Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
File:                     _BP3-iN_idARIzuscyjCIZun1iw.mft (raw, json)
Hash identifier:          HjGn4aN3dMdW5oNR3/2UX8KtD83DY8kqnDAnsEhAMuw=
Subject key identifier:   03:D6:B3:3B:CF:DE:11:F8:B3:AF:3A:C3:F5:FE:AB:4C:FD:D0:8D:F5
Authority key identifier: FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C
Certificate issuer:       /CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
Certificate serial:       019886568D3126EAA2505556C6A9DEB67ADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
Manifest number:          1629
Signing time:             Thu 07 Aug 2025 21:01:15 +0000
Manifest this update:     Thu 07 Aug 2025 21:01:15 +0000
Manifest next update:     Fri 08 Aug 2025 21:01:15 +0000
Files and hashes:         1: 4DlDfpniYRoqx5RnbBQ2QyX4S0s.roa (hash: 6W2AtaQBI78k64Wvc+o0EJDF11ZLR+JxMn3tTY6KLb4=)
                          2: GP2Q_Wo-_yK4eP2QDnc65CMZm9M.roa (hash: 0BR2eQuYyvuB8xq6ftmI/kAgu9noQmyJZpAp5YGagjg=)
                          3: _BP3-iN_idARIzuscyjCIZun1iw.crl (hash: +8kDn0P50ge0THBee1tr1Sg/A8ErZJvT0DwwO8+1f+M=)
                          4: jrhngJH5WqcrHBQKWDaE0mXlivg.roa (hash: b0vzPK3TykyX3k8EOTeZC+7bd64uJKZrG9G6u+Jqaek=)
                          5: mBNBPvpQ0ZyKyklOFfh-zOZGjfY.roa (hash: /KSNQLTNa7loW014tE7eo3A+ZK7sfCtmbcB6pN7dyog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:86:56:8d:31:26:ea:a2:50:55:56:c6:a9:de:b6:7a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc13f7fa237f89d011233bac7328c2219ba7d62c
        Validity
            Not Before: Aug  7 21:01:15 2025 GMT
            Not After : Aug  8 21:01:15 2025 GMT
        Subject: CN=03d6b33bcfde11f8b3af3ac3f5feab4cfdd08df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:97:b9:22:47:ae:09:d0:01:22:4e:8d:19:
                    b6:2d:94:45:14:a5:49:14:95:d2:86:df:6e:c3:21:
                    f3:1c:26:a3:30:ea:f3:17:d7:f4:14:3f:6a:24:85:
                    1a:63:96:e8:35:d8:aa:3a:68:4a:37:67:d9:fc:51:
                    00:2b:6e:fa:ad:c0:92:56:0a:9a:a6:83:5e:88:9e:
                    ce:54:49:8a:e4:13:e1:f3:34:e4:70:3f:a5:ea:6b:
                    ea:96:45:d0:80:4a:63:2a:6a:3a:ca:90:0e:08:b0:
                    51:f3:a2:57:b1:52:11:7b:59:b1:40:6d:53:ff:fc:
                    22:76:73:4d:83:ce:be:c5:41:26:2f:b8:6d:1c:f6:
                    8f:2b:2d:ae:14:e1:a0:19:eb:19:64:9f:85:0d:b9:
                    cf:33:45:44:e7:cc:f0:1c:01:96:b9:0d:9a:de:ea:
                    52:b4:b4:f8:f8:24:7d:b4:4d:7c:e7:58:2e:51:be:
                    53:27:70:ea:a1:7c:55:ea:37:87:4a:08:f5:eb:74:
                    ad:73:72:22:77:18:ab:2a:84:14:2e:37:2f:9a:7f:
                    fb:7f:c2:7d:c8:e5:a4:e5:35:cb:0e:e8:aa:fd:19:
                    9d:31:b4:99:38:d5:44:01:a5:c7:8f:36:0f:63:db:
                    d3:30:23:7e:26:78:46:16:b5:73:e7:86:63:a9:c4:
                    c6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D6:B3:3B:CF:DE:11:F8:B3:AF:3A:C3:F5:FE:AB:4C:FD:D0:8D:F5
            X509v3 Authority Key Identifier:
                keyid:FC:13:F7:FA:23:7F:89:D0:11:23:3B:AC:73:28:C2:21:9B:A7:D6:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BP3-iN_idARIzuscyjCIZun1iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/09af2b-64f7-4c1d-abd4-d07464b9b378/1/_BP3-iN_idARIzuscyjCIZun1iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:05:a1:e6:59:4c:14:84:d6:e8:7f:f6:c6:f6:10:91:9f:dd:
         d2:6a:8d:2d:2c:8e:df:dc:28:ec:50:05:34:1d:95:a4:55:fe:
         21:5f:7c:d9:63:e3:fd:ce:65:6d:78:18:c9:7f:cc:f6:0d:b6:
         6c:84:b6:29:68:2a:b2:bd:4e:85:bc:ba:99:2e:5a:17:4c:40:
         aa:d6:46:f6:70:07:ae:ad:d5:e7:96:cb:21:1a:4a:a3:b1:0d:
         31:a6:5b:fc:54:56:69:c7:63:99:a0:58:61:e9:37:38:54:02:
         90:83:50:56:3b:3f:ca:e8:4b:f4:77:c0:a6:a2:f4:e5:bd:dc:
         c7:aa:d9:ba:69:db:82:eb:4e:e7:66:4d:03:80:19:a2:b2:6e:
         1c:32:a1:ab:47:f3:d5:bd:88:69:a7:b1:5c:00:ea:d0:a2:57:
         85:e5:8c:d4:02:89:43:d1:6d:38:48:3e:bc:53:c3:84:1c:be:
         ed:de:c2:8d:92:65:1c:b4:84:0f:58:dd:3c:ba:d5:f7:cb:ee:
         bd:1f:a0:22:f0:d6:8f:ad:43:ff:dd:18:db:fc:33:5a:e8:bc:
         23:69:d4:af:5e:1b:ab:cf:55:e1:39:a1:b4:2d:6c:0b:61:d8:
         f2:0e:f8:c3:92:ed:d4:cd:7a:99:b4:e1:26:6a:e0:ed:82:6f:
         ed:40:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:07:20 2025 by rpki-client