Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          bHW4CZRq/Aq7/fmpJJkCHERtoVRLF5YeQJDynMc3xwI=
Subject key identifier:   3E:DB:56:05:FB:3F:60:C4:5C:0F:86:72:EB:28:E3:C5:ED:27:BB:D8
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       01987306769452C3C5854D1FAC0D8C759BA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          04F9
Signing time:             Mon 04 Aug 2025 03:01:00 +0000
Manifest this update:     Mon 04 Aug 2025 03:01:00 +0000
Manifest next update:     Tue 05 Aug 2025 03:01:00 +0000
Files and hashes:         1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: slppAiN5l0xyrHFUmVj0jggC+xey7fMUBVzREt/48vE=)
                          3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=)
                          4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
                          5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
                          6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
                          7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:06:76:94:52:c3:c5:85:4d:1f:ac:0d:8c:75:9b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Aug  4 03:01:00 2025 GMT
            Not After : Aug  5 03:01:00 2025 GMT
        Subject: CN=3edb5605fb3f60c45c0f8672eb28e3c5ed27bbd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:46:c7:c1:f7:07:e8:97:fc:30:75:f7:0d:f9:
                    c5:94:c8:a7:98:85:0a:7a:b7:17:58:7e:8a:f5:35:
                    25:91:f1:d3:90:c2:34:85:cb:9d:95:33:15:fd:8e:
                    89:7c:1a:76:08:d2:19:c7:7c:1d:d2:9d:b7:53:6f:
                    72:b6:6f:14:95:54:93:fa:e5:95:c1:70:21:b1:41:
                    83:3e:80:1e:77:68:85:47:36:42:4d:d3:16:d6:92:
                    9b:9b:02:0e:be:2b:04:b1:af:42:8d:4f:da:bc:d0:
                    78:6e:c5:0f:27:b1:cf:5a:6a:96:96:44:75:bf:34:
                    fc:3d:84:92:a4:d7:21:66:64:06:c4:ae:2e:70:3d:
                    57:da:2f:b8:05:14:48:83:d6:13:8c:0a:08:e0:d0:
                    98:e0:87:36:7c:91:37:0e:04:92:b7:6f:94:f1:8d:
                    90:a7:f8:5a:b2:df:1c:92:38:31:65:d4:cd:68:98:
                    76:5c:e2:a0:aa:13:39:88:63:17:90:54:80:df:73:
                    60:67:2a:b4:67:87:ec:21:d4:49:4d:8d:87:cc:e1:
                    1d:ca:83:f7:08:f4:f3:72:02:1c:20:47:57:17:0b:
                    0a:3b:ec:46:b7:72:8d:c4:e9:07:55:49:1a:17:7d:
                    5e:3b:a0:d4:dd:60:6f:c7:d4:fd:16:84:50:35:ab:
                    1f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DB:56:05:FB:3F:60:C4:5C:0F:86:72:EB:28:E3:C5:ED:27:BB:D8
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ce:f9:01:f7:fd:98:3a:94:60:8f:a6:52:6f:25:c1:7c:b0:
         8d:12:2f:c6:65:78:f1:11:bf:b3:f4:bc:d8:53:3f:3e:03:56:
         25:60:cb:50:d2:30:86:45:8b:c4:89:b1:78:8c:33:8c:72:7c:
         61:36:30:65:1d:56:9d:10:26:96:6e:6d:75:c3:d2:f2:a5:c3:
         3c:ee:46:e6:de:8b:92:e6:db:12:a7:d8:e9:d8:a8:43:8b:8c:
         2e:f8:81:b7:81:da:c8:3b:7f:79:b7:78:f2:fc:0b:23:13:f2:
         02:70:f9:ea:97:8a:0e:6e:67:b5:93:84:7b:5f:b4:d3:30:33:
         e9:7a:a7:ab:b9:eb:29:91:da:20:f2:b3:99:38:80:60:f4:27:
         0d:6f:0b:92:f8:3c:9b:b2:75:89:8f:d5:b2:17:82:f8:86:08:
         5e:3c:24:8a:60:bf:75:07:2d:ab:00:cf:06:47:95:57:05:a9:
         8b:d2:ea:e7:48:81:ae:ca:97:1e:93:a6:35:a1:a5:ff:60:30:
         ba:38:17:93:43:af:b5:26:65:74:ef:8c:9c:af:e1:13:ac:3d:
         8b:3c:fe:04:4f:f1:eb:6c:76:82:42:76:6d:9f:c6:e9:9d:34:
         a7:b3:c2:c9:58:66:58:3b:1a:8d:02:cd:72:a4:59:fd:d8:2e:
         95:d1:43:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBnaUUsPFhU0frA2MdZunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl
ODg3ZGMwHhcNMjUwODA0MDMwMTAwWhcNMjUwODA1MDMwMTAwWjAzMTEwLwYDVQQD
EygzZWRiNTYwNWZiM2Y2MGM0NWMwZjg2NzJlYjI4ZTNjNWVkMjdiYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEbHwfcH6Jf8MHX3DfnFlMinmIUK
ercXWH6K9TUlkfHTkMI0hcudlTMV/Y6JfBp2CNIZx3wd0p23U29ytm8UlVST+uWV
wXAhsUGDPoAed2iFRzZCTdMW1pKbmwIOvisEsa9CjU/avNB4bsUPJ7HPWmqWlkR1
vzT8PYSSpNchZmQGxK4ucD1X2i+4BRRIg9YTjAoI4NCY4Ic2fJE3DgSSt2+U8Y2Q
p/hast8ckjgxZdTNaJh2XOKgqhM5iGMXkFSA33NgZyq0Z4fsIdRJTY2HzOEdyoP3
CPTzcgIcIEdXFwsKO+xGt3KNxOkHVUkaF31eO6DU3WBvx9T9FoRQNasfXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7bVgX7P2DEXA+Gcuso48XtJ7vYMB8GA1UdIwQY
MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt
YWFlMTQ0NzYwM2MwLzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw
LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAps75Aff9
mDqUYI+mUm8lwXywjRIvxmV48RG/s/S82FM/PgNWJWDLUNIwhkWLxImxeIwzjHJ8
YTYwZR1WnRAmlm5tdcPS8qXDPO5G5t6LkubbEqfY6dioQ4uMLviBt4HayDt/ebd4
8vwLIxPyAnD56peKDm5ntZOEe1+00zAz6Xqnq7nrKZHaIPKzmTiAYPQnDW8Lkvg8
m7J1iY/VsheC+IYIXjwkimC/dQctqwDPBkeVVwWpi9Lq50iBrsqXHpOmNaGl/2Aw
ujgXk0OvtSZldO+MnK/hE6w9izz+BE/x62x2gkJ2bZ/G6Z00p7PCyVhmWDsajQLN
cqRZ/dguldFDHA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:44 2025 by rpki-client