Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
File:                     BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json)
Hash identifier:          Awo/TiwW2aB0kAHQOb8jxn4lSm2HEjKYV9BI1hFkWSg=
Subject key identifier:   38:2D:13:54:49:DF:40:72:4A:A8:3B:50:D0:2D:4F:C0:00:A6:85:BE
Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05
Certificate issuer:       /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
Certificate serial:       01984AAEFD409EBFC118662D81596A899D6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
Manifest number:          144B
Signing time:             Sun 27 Jul 2025 07:00:38 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:38 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:38 +0000
Files and hashes:         1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: LmJWfXBkwZ1q2bIUyLj5KCJKXBQyZr6j/ZNbUrJXwXA=)
                          2: cqs27uyShJLHJ19HI0wbuu9K6Mw.roa (hash: Io5SItgYrsPuNxUpvFI/wIElXAajrpA8wR3rTKWJTBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:fd:40:9e:bf:c1:18:66:2d:81:59:6a:89:9d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905
        Validity
            Not Before: Jul 27 07:00:38 2025 GMT
            Not After : Jul 28 07:00:38 2025 GMT
        Subject: CN=382d135449df40724aa83b50d02d4fc000a685be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:98:86:bd:26:1d:24:18:fe:e4:71:de:c4:8f:
                    4c:84:d2:0c:d0:7d:99:8b:bd:13:2b:58:39:b3:4e:
                    78:d1:f0:a2:b8:2b:e0:72:e3:3b:68:da:13:ce:cb:
                    d1:e4:c9:1d:f0:b2:d0:9c:7b:a2:bc:45:2e:aa:f0:
                    91:77:84:2d:6b:ed:4c:45:16:67:ba:4b:f6:46:d8:
                    42:71:81:ea:63:80:4c:e2:be:99:f1:87:c0:78:be:
                    51:4e:fa:56:d5:60:4f:95:8e:ad:13:05:1e:a2:ae:
                    1f:02:5d:f0:a9:ee:45:59:55:ba:fa:5d:94:8c:61:
                    2a:e0:38:4f:66:2c:7c:b7:83:03:56:45:5e:64:12:
                    ae:ec:1d:eb:bb:58:db:7b:89:12:0b:b0:ac:cf:8f:
                    ee:57:51:4e:ed:41:4a:f4:2c:d1:66:93:4c:6f:f2:
                    d4:41:3d:a8:a3:5e:f7:23:5d:3d:27:16:01:4c:79:
                    92:77:5a:b0:b8:f7:15:20:c7:41:78:fe:09:5a:07:
                    f4:de:24:71:cb:eb:13:be:71:c7:c4:12:6b:88:b2:
                    97:79:83:7c:d8:3a:7e:a4:c3:17:f2:27:58:e1:38:
                    6b:ac:5a:d4:75:33:da:e7:34:50:33:cd:08:50:42:
                    e1:b3:8e:81:a1:ad:27:38:1a:3a:f2:11:2b:17:92:
                    88:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2D:13:54:49:DF:40:72:4A:A8:3B:50:D0:2D:4F:C0:00:A6:85:BE
            X509v3 Authority Key Identifier:
                keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:34:52:72:78:6f:a0:ae:6c:48:0a:dd:b9:c5:16:69:93:8b:
         f6:c4:57:d1:4c:36:c7:c5:76:08:24:37:3f:93:3c:7a:81:f5:
         b8:d3:71:bf:2c:69:fe:d2:d1:51:b0:d1:76:03:ee:30:ef:47:
         47:74:b9:b2:37:85:c5:f1:0e:0a:bf:25:86:62:7d:e4:69:30:
         f2:e6:62:d6:a6:3c:03:e4:85:9b:53:b4:f0:cb:8f:b6:bf:10:
         07:91:b7:ad:38:70:65:c4:ec:82:8e:50:37:85:50:7b:b5:50:
         b6:fd:ca:63:3f:4c:11:a3:d7:c2:00:e0:22:4a:71:c0:4a:35:
         5d:3c:ed:a5:f6:d9:e9:2a:ff:7e:f9:15:51:c3:33:fd:53:9a:
         1c:c6:ee:ea:fe:7a:d7:05:c2:f6:d2:5e:63:f2:3f:9b:5b:cc:
         9f:90:77:04:63:bc:35:4d:2e:58:4c:25:a1:55:14:1c:14:89:
         65:2e:17:6b:26:0d:df:4b:7b:8a:2a:9d:d4:91:ae:2f:a2:6e:
         27:50:56:d9:6d:55:3e:96:bf:a5:a8:9a:c0:06:61:18:de:93:
         33:70:8d:a4:5e:9e:48:b1:9e:61:40:ef:d0:49:c2:ee:70:fb:
         c4:16:e1:8f:42:9f:11:74:87:84:66:a0:16:4f:7a:71:3c:27:
         96:96:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:43:51 2025 by rpki-client