Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File:                     BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier:          qfXOtZqvjRypfdE8sC9rWfh2LFJCGXvw/GcSKZKvHEQ=
Subject key identifier:   69:15:E5:5E:3E:94:D6:E9:F9:FE:E2:F7:5F:26:F9:E1:07:C5:8E:CE
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer:       /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial:       01988BB398EBB231E73E5532BBF968A332E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number:          29
Signing time:             Fri 08 Aug 2025 22:00:59 +0000
Manifest this update:     Fri 08 Aug 2025 22:00:59 +0000
Manifest next update:     Sat 09 Aug 2025 22:00:59 +0000
Files and hashes:         1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: fZJE8rRt4cCubeWWx0Gq6yp/PLOwJT3SUS1wpBKw2BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:b3:98:eb:b2:31:e7:3e:55:32:bb:f9:68:a3:32:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
        Validity
            Not Before: Aug  8 22:00:59 2025 GMT
            Not After : Aug  9 22:00:59 2025 GMT
        Subject: CN=6915e55e3e94d6e9f9fee2f75f26f9e107c58ece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c6:48:ce:ab:1b:e7:f3:d7:f1:b9:3d:81:35:
                    c6:20:ac:33:21:27:39:56:35:37:5f:6d:7f:d6:3a:
                    d6:d4:77:d3:3f:2a:61:bf:a4:a5:4c:a2:d1:33:24:
                    fe:1d:15:c5:90:e7:c7:b0:db:2a:3b:36:56:d8:40:
                    2b:0d:ba:d4:cd:23:41:2e:46:c8:20:24:47:18:ac:
                    32:77:f4:29:43:44:ae:b2:d7:6f:47:25:e7:de:e2:
                    0d:e9:ad:3c:b3:87:04:1d:ff:41:eb:92:ea:1f:7b:
                    30:54:5c:c8:8e:29:45:62:01:fc:75:c2:07:90:fd:
                    d7:4a:3e:21:d5:ef:0c:d8:3e:a5:d1:a0:4b:25:c9:
                    f6:f8:f6:4c:3e:0a:04:42:35:14:8e:3e:f2:85:d6:
                    44:0b:b3:63:ea:61:ab:71:b1:c3:e7:31:bd:37:ea:
                    4b:6e:b1:02:36:54:34:61:85:d4:44:2f:29:1d:28:
                    88:0e:87:25:47:5c:ed:e1:83:de:64:41:e1:5b:67:
                    a4:56:20:67:05:8a:fc:c1:04:67:7d:41:5e:07:ab:
                    7b:35:77:52:71:10:2a:a5:42:4b:2e:9f:84:72:d6:
                    de:c1:eb:fc:80:c4:6d:1d:3e:ae:e7:1e:7a:ba:e3:
                    20:03:6b:ff:a7:80:9b:95:29:ea:f0:a5:4f:07:11:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:15:E5:5E:3E:94:D6:E9:F9:FE:E2:F7:5F:26:F9:E1:07:C5:8E:CE
            X509v3 Authority Key Identifier:
                keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:d3:a9:cf:e1:a3:1b:0a:b1:fb:c1:f9:29:f4:d6:9e:39:
         f8:f1:29:a8:96:f6:d3:a1:a8:9b:e5:ab:91:49:4f:53:c1:d6:
         76:7b:90:40:5f:33:e2:b8:57:81:11:3e:fb:be:82:77:9c:2b:
         85:5d:06:23:1a:bc:89:00:b2:00:d6:3b:fd:bc:47:1b:e8:5f:
         06:fc:cf:5d:1e:28:7b:08:2f:2c:44:11:e4:3d:ad:f4:e1:de:
         1e:06:01:fb:88:79:38:42:a2:be:d4:10:3f:30:34:24:ac:79:
         58:99:02:0a:12:b2:da:79:3a:c6:b2:59:af:7b:21:bd:36:90:
         ca:af:30:87:71:b3:b4:df:6a:2a:08:c7:05:71:df:08:df:7f:
         df:6b:f6:b9:32:ba:98:66:96:99:c0:7f:dc:fc:ce:fa:8b:8d:
         9b:96:fc:ac:d5:61:0f:b5:91:09:8d:03:9a:05:a4:97:39:61:
         98:17:ed:1a:95:ea:68:85:08:83:35:a4:5d:dd:a2:5e:e5:3b:
         e3:7b:cc:ae:73:7b:13:0d:8c:40:c0:50:3d:d7:69:63:00:86:
         fd:a8:f1:97:7b:bd:90:11:f6:05:f3:b9:03:84:2b:77:b0:8d:
         e5:22:eb:8e:59:05:4a:51:1b:c7:91:79:7e:8a:f8:48:2d:24:
         c4:d9:68:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:55 2025 by rpki-client