Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
File:                     BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json)
Hash identifier:          qnxZ54l9UZudnlB3MmEn0xEX/pgWOpo1ZnXPXIXJyBQ=
Subject key identifier:   70:12:BA:88:0D:81:B4:35:EA:91:EA:C1:F5:A6:12:85:85:D1:56:D5
Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2
Certificate issuer:       /CN=046f364658b64e2bf150d20fc838c364207975e2
Certificate serial:       01976F2BE5108E5B0F57446BC0BCF8DA7857
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
Manifest number:          1591
Signing time:             Sat 14 Jun 2025 16:00:36 +0000
Manifest this update:     Sat 14 Jun 2025 16:00:36 +0000
Manifest next update:     Sun 15 Jun 2025 16:00:36 +0000
Files and hashes:         1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: jcgDmavBgHv5lLHOPNQZqUYhMyWXdeWWiMbf3W97o04=)
                          2: PhqjprJzbWIvvB7osWR9awoye5s.roa (hash: XDqMhieQTxvY+bO6WNn9WVVliXKsbboocVQsGeYD0FA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 12:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2b:e5:10:8e:5b:0f:57:44:6b:c0:bc:f8:da:78:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2
        Validity
            Not Before: Jun 14 16:00:36 2025 GMT
            Not After : Jun 15 16:00:36 2025 GMT
        Subject: CN=7012ba880d81b435ea91eac1f5a6128585d156d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:29:aa:0d:14:71:8a:96:a3:aa:c2:d9:9e:62:
                    ea:e8:06:9f:62:75:b8:0c:23:9f:0a:38:a1:a7:b6:
                    e8:da:84:0b:b7:dc:87:f0:8a:7f:2d:81:0b:69:86:
                    31:52:53:19:2b:dd:45:7f:82:8d:70:b7:90:b1:5f:
                    29:b5:5e:a8:4d:bd:98:dc:0f:cb:07:3f:cb:19:be:
                    91:60:68:a9:d7:7f:f4:69:b2:33:25:04:5c:05:c5:
                    13:a5:62:ac:fe:e2:d8:e6:52:fc:ab:1e:e3:e8:35:
                    e7:58:d5:6a:d5:31:9e:f4:a6:f8:ad:8b:8e:b7:ab:
                    48:c4:e5:a4:f9:41:64:ac:89:9a:8d:fa:47:c0:00:
                    96:2c:23:d3:0c:f3:af:51:e0:5b:a9:d3:69:bc:b8:
                    7c:bb:ff:ce:b2:26:31:d0:f1:c0:20:01:0f:0b:55:
                    6a:b8:d9:a9:82:9d:14:dc:e1:9f:ba:a1:b8:5e:36:
                    a5:57:1a:d3:00:68:b5:8c:0a:e9:15:6c:51:83:ae:
                    c4:86:a9:b9:df:d1:14:0f:92:19:e8:42:e0:7d:83:
                    cc:92:7c:b1:8d:1e:3e:b7:e5:cf:d1:6f:86:87:32:
                    47:ca:db:78:39:cc:fa:f6:8d:21:ae:de:f0:99:41:
                    ab:5d:1e:a6:e1:e1:7c:39:fa:50:68:e5:bd:57:e9:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:12:BA:88:0D:81:B4:35:EA:91:EA:C1:F5:A6:12:85:85:D1:56:D5
            X509v3 Authority Key Identifier:
                keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:82:e7:4d:81:fe:54:ca:3b:aa:a4:04:bb:34:70:c3:96:d9:
         fa:ca:bf:46:46:c7:5b:e9:73:76:18:20:0b:c1:5c:55:89:df:
         a4:63:52:25:88:19:29:03:14:92:2d:4c:ea:0c:66:77:d6:61:
         1b:9f:16:2b:a5:3f:de:af:42:24:cb:5e:78:1b:05:7a:ee:d2:
         2a:55:6d:26:2d:4b:a7:00:b8:7d:e6:a7:8b:9c:ed:da:63:57:
         49:ef:d4:ab:86:fe:d9:dc:43:e0:2c:cb:5f:04:eb:ae:5c:2c:
         fc:a0:f1:fe:2f:74:64:cf:3d:ca:18:fc:3d:ea:db:56:69:1e:
         08:04:7c:9a:a6:6a:97:57:33:5a:30:f3:cf:73:3f:0b:d1:25:
         5f:5e:eb:17:87:e9:aa:52:6f:5a:59:68:6e:67:ea:c0:a5:85:
         fa:72:e2:82:48:69:75:e4:1c:fd:50:bf:b2:1b:8a:31:8a:89:
         18:d8:e3:7e:da:49:7d:67:40:32:19:15:f3:20:cd:aa:a2:a6:
         73:78:35:ce:8a:f7:4a:6a:f8:c2:dc:67:77:55:f5:7c:25:27:
         40:d2:5e:ad:94:4c:06:13:df:73:ce:ee:3c:f0:fd:0f:4f:b3:
         71:95:e5:89:99:f0:23:47:f8:19:72:6d:06:14:55:01:9d:d1:
         5d:10:ee:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:22:42 2025 by rpki-client