Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File:                     BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier:          rPR4n8Lu/n+Qtcjz3ILSlOZBN13C752J0IZ8pTVFLS4=
Subject key identifier:   DE:A8:0F:37:B8:E9:73:D0:4B:41:EB:5C:BA:A9:64:35:0A:5B:DA:55
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer:       /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial:       019872CF5900BE644643471EEE0C4FD0E1BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number:          15AC
Signing time:             Mon 04 Aug 2025 02:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:48 +0000
Files and hashes:         1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: IzPSvKhbHICl6r3Jc9W+kvImXJf3GEaoETsribliJvU=)
                          2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:59:00:be:64:46:43:47:1e:ee:0c:4f:d0:e1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
        Validity
            Not Before: Aug  4 02:00:48 2025 GMT
            Not After : Aug  5 02:00:48 2025 GMT
        Subject: CN=dea80f37b8e973d04b41eb5cbaa964350a5bda55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:58:c9:2f:26:3d:c5:f5:28:ba:6f:36:35:
                    a1:10:38:51:a5:51:6e:29:5c:9d:98:04:c1:43:57:
                    17:92:ae:39:be:43:85:89:bd:73:28:5e:f5:3c:d8:
                    93:55:12:97:4f:c0:9f:61:18:0b:fb:78:c8:24:04:
                    c5:11:f4:b9:70:d2:f5:97:49:4a:bd:91:b5:08:b0:
                    c8:70:94:3d:85:d0:13:7e:f2:fa:4a:e4:04:c1:0e:
                    12:a3:b1:ca:a6:16:29:bd:f6:cb:69:be:b2:98:28:
                    b6:40:6a:2c:dc:c2:7c:26:d1:a0:70:41:35:3f:d4:
                    8f:b2:23:a3:30:5a:f8:18:7a:82:a1:a6:b4:64:2d:
                    47:61:3f:8e:f9:ae:78:66:e0:c6:24:bb:df:f4:41:
                    26:6d:61:ec:c8:f2:3c:4d:36:c5:24:c8:6c:9a:57:
                    6e:dc:b2:88:14:ff:74:33:e2:00:60:4e:92:dc:da:
                    b8:6d:88:bc:3d:01:08:8a:de:69:37:a8:b0:c9:03:
                    43:4f:51:e3:e9:42:7a:f2:d6:d8:a4:a9:76:27:69:
                    2d:e4:cb:b9:78:f9:07:47:99:e2:2e:9f:1d:9f:50:
                    56:b0:3a:aa:ba:6a:d1:8c:80:3a:42:81:85:70:a4:
                    ca:f2:83:83:89:8d:94:60:71:b3:87:6c:b7:61:2b:
                    4a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A8:0F:37:B8:E9:73:D0:4B:41:EB:5C:BA:A9:64:35:0A:5B:DA:55
            X509v3 Authority Key Identifier:
                keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:8a:44:90:33:1f:e8:19:e4:2a:0d:b8:9a:30:52:4b:83:7a:
         36:3f:c5:86:8f:8f:fe:8e:ed:85:69:eb:05:5a:4f:e6:d4:df:
         98:7b:51:77:07:7f:d5:46:14:64:36:26:8d:92:85:87:fd:1f:
         ca:02:a2:06:fe:f2:5f:17:f6:23:9b:aa:e2:ca:8a:93:5a:c5:
         7f:ff:63:e5:7e:1e:6f:f2:5f:11:9c:bb:29:10:0b:a4:7e:26:
         28:d3:af:b8:16:4a:1a:f9:91:23:be:25:0f:f5:ca:7e:cf:be:
         18:44:25:de:80:6e:3d:e6:c3:3c:42:c7:fe:00:d9:9a:c1:51:
         91:46:1b:93:77:1e:8d:97:6c:f1:2f:b2:a7:02:14:5b:35:61:
         b8:e9:eb:28:3e:60:2f:0c:0a:98:51:2f:69:6b:63:73:9b:c0:
         d7:23:61:ad:8b:c9:9f:e6:39:0f:93:45:df:f0:e6:93:b8:a9:
         1b:29:08:ba:ca:ae:b8:79:95:43:55:03:22:da:71:d7:c7:e7:
         4a:3a:83:dc:02:e2:cd:26:a7:a3:75:c1:a0:f5:97:09:b8:a3:
         b0:e7:d5:42:c1:5b:3c:d5:76:ac:ce:3e:14:bb:39:7c:a2:01:
         34:74:28:80:d6:30:6a:3f:6f:05:0e:07:2a:bb:e9:6d:69:02:
         b8:31:e2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:28 2025 by rpki-client