Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
File:                     BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json)
Hash identifier:          sFrk6mPhAHp/MsOZSiTn4yr+iGLFbaCHt4rKPLWCO+g=
Subject key identifier:   5F:C7:25:38:FC:A9:1B:04:27:C4:F6:D4:7F:B3:7B:5E:F0:E1:BF:25
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Certificate issuer:       /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial:       01976EBDFE6344FD099D0DFED6D42B665527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
Manifest number:          1590
Signing time:             Sat 14 Jun 2025 14:00:34 +0000
Manifest this update:     Sat 14 Jun 2025 14:00:34 +0000
Manifest next update:     Sun 15 Jun 2025 14:00:34 +0000
Files and hashes:         1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: fsO0na/WgzTZ2rhCV+O5an0PFmtJ6rDj9NK5iZj9/G8=)
                          2: SiRuz5DPXz9HshuqRJYB7VyQXyE.roa (hash: bgytOhweICmzdqwpnRZX5G1gQSNta8oc7hejatWlbv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:bd:fe:63:44:fd:09:9d:0d:fe:d6:d4:2b:66:55:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
        Validity
            Not Before: Jun 14 14:00:34 2025 GMT
            Not After : Jun 15 14:00:34 2025 GMT
        Subject: CN=5fc72538fca91b0427c4f6d47fb37b5ef0e1bf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:38:22:4b:f8:8f:53:3b:6e:0d:b3:87:3d:0e:
                    da:ef:dc:7f:26:2a:69:e9:bb:76:72:3c:dc:24:54:
                    fe:86:2c:01:a4:d8:9b:43:d9:59:aa:37:82:f3:de:
                    b1:d3:80:87:28:a6:99:38:41:40:4d:1e:04:71:a4:
                    48:fa:7d:d3:7e:78:b6:54:61:9f:d1:21:bd:98:f6:
                    f3:91:52:7f:7c:34:b7:26:cc:93:a3:e2:a5:d5:b8:
                    aa:7a:e3:ef:49:2e:35:c8:ee:b7:ad:c4:b3:f3:f4:
                    b7:cb:59:43:62:51:8e:a7:4e:67:ae:f7:c1:68:b4:
                    59:f9:8b:6d:5b:3c:39:c6:98:2f:a2:6b:42:02:f8:
                    1e:ad:6d:b9:d1:77:46:ae:56:38:22:7c:79:6a:5b:
                    aa:67:31:a0:26:e1:af:6b:b7:d4:c6:4f:a8:2e:ac:
                    de:92:cc:b0:9b:e6:dd:4c:b9:98:e6:0c:5a:48:ef:
                    1a:98:2e:9e:60:4a:a3:42:28:f9:11:19:dd:8e:4d:
                    02:a8:4f:53:71:3e:0d:c0:31:fe:52:fa:b7:ef:47:
                    b3:d8:f8:52:1e:fc:e7:15:41:17:50:ae:88:34:98:
                    d5:77:33:76:d6:03:21:e9:81:1e:9d:82:4c:38:93:
                    ee:61:74:03:0f:ba:4e:79:e1:3a:c1:47:4d:73:e6:
                    36:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C7:25:38:FC:A9:1B:04:27:C4:F6:D4:7F:B3:7B:5E:F0:E1:BF:25
            X509v3 Authority Key Identifier:
                keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ea:75:0c:09:ee:8b:0b:28:a1:fb:c2:57:22:3b:56:3a:de:
         7d:1d:df:82:d8:35:87:57:65:17:19:d9:46:e7:38:53:6a:79:
         8d:55:89:17:3b:cf:13:99:ed:1c:c4:e1:bc:01:96:9b:11:c2:
         fa:ce:6f:d3:dc:e7:c4:c6:38:d6:f0:b9:95:1a:d2:a1:5f:28:
         c7:97:da:78:7f:b8:ee:7f:9e:ac:67:9d:4d:e3:32:cb:d0:f9:
         e3:c4:ab:d5:d7:29:7b:7d:ee:f1:13:fb:d6:ce:20:9c:6c:3d:
         33:75:70:79:48:f3:db:f4:0c:15:a6:76:89:cc:ba:ea:66:54:
         35:9c:74:f3:db:a1:41:59:ae:3f:e2:e7:dc:16:19:15:9d:14:
         eb:4d:5f:59:b2:dc:fb:5a:ef:ec:a0:69:b6:d2:3d:66:80:a7:
         d3:56:e2:f6:f8:f0:f2:e7:26:53:03:ef:db:de:b2:56:64:f4:
         52:cc:dd:07:36:fd:b9:f5:90:c2:d5:37:fc:c8:f5:31:02:e6:
         f2:aa:d8:d2:5e:89:63:64:87:59:35:50:9c:af:03:2e:af:b9:
         e6:fd:1b:ca:ea:27:ec:6f:7f:f4:d4:09:d7:00:e6:ee:cd:03:
         8a:3a:62:c8:ba:64:e5:d3:1a:a9:85:57:71:e6:04:07:02:27:
         7e:31:40:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduvf5jRP0JnQ3+1tQrZlUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5
MGVjZjQwHhcNMjUwNjE0MTQwMDM0WhcNMjUwNjE1MTQwMDM0WjAzMTEwLwYDVQQD
Eyg1ZmM3MjUzOGZjYTkxYjA0MjdjNGY2ZDQ3ZmIzN2I1ZWYwZTFiZjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzgiS/iPUztuDbOHPQ7a79x/Jipp
6bt2cjzcJFT+hiwBpNibQ9lZqjeC896x04CHKKaZOEFATR4EcaRI+n3Tfni2VGGf
0SG9mPbzkVJ/fDS3JsyTo+Kl1biqeuPvSS41yO63rcSz8/S3y1lDYlGOp05nrvfB
aLRZ+YttWzw5xpgvomtCAvgerW250XdGrlY4Inx5aluqZzGgJuGva7fUxk+oLqze
ksywm+bdTLmY5gxaSO8amC6eYEqjQij5ERndjk0CqE9TcT4NwDH+Uvq370ez2PhS
HvznFUEXUK6INJjVdzN21gMh6YEenYJMOJPuYXQDD7pOeeE6wUdNc+Y2GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/HJTj8qRsEJ8T21H+ze17w4b8lMB8GA1UdIwQY
MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt
YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3
LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHup1DAnu
iwsoofvCVyI7VjrefR3fgtg1h1dlFxnZRuc4U2p5jVWJFzvPE5ntHMThvAGWmxHC
+s5v09znxMY41vC5lRrSoV8ox5faeH+47n+erGedTeMyy9D548Sr1dcpe33u8RP7
1s4gnGw9M3VweUjz2/QMFaZ2icy66mZUNZx089uhQVmuP+Ln3BYZFZ0U601fWbLc
+1rv7KBpttI9ZoCn01bi9vjw8ucmUwPv296yVmT0UszdBzb9ufWQwtU3/Mj1MQLm
8qrY0l6JY2SHWTVQnK8DLq+55v0byuon7G9/9NQJ1wDm7s0DijpiyLpk5dMaqYVX
ceYEBwInfjFAFA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:45:17 2025 by rpki-client