Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          M7v4H5wfU+/vDRzsp5DkZmyt99pjXTUNKwx/uiL3mLg=
Subject key identifier:   65:96:90:67:B1:DB:F2:E4:A0:58:0A:F1:FA:9B:DC:9D:E2:86:16:B5
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       01988279A6CD0CDC7CE4C2DE5776DF5BBAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          0702
Signing time:             Thu 07 Aug 2025 03:01:07 +0000
Manifest this update:     Thu 07 Aug 2025 03:01:07 +0000
Manifest next update:     Fri 08 Aug 2025 03:01:07 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: zAxdi5Fy7VGeyH5A/1g9ND10/0NhqF+nAVpkITL7T4o=)
                          2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:79:a6:cd:0c:dc:7c:e4:c2:de:57:76:df:5b:ba:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Aug  7 03:01:07 2025 GMT
            Not After : Aug  8 03:01:07 2025 GMT
        Subject: CN=65969067b1dbf2e4a0580af1fa9bdc9de28616b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:19:8a:6b:f4:a3:da:4f:74:6e:0f:7c:d9:
                    e2:85:bf:7a:23:0d:8e:63:be:3c:65:90:6c:a8:c9:
                    5a:66:3e:2b:7f:95:f5:73:37:bb:50:db:56:4e:52:
                    0e:f9:d9:ac:59:eb:cf:d9:6b:c6:0b:2c:eb:ac:dd:
                    5a:30:67:53:e8:7b:90:83:7b:03:59:91:d2:5f:27:
                    c1:e5:4f:3c:d2:79:f6:7e:dc:0a:12:81:10:41:b3:
                    e2:9d:b5:2f:98:ec:fb:cc:48:d3:46:36:a5:d9:f2:
                    2c:93:e5:57:d4:88:2d:2a:50:a8:49:b6:18:c5:db:
                    27:22:22:29:a0:a8:97:5b:21:6d:88:25:0f:54:5e:
                    fb:e4:0d:61:81:32:cd:18:52:ee:0c:07:62:7f:55:
                    a1:4d:87:3b:f1:d5:97:08:8b:44:83:c2:df:77:2c:
                    97:fa:28:9d:9c:5c:32:4c:14:18:18:34:e7:c3:7d:
                    91:19:2b:9e:f5:b9:72:a0:57:d7:00:61:b1:d8:c6:
                    bc:1e:d0:19:3e:d7:37:a7:91:51:2e:26:e7:d8:12:
                    0d:e6:58:32:9e:cf:e9:7d:80:c3:be:c9:de:2e:8c:
                    a4:f5:58:0a:11:39:10:45:d7:2c:87:41:7c:89:75:
                    35:f9:0f:00:7e:e9:68:bc:f8:9b:46:46:cb:0b:9e:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:96:90:67:B1:DB:F2:E4:A0:58:0A:F1:FA:9B:DC:9D:E2:86:16:B5
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:4c:a2:e3:1b:69:90:23:3f:d1:84:52:f4:c4:ec:1d:4a:53:
         f1:9e:ce:42:04:e4:bd:69:8e:03:6e:75:73:41:9f:9a:1f:cb:
         b6:97:22:ef:9c:79:24:b1:c9:4b:a1:00:31:38:70:f5:36:d8:
         8f:b1:d3:06:42:91:5d:fa:8b:d8:d8:ee:20:72:d7:12:7e:54:
         6d:35:6b:dd:8d:e9:84:45:f3:05:df:1d:80:cd:86:91:6f:ab:
         ff:e1:60:c5:c4:0a:73:38:b8:a3:9b:6a:0d:87:60:e3:28:ac:
         1a:80:b1:de:d1:e7:c9:91:3c:b0:7d:c9:e9:ef:36:08:7d:55:
         9f:b5:ff:13:f1:f5:b1:fa:e5:e3:ea:b2:ae:ee:ed:25:c4:f4:
         de:7b:4d:d9:b5:4e:60:32:0e:01:e9:d0:a3:6f:77:ed:50:56:
         75:f7:0e:68:6a:01:fd:4a:a2:99:38:1a:84:d3:70:0f:d6:78:
         6d:79:08:63:e5:17:b2:49:b8:d5:ff:44:c2:d6:39:90:9a:8e:
         8a:52:e0:52:6d:f7:14:1d:4d:f9:cf:1b:8f:e5:99:e3:48:b6:
         75:bf:bf:a5:bf:25:79:11:64:a3:87:b2:f2:79:a2:d1:2e:c3:
         d4:d6:3c:0a:b0:80:4e:d4:60:a2:03:97:40:23:c6:b4:f0:e4:
         df:3b:48:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:17:29 2025 by rpki-client