Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File:                     BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier:          Ra22P+NMaIfDMlnRQfuQ+mTFp8niwbzsZc4o/ItKXLg=
Subject key identifier:   92:B6:D8:77:AC:61:E5:29:F1:13:47:41:19:8A:5A:A9:E0:3E:4C:2B
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer:       /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial:       019873E30AE7809CC3418160C4E9CB213E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 07:01:55 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:55 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:55 +0000
Files and hashes:         1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: wP8XQBQ8+1sJ0cxJFtyywADG5ESAFh5C+sElXXt3iMU=)
                          2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:0a:e7:80:9c:c3:41:81:60:c4:e9:cb:21:3e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
        Validity
            Not Before: Aug  4 07:01:55 2025 GMT
            Not After : Aug  5 07:01:55 2025 GMT
        Subject: CN=92b6d877ac61e529f1134741198a5aa9e03e4c2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:a1:33:09:cf:b1:a9:5a:4a:53:01:87:83:
                    54:94:1b:17:2b:36:ed:09:72:0e:4f:52:73:e8:f7:
                    94:19:dc:fe:ce:7a:8b:ee:e5:bb:e5:33:24:10:b3:
                    26:69:61:65:2c:6f:c9:2d:1c:13:50:e8:fd:b5:af:
                    0b:46:89:06:0f:c2:ec:e0:a0:27:3f:65:df:0d:43:
                    64:1a:02:4c:b7:2f:81:f0:5d:e0:15:26:88:fc:b4:
                    a2:68:01:8c:74:de:c5:bd:9f:16:54:be:92:cd:32:
                    e9:b3:92:bc:c3:16:fd:bf:f5:5a:98:ce:5f:f5:2c:
                    18:69:dc:df:da:e4:bb:10:2d:91:aa:b5:6b:36:2d:
                    9d:bd:8f:c2:80:d5:b3:92:48:be:d2:c9:c0:27:3d:
                    d6:97:79:7e:c5:2f:ea:3b:5f:d7:40:2c:5a:06:5c:
                    8b:20:5e:f8:3a:3c:cf:2e:e3:49:33:c7:c7:39:5f:
                    8a:ed:5e:38:8a:ad:5b:0a:d2:a6:10:67:ef:d8:62:
                    db:5e:b9:3b:89:e0:f9:c0:5e:31:5a:a3:a7:a6:17:
                    59:7e:35:ae:2b:7f:f2:76:8c:07:97:2f:5e:31:4b:
                    af:b8:0a:20:d7:23:f8:99:cb:45:25:f6:9f:8b:11:
                    e0:d8:41:ce:53:31:bb:5b:07:8a:73:3c:4e:1e:03:
                    24:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B6:D8:77:AC:61:E5:29:F1:13:47:41:19:8A:5A:A9:E0:3E:4C:2B
            X509v3 Authority Key Identifier:
                keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:b1:4d:4c:89:3a:69:ec:ea:8f:8a:a4:53:be:95:4b:6c:
         cb:a7:3e:07:d2:05:da:ac:6d:54:07:0d:c9:f9:f6:54:e8:67:
         f0:d8:79:37:99:b3:72:27:2a:bf:38:ce:da:e9:36:22:8b:c1:
         7b:19:9f:c0:c6:9d:41:e4:b2:4e:fe:79:8f:29:fa:ca:2f:ef:
         89:68:cc:ed:fb:af:9a:7e:c7:d0:91:db:eb:b5:dc:76:24:2e:
         77:cf:7e:f8:6f:4c:1b:22:92:41:aa:be:e9:e0:22:17:a5:1d:
         75:8b:85:84:b1:fa:c1:43:4a:f4:e5:65:0c:22:78:35:f4:bc:
         8d:05:44:58:b9:3a:00:d9:71:29:b6:c1:21:4a:96:97:f1:65:
         80:d5:17:9d:5f:af:e6:87:06:c2:7f:32:c1:44:8c:05:3a:a5:
         83:63:bd:18:8a:c8:95:d2:45:10:2c:ab:ca:de:22:0e:bb:18:
         a8:74:9c:e8:a7:e8:6f:49:cd:bb:7b:4f:a3:35:84:ec:4a:92:
         57:01:60:c4:83:94:a2:23:32:bd:ff:e3:43:a1:d5:53:5a:b8:
         c1:28:94:02:4e:aa:0d:d6:17:26:6b:7a:1e:4c:52:48:9e:ea:
         93:08:fe:53:55:83:49:b8:5a:f3:80:ed:35:54:8f:41:fc:41:
         13:ae:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:36 2025 by rpki-client