Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File:                     BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier:          w6za2QC0WvVmTDyxB9xIjvlqczGI9xbAyugptqXRAk0=
Subject key identifier:   F9:E1:2D:FF:1C:91:7E:84:B2:6F:6F:2C:B9:7A:58:79:89:47:59:ED
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer:       /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial:       01982822DEF0CB0EDA4D2A65852DA9981D23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number:          55
Signing time:             Sun 20 Jul 2025 14:00:30 +0000
Manifest this update:     Sun 20 Jul 2025 14:00:30 +0000
Manifest next update:     Mon 21 Jul 2025 14:00:30 +0000
Files and hashes:         1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: 9TnZS51vp8Il1vpHdMf7n/XEuYtAkK/ny6rzlMyFT3E=)
                          2: wLmoD_8Og7x28Igym1-Hg5A410U.roa (hash: +Yzl9wN++dP4CtoCNIFtppZ8l53ff/sGGZfNPkEeKbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:22:de:f0:cb:0e:da:4d:2a:65:85:2d:a9:98:1d:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=073848d8281be439e77750885b547a28152801bb
        Validity
            Not Before: Jul 20 14:00:30 2025 GMT
            Not After : Jul 21 14:00:30 2025 GMT
        Subject: CN=f9e12dff1c917e84b26f6f2cb97a5879894759ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:a4:cd:3a:4c:48:03:5f:7a:2f:38:61:a0:
                    b7:52:63:54:fe:ab:ee:50:9b:7e:5e:b3:ab:15:63:
                    5b:df:70:26:e5:e4:de:4f:c8:70:3d:d0:38:d7:80:
                    68:57:df:61:b6:60:d9:57:c7:8b:d4:d7:eb:7f:3e:
                    01:f7:09:df:53:8a:4a:12:ad:a1:81:87:4e:dc:9f:
                    0e:1f:fe:de:25:a4:1a:8c:d5:46:93:e9:87:16:c5:
                    0f:e9:65:74:66:fa:14:df:2a:6b:4e:70:bb:b1:59:
                    7b:8a:6a:48:13:b6:a1:64:e3:56:10:0a:20:69:2b:
                    76:cf:bc:e8:98:e0:ad:82:e7:02:e5:67:4f:44:1b:
                    c0:17:8b:41:6a:34:53:3e:d1:b7:83:1c:be:f5:43:
                    07:e5:d1:de:e0:71:e1:f7:a0:f7:ff:09:ea:63:9f:
                    71:7f:96:f0:76:3e:96:eb:2f:5e:ed:42:0e:da:c8:
                    41:f7:72:99:21:6c:80:8b:94:09:6c:80:cb:ab:54:
                    40:5c:af:d3:7a:41:4f:04:68:2c:b6:62:e0:cd:31:
                    fb:11:7c:b2:71:63:01:b3:e8:d3:94:ce:6b:54:04:
                    6c:e9:d7:10:1e:2f:6e:ba:fd:09:89:f6:6b:40:ec:
                    34:a8:2c:06:fb:54:af:3f:01:8a:c1:62:12:8f:c7:
                    2e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:2D:FF:1C:91:7E:84:B2:6F:6F:2C:B9:7A:58:79:89:47:59:ED
            X509v3 Authority Key Identifier:
                keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ee:04:eb:c4:c1:af:c2:3e:9a:93:d9:43:74:d2:fb:88:53:
         9f:3b:a5:67:0f:0b:17:3d:96:e4:29:3b:25:36:85:4f:28:02:
         eb:74:90:5d:12:76:26:c6:97:78:55:57:3d:e1:2f:b5:51:a6:
         1c:a6:ff:c7:68:6d:f6:e8:63:29:b9:56:f8:75:ab:49:50:47:
         1e:9a:31:42:af:11:3d:1d:94:46:de:6c:b5:35:b9:2c:be:b2:
         0c:81:2d:a2:0f:44:d9:ba:a7:6c:67:63:e7:28:74:73:06:08:
         7c:19:b8:bc:5e:51:d0:3f:e7:f5:d4:dd:ae:86:0a:28:51:72:
         90:5f:e4:fe:8b:3b:17:dc:d4:32:35:d0:a5:41:bc:7e:07:74:
         e8:60:cf:c7:57:32:57:9e:fd:58:02:a3:a7:78:0b:59:b5:c8:
         c2:6d:87:b1:0a:e0:ff:c0:2b:63:7b:93:79:a7:72:2d:d1:0e:
         4d:df:16:3b:36:c7:e9:e5:d4:3c:5c:cc:c6:8c:2f:b7:ef:30:
         c8:04:ff:89:e4:2a:e9:41:ab:09:19:d7:37:5b:5e:65:c6:65:
         70:b8:19:54:4d:55:d1:8e:c2:4f:dc:8a:60:7c:05:89:b3:ff:
         21:1f:7e:ae:82:93:b0:d8:9c:92:51:0c:19:88:40:8e:8a:23:
         08:57:83:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:28 2025 by rpki-client