFhs8PRUSY32ga
ewalUjRr6jFYlnKzh5E+13nb0XL7+GadSwitd1gpYrvPcgsiPlnb0bxBjwxkc+i/
/tfiS9fH+ccBfmw4xzAbnk1//gvehrO9vSJUYR75pzMb1YtMtpeFxWWn0FNXfBgW
FcNJyRv2KqG8e8F2tR0z/oyrZA9W7ETNxEi/hcn4QelAvAtml8VO0wIqdo7W0mPO
Bp1B0iB/lTBzprRr3avtDrB9fLhsQH0D7YiA9UgIB9Mgm9jCe1Dt1oV73wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRMfLHjKIyV5h8rK2vQc1Iki1+xMB8GA1UdIwQY
MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt
MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi
LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZo1KVDX
HZP7wCcfuLpSwYMPOrxnmiGDgJZpVBdlzD4hQSF19SV/t9Xw5m4x2RF38NHyq+8c
891vMvMoGubtIjwyOUxlhMBGj2S1g2OeJznskMMkvqJOB3LSMO1aGF9x8UAO0OZG
irEHrcCXiYkLvJQ0HCKX8ruQ0ZxsayDBUXftBaJ1pm0eBM7HS/o3f8Di5sCsQuyX
f7IP1CDdgkVIXRGMy7Uj8YvK3H4w0f8oCL13cu909D+yxBR0Hd3aCSSWFvj/Tuih
CvZKtr2/2UWeQvezqw7HYVHZoMj//NJb1mS7/v9G2I1u4V27R0I+1wAlarKuUOxM
2xWk2QstcALl8A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:16:10 2025 by rpki-client