Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          /A77uOXFKz4BgRKaPS//pB+Iwk413X6Cc/o9J/91Bis=
Subject key identifier:   A1:86:D8:57:D3:1C:A5:5C:E7:7D:D4:08:E0:BD:C4:16:A9:C3:50:DD
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       019A5187770F40B532748CAE0534E668C638
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          1710
Signing time:             Wed 05 Nov 2025 01:00:23 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:23 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:23 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: FndsW8CpNILIZPwAAJKqKiw6Np9Ww/el4jTTh+DR5LQ=)
                          2: qxAUvip_8lZbKoAfeyu3yfK1MRA.roa (hash: Wv+fjRl0zo+z70zGiW88GBq2MX8dxKNwzn9322Y6qM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:77:0f:40:b5:32:74:8c:ae:05:34:e6:68:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: Nov  5 01:00:23 2025 GMT
            Not After : Nov  6 01:00:23 2025 GMT
        Subject: CN=a186d857d31ca55ce77dd408e0bdc416a9c350dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ba:69:32:00:5d:e9:e3:5d:e8:0f:eb:ad:1c:
                    d4:94:23:e0:6a:71:a9:ba:35:3f:ad:37:ab:7d:da:
                    ca:97:7a:74:b8:8e:b4:99:50:be:2c:e0:96:03:d0:
                    42:af:ee:98:e0:3a:31:ab:22:0f:14:4d:5e:eb:de:
                    72:be:6e:c3:ce:14:f1:7f:9b:7b:c5:ff:e0:1d:b3:
                    ea:d0:93:24:b5:2d:98:60:07:f3:fb:84:12:fe:bb:
                    7f:8e:e7:7c:2c:fc:d8:ec:4a:f5:1e:f2:2e:1e:d6:
                    56:48:a7:67:95:c7:4b:c2:d4:d6:e2:76:24:7b:05:
                    d8:ca:d0:e5:77:a6:ae:b2:4c:90:91:54:0a:aa:0a:
                    d4:5b:13:df:5a:d9:a5:2f:24:a0:08:d7:e4:a2:76:
                    43:0b:99:93:02:85:8d:74:3a:12:37:e3:ca:87:12:
                    49:69:54:47:43:fe:8a:96:0a:68:76:86:cc:b4:dd:
                    cb:c3:ec:2f:93:fe:17:bc:24:47:08:ee:0d:40:e7:
                    52:36:e2:1e:ec:69:64:50:cf:d5:54:a5:44:37:14:
                    ad:6c:98:08:a5:a4:30:c4:b0:f9:b7:dc:88:4f:79:
                    57:ca:23:d3:e8:31:c2:6c:f2:6e:0c:a7:21:66:20:
                    c6:30:f1:c8:b6:e0:f1:c8:6a:2f:d9:71:eb:e1:57:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:86:D8:57:D3:1C:A5:5C:E7:7D:D4:08:E0:BD:C4:16:A9:C3:50:DD
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:78:c9:fb:86:91:57:12:1a:6f:3b:ec:68:62:e8:f1:de:f3:
         56:c3:5a:e1:42:b3:92:95:a0:c7:f2:84:44:45:74:9b:38:c5:
         ec:24:c2:85:ce:5a:0e:b7:35:fa:e2:29:ca:93:f5:42:a9:73:
         b4:1d:0d:06:fb:ee:4e:7e:d6:e7:50:02:fe:4e:78:82:5c:fb:
         0c:c7:ab:54:e1:db:d1:58:f9:4f:f6:8b:74:90:fb:a4:77:b5:
         e7:e0:38:61:4a:7d:ee:f9:58:2e:f7:a3:3b:5f:e9:f9:11:b3:
         3d:e1:72:a2:56:0f:12:74:4f:cf:34:b0:01:c5:78:af:b1:10:
         14:87:81:3c:0b:a2:a5:4f:e8:44:25:53:26:48:3d:88:af:c1:
         36:ab:74:c1:94:09:33:ac:9c:88:db:1b:ad:e6:33:e6:87:9a:
         8b:75:70:ad:86:3e:f0:5f:39:aa:81:73:7c:74:c3:8f:a8:25:
         28:cf:b3:0a:11:2b:e7:e1:39:71:0f:e9:d1:e7:9f:5e:47:13:
         83:44:a2:27:fe:88:11:e0:47:c6:f4:c8:c7:1f:14:21:44:23:
         8c:6c:c5:28:79:97:20:0e:5e:6c:a6:02:c4:74:73:ab:b7:e4:
         87:d4:60:50:a6:2d:ee:e5:31:f8:38:f4:49:33:f9:b0:5a:9f:
         7c:ae:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:14 2025 by rpki-client