Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          DbqobjT1+WiU+y7R+F/EPyFkio7SpwSsALVF6L+kNhA=
Subject key identifier:   7C:BC:18:B2:BA:E3:ED:DA:04:D3:31:28:53:D7:2D:43:09:7D:BB:D4
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       01984A41855F1DD9CAD31D44562100BF567E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          13BF
Signing time:             Sun 27 Jul 2025 05:01:04 +0000
Manifest this update:     Sun 27 Jul 2025 05:01:04 +0000
Manifest next update:     Mon 28 Jul 2025 05:01:04 +0000
Files and hashes:         1: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (hash: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=)
                          2: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (hash: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=)
                          3: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: 0A4faVOm+GAGYdb1Gwo+9XP4YJiF6X5t3AS2YIptg9Y=)
                          4: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (hash: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=)
                          5: xk57NMD7hAx5NjNNvtBpMWNGREE.roa (hash: ETKtdzy2heJov69i+XXLHQAB4L1xigBSVsgiROK30og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:85:5f:1d:d9:ca:d3:1d:44:56:21:00:bf:56:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jul 27 05:01:04 2025 GMT
            Not After : Jul 28 05:01:04 2025 GMT
        Subject: CN=7cbc18b2bae3edda04d3312853d72d43097dbbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2f:df:6c:2a:68:39:48:57:dd:cb:ba:78:cd:
                    3f:26:69:7a:81:8d:58:38:f1:d9:0e:e9:49:f5:dd:
                    5f:18:ff:87:4c:bb:40:29:d1:a6:cf:3f:03:7e:97:
                    f3:57:48:63:4a:60:87:84:be:de:d6:43:e3:1c:91:
                    21:82:5d:d8:26:fe:83:49:0e:c4:8d:b2:eb:9a:81:
                    cd:99:1f:64:28:7c:4e:3e:1c:4a:54:e0:5c:55:fd:
                    d9:e3:20:ad:6d:56:41:27:4c:0a:6e:5d:bb:74:55:
                    73:5c:a7:ab:70:9b:37:60:08:99:12:2a:07:0e:fb:
                    13:e1:c2:84:51:91:19:bd:7d:25:61:74:75:27:af:
                    24:37:f1:e5:4d:a2:ed:68:19:75:94:aa:25:ee:c9:
                    24:44:91:fa:fb:0b:ca:6e:f5:cd:ed:34:04:8f:53:
                    7a:2c:bb:e6:61:b2:9e:3a:77:e0:97:41:e9:75:26:
                    e1:12:07:d3:8e:7a:ca:80:41:f4:af:79:b8:3f:84:
                    b2:27:f3:59:af:61:43:45:62:2d:6f:5b:68:b1:df:
                    7b:af:63:a1:47:d0:c0:ad:05:f3:1f:5f:c4:06:0d:
                    ac:0d:7f:e5:5a:fc:5c:62:7d:5a:e4:17:71:76:8d:
                    f3:3b:76:5a:a5:ae:ac:f7:dd:68:09:fd:f9:16:0c:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BC:18:B2:BA:E3:ED:DA:04:D3:31:28:53:D7:2D:43:09:7D:BB:D4
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:bf:4d:1e:22:10:d4:78:e9:6d:78:31:43:75:e5:0e:02:
         f5:72:27:36:db:e4:e8:8a:9a:85:a8:56:14:90:31:d8:d3:99:
         08:6a:b2:04:75:78:63:5d:b9:2f:8f:6b:bb:e7:8c:b6:18:73:
         78:51:f2:f6:d2:fd:21:3c:9c:71:56:75:e7:df:36:ed:c2:21:
         71:a8:f8:a1:7e:11:78:93:0e:f0:c3:84:a6:c4:f0:a0:99:40:
         01:63:70:b0:e7:e2:1a:74:93:f5:ee:bf:04:30:02:68:e4:4c:
         64:02:8b:46:39:b3:82:6d:6e:e3:9b:22:cf:48:5c:90:e4:03:
         26:5c:7d:f3:ae:65:22:5f:7e:4f:a7:e9:1e:ab:0c:61:40:b9:
         12:45:ad:50:fb:c7:9c:c9:ef:ed:29:c3:db:d1:66:bf:39:36:
         ea:c9:74:5b:1a:eb:fe:8d:ab:83:2d:d1:c2:d9:95:e3:d7:dd:
         b9:2a:9e:d0:69:34:49:b1:bd:ea:54:07:64:87:35:37:79:b7:
         65:1d:7e:43:61:4f:66:a9:68:42:14:7f:bd:61:5e:11:7a:65:
         89:ac:db:e5:d4:19:99:e6:7f:b9:ec:8d:da:a0:c7:79:95:a1:
         09:96:96:43:f9:dd:a2:0b:7e:01:b3:8d:97:58:b6:80:6a:b7:
         e0:30:dc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:22 2025 by rpki-client