Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
File:                     BTPwgeV70J2rsG4334Vp61JCD3Y.mft (raw, json)
Hash identifier:          lzyOVdcpAFUVz1EuqUoyFjQS+Jf/goSyJntqkiQdxWg=
Subject key identifier:   69:6E:B5:7D:4C:77:67:9B:33:3B:A7:21:B9:FD:08:F8:5D:1D:1E:13
Authority key identifier: 05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76
Certificate issuer:       /CN=0533f081e57bd09dabb06e37df8569eb52420f76
Certificate serial:       019873E34D1898AA82C5982A54C8C3663AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
Manifest number:          14C7
Signing time:             Mon 04 Aug 2025 07:02:12 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:12 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:12 +0000
Files and hashes:         1: BTPwgeV70J2rsG4334Vp61JCD3Y.crl (hash: 7CBXYSMZTa6QYdr19XYKISVfv+ardJGMWZgmerEp96c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:4d:18:98:aa:82:c5:98:2a:54:c8:c3:66:3a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533f081e57bd09dabb06e37df8569eb52420f76
        Validity
            Not Before: Aug  4 07:02:12 2025 GMT
            Not After : Aug  5 07:02:12 2025 GMT
        Subject: CN=696eb57d4c77679b333ba721b9fd08f85d1d1e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fe:c8:b5:8a:d2:6e:84:0b:f0:ee:e1:3d:a0:
                    76:6b:ae:2b:4c:61:01:4b:40:79:7f:22:85:0a:0e:
                    0c:c5:f7:c8:4e:82:fa:fb:c8:2b:8f:20:54:fb:27:
                    54:59:69:ce:c9:68:cd:62:f2:2d:64:16:1e:b3:80:
                    53:25:5f:e9:4a:13:4f:be:c3:14:04:aa:99:9d:84:
                    93:c5:15:1b:e2:14:4a:84:d8:6c:36:fc:2e:7f:fe:
                    08:5e:ad:f0:04:fa:94:2a:b8:52:5f:72:45:8a:a8:
                    f8:05:c9:1f:4c:4a:9d:47:13:8f:1d:f6:7f:6a:b5:
                    1e:3f:07:f5:69:05:22:9d:a1:1b:3f:b6:e8:88:dd:
                    02:ac:8f:0c:c5:2e:d6:18:2b:19:8c:e3:a9:e3:f3:
                    ed:43:fd:67:58:96:f8:b3:b0:4d:10:e2:fc:cf:a2:
                    b9:9d:c7:f7:87:4b:da:c1:12:29:c2:7a:02:26:43:
                    60:c4:a2:34:f4:d8:cb:27:be:12:12:61:d0:cc:cf:
                    df:d9:3d:49:78:0b:47:3e:43:42:b2:42:39:3c:64:
                    44:31:12:a4:02:69:92:85:bc:de:28:ce:b6:38:5f:
                    32:c4:f8:f1:5a:a6:93:2f:38:9a:4c:c9:08:33:01:
                    0b:1a:e0:25:de:99:55:d8:1a:a6:11:d1:75:ad:10:
                    37:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6E:B5:7D:4C:77:67:9B:33:3B:A7:21:B9:FD:08:F8:5D:1D:1E:13
            X509v3 Authority Key Identifier:
                keyid:05:33:F0:81:E5:7B:D0:9D:AB:B0:6E:37:DF:85:69:EB:52:42:0F:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTPwgeV70J2rsG4334Vp61JCD3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/975cef-4103-4cf7-bffe-062f2c6a0ab2/1/BTPwgeV70J2rsG4334Vp61JCD3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ec:04:d2:9a:6f:ba:9b:26:ed:a7:56:96:0c:15:d3:b6:e2:
         e4:42:3c:9f:c8:08:d3:81:65:3d:ec:4a:2d:df:1c:cb:c4:db:
         cc:7c:9c:f8:2e:91:6e:bd:fa:26:b4:f9:5f:90:cd:76:05:6c:
         cf:cc:41:e1:fd:51:55:44:11:37:7f:ba:89:ec:3f:a6:9c:3a:
         5a:fd:9d:ff:9b:15:c9:8e:c7:db:97:0b:c9:59:c6:e4:0b:73:
         7a:09:ff:94:f6:28:34:94:57:fb:52:00:3f:06:07:47:4e:f8:
         46:78:0c:de:4f:17:3a:93:6c:dc:21:66:68:5c:55:f7:a4:92:
         82:37:d1:79:85:b2:f9:6a:5d:c7:85:a5:09:81:b9:52:23:9f:
         f6:1e:c8:a5:18:a5:ae:8b:4a:b6:37:23:6e:93:ff:3b:88:9f:
         11:30:8c:0f:6e:8f:62:04:8b:bd:6c:83:aa:ff:8a:00:46:1c:
         2b:7f:50:55:a6:77:2d:5d:16:87:14:00:8f:78:ae:98:6d:d7:
         54:c9:3f:01:5f:42:c3:83:e8:82:a8:12:a8:de:4e:a5:86:8e:
         88:80:53:a7:eb:03:11:ff:e6:19:97:2f:d5:e1:5f:78:7f:b7:
         87:19:dd:3d:cd:6e:d8:63:82:52:2e:b4:4c:94:f7:01:fa:fa:
         4c:b2:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:29 2025 by rpki-client