Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File:                     bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier:          6torQhMxi/bsNVPQRavO/t+ttXz6KQg/G5VTKn2YP8E=
Subject key identifier:   92:C6:C3:C7:C7:5D:83:20:A8:0F:12:1A:FB:14:22:86:60:5C:95:AB
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer:       /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial:       019896DC41E8145755B5AF0FEDF7412BE06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number:          162A
Signing time:             Mon 11 Aug 2025 02:01:13 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:13 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:13 +0000
Files and hashes:         1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
                          2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: 8Qp3bQwiswUJukH783Xuahiif1U9tGw4El+5wOIaQ6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:41:e8:14:57:55:b5:af:0f:ed:f7:41:2b:e0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
        Validity
            Not Before: Aug 11 02:01:13 2025 GMT
            Not After : Aug 12 02:01:13 2025 GMT
        Subject: CN=92c6c3c7c75d8320a80f121afb142286605c95ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:ba:de:08:8d:69:5c:64:fa:b8:af:f3:a2:
                    a3:a1:e6:ac:8b:08:4d:c5:57:25:41:5d:c1:7c:87:
                    71:76:c6:a0:d6:41:53:78:0e:25:e1:fa:98:85:75:
                    5f:6b:1a:05:b5:a5:b9:ba:c4:0b:81:e7:bd:8c:93:
                    9e:7d:ac:51:10:1e:66:95:09:75:0d:94:c1:db:e1:
                    09:6f:2e:fe:6c:9a:dc:a0:fc:37:a4:f8:6a:02:69:
                    09:85:c8:5b:b3:d1:d3:07:39:ab:03:c3:c2:ba:e4:
                    8b:9a:7a:b6:6c:b8:1d:eb:26:4d:3a:46:1d:49:d1:
                    87:e3:59:57:2d:fa:2c:cf:1b:43:c7:98:be:a2:0a:
                    5c:e3:4f:cf:68:97:e1:0a:3a:8b:93:4b:ad:94:27:
                    ed:6f:49:ff:ed:9b:fa:71:5d:a9:a4:21:4c:89:ed:
                    0a:f1:2d:1a:a8:4e:04:a9:28:45:b4:e8:1c:09:b9:
                    c3:6a:83:e0:81:ab:8a:76:0c:33:6c:01:f4:02:9e:
                    83:9a:6a:f4:aa:a3:5b:c2:42:43:e6:44:3f:3e:8a:
                    d6:59:59:00:be:da:cd:57:59:56:5c:db:1d:9d:b3:
                    f4:d9:2c:c7:52:dc:ca:4f:3a:7c:2b:9a:ec:ee:61:
                    77:96:ef:ac:92:fc:ac:d7:db:0a:5b:b3:7d:92:31:
                    a1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C6:C3:C7:C7:5D:83:20:A8:0F:12:1A:FB:14:22:86:60:5C:95:AB
            X509v3 Authority Key Identifier:
                keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:33:62:1a:4c:f9:25:86:aa:81:ff:1a:0a:0a:2a:3b:b7:82:
         a0:11:f6:9c:f9:1b:35:dd:d2:59:1a:df:17:c4:9a:08:9f:ab:
         16:23:f4:d9:51:b6:01:02:ac:e4:ca:09:19:d8:20:72:a4:8c:
         6a:ed:0f:10:ad:1e:e7:4c:7c:07:ef:b4:0a:89:aa:06:1c:4b:
         cf:d3:5a:d4:50:80:ba:e4:60:a8:ee:a2:7b:0d:c3:f4:12:59:
         70:73:f5:99:90:90:21:9f:c3:bc:8f:cb:b1:00:b5:e4:dc:c4:
         c9:33:00:51:b0:54:fe:e3:63:b1:e6:1e:9b:0c:21:11:1f:f9:
         de:6e:b0:72:ca:17:c6:72:61:dd:d5:69:7e:57:aa:4f:d5:e7:
         61:5e:72:d9:e3:e0:02:b5:0e:09:d0:09:48:fa:98:f5:99:5c:
         4b:ee:44:17:ca:5a:16:94:14:88:a4:21:09:93:85:d3:f9:50:
         85:ce:6b:da:69:52:c1:eb:67:f4:bc:37:bd:d2:ee:21:08:c4:
         d3:2d:08:7b:f8:0f:2a:9f:95:11:27:61:6a:99:79:2d:77:db:
         2a:cd:38:d0:e9:c7:d3:2a:ee:18:2d:ad:a5:b4:a5:20:33:45:
         75:73:20:cc:a9:c6:25:1d:cf:22:41:fb:b1:64:a7:32:c4:9a:
         9b:a0:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:59 2025 by rpki-client