Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File:                     bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier:          8oGyFjkBUI1iTveIa6Ft2W+5BG6yPzdIO2dzbh6XKWo=
Subject key identifier:   4B:16:2A:38:A2:C7:A6:4B:BD:7F:4A:3F:BF:E7:46:9A:A9:6C:3F:BB
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer:       /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial:       01988DD95AE9D470240D14126AF6959CFDBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number:          1370
Signing time:             Sat 09 Aug 2025 08:01:28 +0000
Manifest this update:     Sat 09 Aug 2025 08:01:28 +0000
Manifest next update:     Sun 10 Aug 2025 08:01:28 +0000
Files and hashes:         1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
                          2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: XbkFCCK93lPKzayb0P6vL6aNpfOWCnjUong6Wsoiudw=)
                          3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
                          4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8d:d9:5a:e9:d4:70:24:0d:14:12:6a:f6:95:9c:fd:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
        Validity
            Not Before: Aug  9 08:01:28 2025 GMT
            Not After : Aug 10 08:01:28 2025 GMT
        Subject: CN=4b162a38a2c7a64bbd7f4a3fbfe7469aa96c3fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:ad:30:a3:77:02:25:3b:5e:b2:5a:d7:d1:
                    8d:66:42:2f:d9:35:36:e8:80:ff:9d:3f:fa:30:88:
                    13:89:d9:43:8c:0e:87:84:5d:c2:af:46:1a:9c:f4:
                    1d:fd:2d:51:6c:50:be:f7:b6:2c:73:4c:ff:62:c4:
                    d1:d3:b8:df:a3:d8:9e:8f:19:b9:ce:e9:c5:51:65:
                    6c:43:30:b3:dc:34:22:c8:10:28:f9:8c:24:b4:74:
                    8d:be:70:12:6d:ff:ff:65:8b:de:1b:c0:6d:4a:89:
                    70:93:97:ae:2a:83:52:49:af:f3:43:0c:22:0a:51:
                    43:b1:f1:5f:ed:39:b8:1f:2b:b1:fc:87:e1:b0:ea:
                    c8:c8:f4:5d:40:8b:81:e3:32:f2:22:55:2e:8d:51:
                    14:aa:cc:27:e4:1a:19:0e:59:d8:dc:67:33:e4:99:
                    25:b3:ad:a7:a2:d0:26:de:2a:35:97:56:56:89:e2:
                    1b:b1:a1:5a:dd:8f:03:d5:91:00:5d:10:f4:ad:49:
                    01:ff:02:91:7b:21:74:5e:a1:ff:63:83:3a:43:4f:
                    61:b1:c0:f0:27:aa:33:04:43:ae:a2:24:b2:aa:7e:
                    bd:20:2c:e4:b0:fe:1a:68:d5:1b:40:49:37:79:80:
                    d4:c8:6a:7d:65:85:9f:cc:68:d7:9a:f8:e1:99:50:
                    fb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:16:2A:38:A2:C7:A6:4B:BD:7F:4A:3F:BF:E7:46:9A:A9:6C:3F:BB
            X509v3 Authority Key Identifier:
                keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:42:42:ba:a2:37:62:9c:5c:49:7b:f4:95:e7:fe:58:87:51:
         54:a4:ff:a8:dd:27:a3:62:0b:b8:86:24:ea:d4:88:08:43:8f:
         fb:df:2f:8f:c8:00:e5:1e:7f:e8:44:ab:4a:21:f3:ac:5d:e9:
         3c:76:0e:a9:a4:48:16:62:3e:99:24:e0:63:21:8b:ab:6d:36:
         a5:c6:ba:49:cf:41:40:c6:98:d9:f3:a2:de:2e:e5:9a:83:d3:
         75:47:8e:d5:95:c7:c2:3e:27:f8:be:f1:33:c2:f7:e8:1b:1e:
         72:d1:2c:82:15:a6:a1:f8:c0:a6:7f:57:35:b9:67:62:95:b1:
         cf:84:cc:54:ea:14:ea:eb:72:09:54:bb:8d:24:51:76:20:23:
         c7:4a:fc:b8:c6:ef:e3:08:f8:5d:c1:96:45:e2:e2:66:c8:40:
         61:41:c9:93:9a:b7:b2:2b:af:54:0c:48:60:5e:e8:9d:a7:74:
         d6:6d:8c:d6:bf:8e:bb:43:9d:28:11:d2:5b:72:7d:3c:b3:5f:
         91:f5:4d:e0:cb:06:6a:71:f6:ef:6e:b0:48:f7:3d:38:a6:7b:
         58:35:ce:ad:a9:2e:00:c3:24:25:2e:69:3d:e6:a8:f3:5d:d4:
         6a:db:1a:f0:bd:3d:dd:d2:62:a3:33:61:01:f8:30:e8:97:d2:
         b1:4b:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:59 2025 by rpki-client