Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          mVARsV7/OcwncRl4AIp/QIF31I+MOoY937ASMrSb7gg=
Subject key identifier:   4F:C9:94:AE:D3:B0:F4:68:80:84:65:AD:AA:4D:18:12:1C:5C:DB:0F
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019838055B37CD8BBE5ADB5448B61E543B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1230
Signing time:             Wed 23 Jul 2025 16:02:11 +0000
Manifest this update:     Wed 23 Jul 2025 16:02:11 +0000
Manifest next update:     Thu 24 Jul 2025 16:02:11 +0000
Files and hashes:         1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
                          2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: EM1v2Q43s4YV0ZHN5GIz6YNWwFqAY8/jlb8Ukb28X9U=)
                          3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
                          4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 14:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:38:05:5b:37:cd:8b:be:5a:db:54:48:b6:1e:54:3b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Jul 23 16:02:11 2025 GMT
            Not After : Jul 24 16:02:11 2025 GMT
        Subject: CN=4fc994aed3b0f468808465adaa4d18121c5cdb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:2c:15:44:cf:08:63:a9:89:42:d1:9c:4d:
                    7d:11:f5:fc:22:58:bd:5f:2b:4b:4f:7b:cc:f7:f7:
                    a4:f0:f5:b2:31:8d:a6:19:24:84:16:0f:6c:31:4e:
                    50:53:c5:d6:8b:bb:3c:b3:8b:e8:6b:3f:54:d4:35:
                    13:9c:40:5f:03:51:f0:b7:23:51:a2:d4:7c:fa:cf:
                    7c:21:64:a8:a2:90:5a:71:1c:57:a9:db:13:9a:85:
                    da:0b:b5:97:b6:a3:c9:53:66:3b:e0:b8:e2:65:ec:
                    0d:fe:89:cf:ff:37:6a:c4:63:6f:82:c9:23:d0:3b:
                    12:a1:08:f5:1d:58:1d:d2:50:8b:82:11:6b:b8:2a:
                    dc:2c:76:0c:22:e5:52:f4:90:62:bc:f8:03:01:cb:
                    34:2a:82:04:f7:25:b7:39:4d:e1:04:e5:08:f4:02:
                    22:4c:19:94:9c:78:1f:b6:92:44:43:3b:a8:ba:de:
                    41:e8:01:f7:03:e7:3a:18:89:aa:bb:e7:1b:23:84:
                    a4:55:fb:0b:00:45:7e:71:e9:bf:78:5d:d9:cd:2a:
                    96:cb:c3:3f:1e:47:9b:6b:95:2a:cd:3a:ec:d8:ac:
                    74:ab:20:ea:78:74:04:75:ab:33:c3:b3:ad:d1:48:
                    29:7e:8b:ae:6c:2f:ed:14:52:21:ea:4c:0e:fc:f8:
                    77:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C9:94:AE:D3:B0:F4:68:80:84:65:AD:AA:4D:18:12:1C:5C:DB:0F
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f9:e0:97:59:2e:42:64:70:97:b5:ba:2f:16:d8:67:ae:51:
         40:bb:d4:a3:71:91:7d:d8:15:dc:ef:f9:fd:12:bb:02:97:c0:
         4a:f8:dd:4e:1c:36:65:30:9a:db:07:22:ac:ab:e8:f0:49:8d:
         d9:8e:6e:e2:c5:2e:0d:1e:66:f1:5b:36:a6:67:d3:15:0b:c9:
         93:93:47:d4:2f:84:18:3a:73:70:04:6e:ac:59:27:0e:ff:b9:
         68:73:b8:05:7c:1e:ef:cf:c0:34:f0:04:28:ab:5c:60:68:41:
         f1:25:9a:86:c4:f6:36:7e:e6:65:bc:69:d7:a7:6a:69:ce:7a:
         1e:fd:33:af:bd:e0:0c:4e:57:f5:4d:ab:d0:b2:9c:a8:03:f2:
         d7:1f:04:4e:cd:15:33:47:bd:68:23:d2:99:30:ab:93:c3:04:
         10:85:c6:69:4f:8f:67:59:ed:ec:c0:1c:4f:86:95:e0:7b:b3:
         ef:df:6b:7a:f4:71:30:2c:17:c4:36:39:c3:79:5c:1e:0f:07:
         f1:8c:6e:bf:13:40:c6:d0:8f:f6:c6:41:96:a5:e8:38:96:e6:
         dc:27:3d:b2:97:7b:76:93:c0:16:d8:62:23:b2:65:5f:14:65:
         4b:18:9f:52:62:39:5e:cb:c3:f8:b3:e2:cb:0e:cb:23:34:8d:
         68:0d:6c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:58:15 2025 by rpki-client