Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File:                     BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier:          NJWUz9+3LZBoB62o5qZ2K0hey2t+8KUgvTsXOmVgVsQ=
Subject key identifier:   81:3F:FA:42:B0:A6:BD:87:70:76:3E:50:06:58:D2:2A:38:58:88:38
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer:       /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial:       0198733D55B3C268EF3A5ADB5CA9C51FD1C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number:          045F
Signing time:             Mon 04 Aug 2025 04:00:56 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:56 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:56 +0000
Files and hashes:         1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: jEUhs2AhpjHZg04jCxPEt194okcptUtgjB2BPcw6szM=)
                          2: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)
                          3: pudWPRPK-Wa6m4Pmer93cIZQrII.roa (hash: o79B3cprgcfu6XLm8f0k9H9gQI2spOpkuG4dS9wCxDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:55:b3:c2:68:ef:3a:5a:db:5c:a9:c5:1f:d1:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
        Validity
            Not Before: Aug  4 04:00:56 2025 GMT
            Not After : Aug  5 04:00:56 2025 GMT
        Subject: CN=813ffa42b0a6bd8770763e500658d22a38588838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:dd:10:00:d7:20:4f:a7:22:2f:93:a5:02:
                    ff:ee:b5:48:98:ae:17:a3:fc:9a:91:6c:08:6e:71:
                    63:11:a0:1d:b1:3e:dd:51:92:71:d1:bd:f3:4c:fd:
                    a3:71:49:20:2f:55:5e:22:45:27:29:56:e9:12:2b:
                    28:0d:86:62:91:f6:26:9a:a9:38:50:cc:a7:c6:79:
                    a6:29:d7:ad:f7:dc:46:6e:0c:2f:b7:c3:b0:95:26:
                    be:eb:9a:7d:44:0d:56:e3:54:8b:d6:2c:4e:f4:e3:
                    a0:1a:d2:d3:19:25:a9:c6:11:ee:df:40:28:f2:be:
                    99:bf:76:cc:aa:9d:1f:77:bf:38:0e:61:95:b3:43:
                    eb:84:64:ea:ee:6d:49:0c:15:dd:df:d3:ca:2b:c3:
                    f7:89:a7:df:89:c2:85:e9:4a:af:e8:f8:10:ea:8a:
                    ce:2a:4b:44:e1:47:4d:94:cc:45:f0:df:b2:56:5a:
                    ec:20:c7:95:fa:92:1b:c8:43:2e:36:67:5e:51:b6:
                    d6:f4:f6:5f:81:0e:83:3a:d3:08:2f:66:6a:75:ed:
                    85:f0:bf:19:93:06:74:28:e5:71:ab:5c:80:d8:5c:
                    37:93:90:25:72:0c:83:3a:33:f3:8e:38:fd:35:d3:
                    3e:f0:3c:5a:e9:d0:58:78:08:b6:62:d0:30:da:e6:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3F:FA:42:B0:A6:BD:87:70:76:3E:50:06:58:D2:2A:38:58:88:38
            X509v3 Authority Key Identifier:
                keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ac:33:b4:2f:f5:7e:b7:44:46:c0:01:0c:b0:5e:04:61:f0:
         b2:72:9e:db:b1:0e:77:da:97:25:64:ca:9c:6e:9a:13:38:29:
         0e:27:89:6b:5c:d1:d1:e9:69:a9:b8:76:2a:dc:62:1b:0b:9f:
         10:ab:5f:16:ca:ab:df:6b:3c:e4:b9:35:33:a3:78:b2:73:d4:
         51:b9:89:6d:29:cf:2e:f2:cc:6c:26:c7:c0:73:16:93:08:8b:
         ea:7f:a3:22:3d:5e:e6:5c:48:e2:96:dd:07:fb:9a:a5:b5:f3:
         ef:b7:6e:52:c0:07:8e:57:e1:79:7c:a0:71:26:6c:18:70:3f:
         6d:1b:ff:8e:4b:62:da:0d:28:39:2e:a8:e8:23:a2:de:b2:4f:
         cb:b9:30:3c:e2:b4:a1:eb:17:02:d2:46:2f:1c:90:49:9c:98:
         fe:9a:45:5b:40:cf:4c:e0:94:cd:bc:9c:a6:b1:9c:44:af:55:
         be:9f:c1:44:7f:33:46:de:f7:e3:3b:ad:7b:2d:f7:80:c2:98:
         71:64:07:c2:29:35:db:e4:6b:21:eb:8d:ca:df:5d:16:36:af:
         4d:d4:cb:a6:f9:54:a7:72:5b:56:19:3a:a4:54:84:15:34:52:
         95:a7:9c:2a:fa:f8:4f:76:b7:bd:35:0b:09:0f:56:08:da:b1:
         fa:e9:29:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzPVWzwmjvOlrbXKnFH9HIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmFjYWM3MTMxMjM4NTZkNGFlNmMxNjA1NDYwMjY4NGRm
ZDA3Y2IwHhcNMjUwODA0MDQwMDU2WhcNMjUwODA1MDQwMDU2WjAzMTEwLwYDVQQD
Eyg4MTNmZmE0MmIwYTZiZDg3NzA3NjNlNTAwNjU4ZDIyYTM4NTg4ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M/dEADXIE+nIi+TpQL/7rVImK4X
o/yakWwIbnFjEaAdsT7dUZJx0b3zTP2jcUkgL1VeIkUnKVbpEisoDYZikfYmmqk4
UMynxnmmKdet99xGbgwvt8OwlSa+65p9RA1W41SL1ixO9OOgGtLTGSWpxhHu30Ao
8r6Zv3bMqp0fd784DmGVs0PrhGTq7m1JDBXd39PKK8P3iafficKF6Uqv6PgQ6orO
KktE4UdNlMxF8N+yVlrsIMeV+pIbyEMuNmdeUbbW9PZfgQ6DOtMIL2Zqde2F8L8Z
kwZ0KOVxq1yA2Fw3k5AlcgyDOjPzjjj9NdM+8Dxa6dBYeAi2YtAw2uYCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE/+kKwpr2HcHY+UAZY0io4WIg4MB8GA1UdIwQY
MBaAFARqyscTEjhW1K5sFgVGAmhN/QfLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgt
ZTZlOTI4Y2U1MzRmLzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MTg2ZTQtYTJhMC00YmRhLWJjODgtZTZlOTI4Y2U1MzRm
LzEvQkdyS3h4TVNPRmJVcm13V0JVWUNhRTM5QjhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiawztC/1
frdERsABDLBeBGHwsnKe27EOd9qXJWTKnG6aEzgpDieJa1zR0elpqbh2KtxiGwuf
EKtfFsqr32s85Lk1M6N4snPUUbmJbSnPLvLMbCbHwHMWkwiL6n+jIj1e5lxI4pbd
B/uapbXz77duUsAHjlfheXygcSZsGHA/bRv/jkti2g0oOS6o6COi3rJPy7kwPOK0
oesXAtJGLxyQSZyY/ppFW0DPTOCUzbycprGcRK9Vvp/BRH8zRt734zutey33gMKY
cWQHwik12+RrIeuNyt9dFjavTdTLpvlUp3JbVhk6pFSEFTRSlaecKvr4T3a3vTUL
CQ9WCNqx+ukpsw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:28 2025 by rpki-client