Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
File:                     BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json)
Hash identifier:          yiz650r9+MXqB1vN2f1sAutstw4yVbR5aMwRrGmmt98=
Subject key identifier:   A2:A2:CC:67:C0:C3:C1:E4:20:34:04:05:C8:26:B5:C1:81:93:31:D5
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Certificate issuer:       /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial:       0198277E1F427BE1A3D11923B43F56F127AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
Manifest number:          1182
Signing time:             Sun 20 Jul 2025 11:00:33 +0000
Manifest this update:     Sun 20 Jul 2025 11:00:33 +0000
Manifest next update:     Mon 21 Jul 2025 11:00:33 +0000
Files and hashes:         1: 5cY3Kx8b4j0KVaTDpMJ_p3MHXDQ.roa (hash: 4/U5L2WjP5zopAp031RJ3xCbWwHur60QbESkZzzy6YQ=)
                          2: B5vrhwWeN1u04JarSN4IYCbo8Xc.roa (hash: t+R3zUYIJ8xs8XX0sngECa4QZBYlpNaidayI3GIo934=)
                          3: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: MqwQiG53m9oRuPOwp09X9h5BlPd671u6VjlhuFF4VLY=)
                          4: DBu6S2BLdxZ9qYS75D2nsil2Bh4.roa (hash: uCJntwDZ+cDZxpzZO6MqyTDIkNdtXNsEPYp7HWqPHR0=)
                          5: t-7ng9wcZ6DSPMgkeLgJ9AF--O4.roa (hash: DgVk1B4aExECpWEcAT+MKrSw8s1OZ50aoeFXQKO0kng=)
                          6: vgi1Ey_E7uF9NU90F_N6bB-tCrA.roa (hash: Vylgp4eMLnfNvxtlSE6QqW4iZbJBkmSUXI0mGatE/98=)
                          7: vrZXQ7c7SJqTI-Qy746C6GRBzTE.roa (hash: 9B+Vq1Jvk9CfpjDUR+g8aVrltZw5klYMebxf6UUVTtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:7e:1f:42:7b:e1:a3:d1:19:23:b4:3f:56:f1:27:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
        Validity
            Not Before: Jul 20 11:00:33 2025 GMT
            Not After : Jul 21 11:00:33 2025 GMT
        Subject: CN=a2a2cc67c0c3c1e420340405c826b5c1819331d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:40:78:55:a4:20:61:b6:60:eb:43:70:f3:
                    6b:2a:f5:77:e9:6c:df:29:85:5a:6a:8c:24:14:10:
                    e2:b0:fd:77:f9:d8:85:d6:77:56:c8:00:e5:5a:3c:
                    70:37:cd:55:8a:7f:05:e0:ba:03:ce:48:46:27:c5:
                    3f:bd:ed:d8:a7:d6:4d:ef:75:59:e2:77:f8:da:64:
                    6f:95:2e:30:3c:d9:dc:e0:76:d3:a2:f4:7b:cd:f8:
                    9b:7b:13:40:ae:c7:ea:4e:57:f3:df:72:c0:31:55:
                    91:8f:d1:d9:7d:4d:2c:a9:4b:00:f7:18:18:d7:45:
                    69:ad:68:a8:43:40:08:6a:8a:47:e1:57:41:90:fe:
                    e1:a3:86:df:e2:e0:66:46:cc:ec:2d:e7:bc:d5:00:
                    e0:5e:5b:2d:1e:23:24:c0:dd:75:6f:eb:11:29:fe:
                    e5:52:06:7f:33:7e:0e:eb:2a:6f:07:b9:69:2e:80:
                    78:64:91:0c:c0:10:3c:b9:7f:bb:87:60:e2:5d:10:
                    1c:7d:da:eb:a8:8d:9b:01:e8:dc:d3:f7:34:97:ed:
                    9c:d1:49:60:94:a4:31:a1:4b:49:1b:6f:28:6d:c8:
                    1f:41:0c:cd:9a:5d:f0:87:06:fc:6b:b0:77:b8:47:
                    9b:5d:0a:e2:30:94:b7:1a:2c:39:f3:8f:11:9c:0c:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A2:CC:67:C0:C3:C1:E4:20:34:04:05:C8:26:B5:C1:81:93:31:D5
            X509v3 Authority Key Identifier:
                keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:68:42:c6:49:1c:a1:67:f2:7b:b9:03:36:80:74:54:34:
         8c:e2:fb:4b:93:0a:bd:b4:e3:24:45:8f:80:e1:5b:15:87:d3:
         fa:8e:4e:bb:b7:4b:cd:ba:ae:a9:14:ed:d7:ad:d0:cf:80:5a:
         85:77:38:15:3b:c3:7a:d9:15:83:82:ce:d6:43:a9:5c:3f:9d:
         d2:ab:f3:9d:0d:38:62:90:b9:9d:0b:a6:7f:79:5c:d5:6c:4b:
         f9:e8:9d:9d:62:6d:ee:d7:09:e6:06:cd:4d:e7:d6:91:4d:0c:
         86:01:18:3b:20:22:e1:5e:83:b5:29:de:71:65:e2:e1:57:0a:
         0f:c8:95:2c:f7:cf:6f:e1:bc:88:6b:74:e2:30:ec:de:a6:d6:
         95:2c:27:53:f9:33:65:ab:fc:99:66:8f:d0:c7:ab:83:f7:32:
         df:69:43:eb:36:96:ff:ef:a4:b2:90:8b:64:ab:28:e0:19:28:
         19:99:91:b2:01:ef:f4:07:57:3a:11:df:15:b5:57:bd:fa:45:
         2e:e8:f6:6c:96:2e:a6:8b:37:4e:de:0a:61:c1:53:61:49:dc:
         26:9b:c7:ed:c5:95:dc:40:bb:d6:29:d0:9a:8a:6c:c8:2a:cc:
         65:2c:0c:36:cc:ba:b1:bf:5d:a3:7d:0c:a9:d7:37:7a:8e:03:
         8b:18:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:26:02 2025 by rpki-client