Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          YFvRniEjxkmLm5MVmdlNSgva1J6RET3hql6aDtsqILE=
Subject key identifier:   95:2A:24:64:63:DF:A4:1E:22:A8:1A:0C:2B:06:90:1E:04:2D:A4:05
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       01987B9C1A12710BA0FE9E15DE886880C433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1253
Signing time:             Tue 05 Aug 2025 19:01:24 +0000
Manifest this update:     Tue 05 Aug 2025 19:01:24 +0000
Manifest next update:     Wed 06 Aug 2025 19:01:24 +0000
Files and hashes:         1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
                          2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: Ve9mRFRog3YTHcIHkeZvW8YEUk6AqxF9qeJHHs0l4+w=)
                          3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
                          4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:9c:1a:12:71:0b:a0:fe:9e:15:de:88:68:80:c4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Aug  5 19:01:24 2025 GMT
            Not After : Aug  6 19:01:24 2025 GMT
        Subject: CN=952a246463dfa41e22a81a0c2b06901e042da405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:7f:4d:2c:3c:c8:7d:fd:dd:8e:2d:8c:4e:
                    0e:1a:22:4e:2f:62:1a:3a:17:a8:9e:e7:51:26:dd:
                    b0:e4:4a:e7:ff:16:03:39:57:5d:de:28:ec:85:82:
                    ff:b6:c8:cd:74:a9:ca:f3:53:80:3a:55:67:17:76:
                    35:51:65:9e:05:1b:3b:90:7d:57:34:fb:e4:f5:22:
                    c3:27:4d:6f:c3:84:77:aa:28:c9:a0:07:50:5d:ce:
                    8a:d9:48:4f:a6:4f:03:61:c3:01:0e:99:3a:24:0f:
                    b6:8d:fe:05:08:7c:c8:2a:d9:12:b3:15:d1:1c:3a:
                    b0:b6:30:61:82:d4:32:77:5c:3a:6c:ea:e6:18:ef:
                    bb:ad:80:44:f6:7b:a5:d0:07:ee:15:83:36:77:52:
                    93:ac:25:8f:7e:c5:3b:85:e8:3e:cc:37:d3:8f:ba:
                    62:0d:1d:53:4f:ca:dd:fd:31:bd:0d:e0:e4:b1:e1:
                    54:13:e6:1d:cc:2b:02:04:18:09:0e:01:47:ec:d1:
                    b0:e4:45:3d:71:1b:67:99:bc:41:de:d2:2d:00:3c:
                    2a:b3:ab:27:95:e5:cd:68:22:51:27:53:70:30:bc:
                    be:63:24:84:c6:b1:f9:45:33:29:61:58:a9:42:79:
                    1c:7a:88:fd:39:85:f3:4c:29:f4:ef:21:88:a4:4d:
                    fb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2A:24:64:63:DF:A4:1E:22:A8:1A:0C:2B:06:90:1E:04:2D:A4:05
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:70:9f:36:1c:ca:6f:ac:fe:0c:ac:80:3f:80:6c:11:89:12:
         04:5b:06:80:a5:4b:2a:d8:71:8b:85:ae:a4:36:ec:78:38:2a:
         f5:ef:dd:1c:8b:d6:ca:63:33:72:54:bc:e3:92:3d:e3:d7:c5:
         38:4d:83:3a:66:61:04:7f:04:98:0c:33:20:bd:45:ec:a1:95:
         1b:62:11:ff:d1:51:52:7f:7b:75:a3:f5:57:c9:e5:b3:f5:e0:
         06:d5:9c:98:23:eb:0d:7c:54:25:9b:88:d0:df:2d:85:3d:40:
         a1:da:94:2d:a8:c0:86:8a:07:bf:f3:81:b5:75:29:7d:fd:c9:
         03:bb:01:9c:d2:81:d9:1a:35:21:e7:af:bf:9c:50:d5:98:29:
         e4:f5:e2:c1:b2:bb:0c:61:ea:8d:84:14:44:b5:d0:15:3e:3a:
         a9:ab:fe:6b:de:00:f9:3d:30:a7:33:19:9a:3f:1c:75:30:83:
         a5:41:8b:04:79:d3:ac:c2:20:53:b0:ce:06:53:8f:44:ef:88:
         98:d4:ef:22:9d:d8:74:f4:58:d0:8a:50:4f:e4:3f:71:d7:7a:
         5a:bd:44:e0:ff:85:3f:43:8b:ea:d9:f9:85:2e:ea:95:ce:f8:
         92:03:c5:16:51:a7:8a:6c:55:b8:bf:03:f8:2c:bd:7f:d3:4b:
         9e:87:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:09:54 2025 by rpki-client