Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          saWZc5ELv4gFIlWYZPShlYQ+WySFx+zD8oaaBvAoJ7c=
Subject key identifier:   07:33:73:CA:1A:A6:AE:11:59:1C:AD:2F:03:C5:1A:14:9D:F8:98:32
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       019778D461BFB5665E480B2440A70E90CDDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          1595
Signing time:             Mon 16 Jun 2025 13:01:13 +0000
Manifest this update:     Mon 16 Jun 2025 13:01:13 +0000
Manifest next update:     Tue 17 Jun 2025 13:01:13 +0000
Files and hashes:         1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
                          2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 7NRMOtB8+8l4X5inlUJa+qeFVFWvBxDNQQyc93AaJrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:78:d4:61:bf:b5:66:5e:48:0b:24:40:a7:0e:90:cd:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Jun 16 13:01:13 2025 GMT
            Not After : Jun 17 13:01:13 2025 GMT
        Subject: CN=073373ca1aa6ae11591cad2f03c51a149df89832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:80:6a:d1:7b:00:4d:52:1d:46:95:af:5d:
                    b0:58:34:7e:b8:17:84:bd:a9:a5:b0:b3:c3:f7:6a:
                    18:36:b2:a1:a8:a7:1f:f4:79:35:28:63:8e:c3:1d:
                    4c:0e:99:36:41:3c:35:7e:a9:11:bb:6c:d9:80:10:
                    94:79:ca:b5:03:86:0e:e0:f1:0d:3f:04:2e:19:46:
                    61:25:04:7c:b4:94:da:26:69:c5:82:ae:5b:aa:a2:
                    4b:20:af:3e:ed:71:77:97:48:1d:5a:f1:99:f8:9c:
                    44:b3:74:90:e8:3f:ff:97:1b:75:c1:16:57:89:e2:
                    c1:02:48:80:91:82:90:87:13:30:4a:14:a6:d8:b2:
                    cd:c7:57:97:e1:8a:49:62:84:c6:31:d1:45:ee:33:
                    c3:84:24:b2:93:b7:e3:57:36:06:e8:84:80:d9:66:
                    ca:04:43:51:99:99:a8:9c:85:5b:04:fc:3d:5e:7c:
                    dd:e2:c4:16:fe:40:b6:bf:e3:15:52:61:b9:2d:35:
                    ad:56:82:25:6f:8b:59:e0:f2:d2:e4:c2:77:98:c5:
                    de:08:ae:64:b5:ba:2c:f9:5f:56:05:db:13:d2:1f:
                    12:d2:15:7c:fa:d4:13:82:e7:dd:f5:f7:13:fe:e3:
                    7b:1b:88:49:3c:df:08:89:0c:9d:af:cc:13:69:35:
                    4a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:33:73:CA:1A:A6:AE:11:59:1C:AD:2F:03:C5:1A:14:9D:F8:98:32
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2f:c2:91:92:6c:44:f5:dc:6c:18:02:b1:1d:49:1b:f6:cc:
         48:0d:7c:6d:80:ce:88:b2:8a:dd:93:61:96:df:91:2b:43:c1:
         d3:a4:0b:bd:c8:f8:0c:1c:cc:97:1c:51:99:16:23:f2:9a:c5:
         1b:83:56:ed:5c:20:a0:66:84:41:c9:f5:23:6f:04:41:f7:83:
         46:70:aa:92:fe:e9:f3:7f:b5:43:b6:48:aa:a2:06:3e:80:e4:
         5a:d3:01:2c:7e:f6:70:ea:ff:d2:18:c5:83:6d:16:ab:cd:83:
         c0:62:ec:a7:3a:94:a9:76:01:cd:fd:a4:c5:ee:d5:d5:79:11:
         2c:04:71:0c:c6:27:2c:1a:d4:31:a3:e0:c7:f0:6c:66:fa:3b:
         9e:6a:4c:b7:29:c2:ab:cb:f2:f1:50:33:06:fe:d7:99:18:2c:
         a6:05:eb:4a:32:a9:a0:f3:be:2d:71:ca:c5:f5:b1:21:ee:a2:
         9a:44:01:fc:bf:bb:dd:cf:73:d4:b2:d7:8a:db:a8:f0:bf:8e:
         90:e8:7d:5a:7f:19:7c:45:b4:1b:3a:0f:83:66:be:bf:28:87:
         b9:37:4c:7b:c5:58:98:29:51:a5:30:35:fb:08:aa:4c:10:83:
         b9:f9:2f:88:1d:a6:70:38:99:29:24:28:4c:f3:0f:b6:0e:60:
         ce:a1:05:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd41GG/tWZeSAskQKcOkM3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5
ZTViM2UwHhcNMjUwNjE2MTMwMTEzWhcNMjUwNjE3MTMwMTEzWjAzMTEwLwYDVQQD
EygwNzMzNzNjYTFhYTZhZTExNTkxY2FkMmYwM2M1MWExNDlkZjg5ODMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGKAatF7AE1SHUaVr12wWDR+uBeE
vamlsLPD92oYNrKhqKcf9Hk1KGOOwx1MDpk2QTw1fqkRu2zZgBCUecq1A4YO4PEN
PwQuGUZhJQR8tJTaJmnFgq5bqqJLIK8+7XF3l0gdWvGZ+JxEs3SQ6D//lxt1wRZX
ieLBAkiAkYKQhxMwShSm2LLNx1eX4YpJYoTGMdFF7jPDhCSyk7fjVzYG6ISA2WbK
BENRmZmonIVbBPw9Xnzd4sQW/kC2v+MVUmG5LTWtVoIlb4tZ4PLS5MJ3mMXeCK5k
tbos+V9WBdsT0h8S0hV8+tQTgufd9fcT/uN7G4hJPN8IiQydr8wTaTVKGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAczc8oapq4RWRytLwPFGhSd+JgyMB8GA1UdIwQY
MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy/CkZJs
RPXcbBgCsR1JG/bMSA18bYDOiLKK3ZNhlt+RK0PB06QLvcj4DBzMlxxRmRYj8prF
G4NW7VwgoGaEQcn1I28EQfeDRnCqkv7p83+1Q7ZIqqIGPoDkWtMBLH72cOr/0hjF
g20Wq82DwGLspzqUqXYBzf2kxe7V1XkRLARxDMYnLBrUMaPgx/BsZvo7nmpMtynC
q8vy8VAzBv7XmRgspgXrSjKpoPO+LXHKxfWxIe6imkQB/L+73c9z1LLXituo8L+O
kOh9Wn8ZfEW0GzoPg2a+vyiHuTdMe8VYmClRpTA1+wiqTBCDufkviB2mcDiZKSQo
TPMPtg5gzqEFrw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:03:40 2025 by rpki-client