Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File:                     Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier:          z/lXWpleUgGtYDd0soA9HtB3+53iafS6X1C/b8wIM0k=
Subject key identifier:   F4:C1:A7:FA:35:21:8E:14:6B:3C:42:57:1B:8D:5A:06:C5:0F:A0:AC
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer:       /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial:       01989034EAE117AB782313309A1EA92C85BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number:          15B7
Signing time:             Sat 09 Aug 2025 19:00:43 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:43 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:43 +0000
Files and hashes:         1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: /0/lcvuGAMhJkNMWWMvl1F+0aUNBeUlzd39pHigcuZc=)
                          2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:ea:e1:17:ab:78:23:13:30:9a:1e:a9:2c:85:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
        Validity
            Not Before: Aug  9 19:00:43 2025 GMT
            Not After : Aug 10 19:00:43 2025 GMT
        Subject: CN=f4c1a7fa35218e146b3c42571b8d5a06c50fa0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:0e:01:fc:df:b1:fe:ae:82:6e:a3:dc:87:
                    8e:d3:64:7d:7b:10:01:09:52:ba:78:f5:c7:b5:53:
                    89:c7:a1:34:a8:f5:b5:35:e4:ad:32:88:fa:4f:5f:
                    9a:86:74:91:f5:96:13:16:78:09:37:01:ff:94:e6:
                    53:af:ef:ec:6b:4f:47:15:3c:8e:7f:86:06:ff:d8:
                    37:e9:19:60:b0:99:06:10:51:a8:39:70:ac:d8:34:
                    a3:e3:c6:02:22:6d:5c:96:00:65:f9:df:bc:fa:24:
                    9e:87:67:98:17:18:12:52:c3:9a:dc:14:85:81:1a:
                    5b:53:fb:07:31:09:5c:83:71:03:62:3e:0b:a2:d5:
                    43:df:77:ff:dc:2f:e8:2d:34:d6:41:43:55:92:30:
                    f6:23:9c:b8:27:6b:b8:6d:8f:d4:95:b1:59:5f:bb:
                    5e:d5:21:ea:de:78:a4:c5:56:c6:bd:11:57:0f:10:
                    7e:b0:28:7f:a4:ed:31:57:32:8b:23:51:7b:b0:1a:
                    d1:89:3b:14:64:74:68:5a:98:b1:85:1d:b7:72:a9:
                    16:48:a5:ee:7c:d7:84:42:55:40:d5:02:5c:85:7f:
                    17:d2:42:c0:b0:3a:fa:64:e0:eb:ac:59:78:80:be:
                    0b:d1:93:3c:ac:32:71:46:78:2a:11:32:62:0c:c5:
                    24:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:A7:FA:35:21:8E:14:6B:3C:42:57:1B:8D:5A:06:C5:0F:A0:AC
            X509v3 Authority Key Identifier:
                keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:4e:eb:fa:44:43:14:1f:48:e9:0c:91:3d:2a:f0:8c:3e:
         b6:cf:97:51:50:fa:6e:bb:56:99:9c:b3:54:ce:f5:b2:e7:d9:
         50:f1:fc:ff:76:db:e0:9f:5d:83:48:be:f5:f9:49:47:bc:01:
         78:a2:c0:81:98:c8:9c:67:d9:c6:5c:bd:e6:99:da:97:9f:64:
         03:4d:b3:34:87:dd:6a:f7:0c:c7:df:a0:78:f3:a9:b7:05:a8:
         70:1d:e2:db:0b:79:d6:d4:9b:cc:ff:57:2e:17:8c:0a:7a:ae:
         71:dc:f2:f9:77:cf:7e:6c:9c:97:2d:b5:99:5d:ae:77:e3:09:
         70:e8:dd:c1:d0:e1:0f:17:6c:5f:db:88:04:a2:bd:c6:24:a3:
         c7:46:da:ef:ad:8d:be:c1:e9:36:9a:5e:a9:f1:04:0e:4f:27:
         1a:31:c2:9c:f8:31:13:52:f5:4a:ba:da:f0:30:e3:6c:04:a8:
         2e:37:55:e4:55:83:7c:06:d9:09:b9:39:a9:a1:06:fc:d5:55:
         34:e9:2d:6b:59:2a:09:1d:f8:30:5d:18:c4:3a:cf:5a:50:81:
         35:7b:8a:84:48:11:68:a7:5d:0a:1b:ae:94:09:25:1d:ea:75:
         63:46:83:96:51:d9:63:66:72:17:e9:0d:12:44:33:77:be:9d:
         5f:2d:b3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:49:32 2025 by rpki-client