Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
File:                     BVFgW2dezk4PznF1rjGpP6gnK6Y.mft (raw, json)
Hash identifier:          YrooadJr9NmqscyaUl9GEPXueE0T8uxcCVm84gVwzUU=
Subject key identifier:   C3:31:D7:88:6A:CF:2B:1E:C3:CF:40:BE:13:32:95:06:A0:E5:AC:76
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Certificate issuer:       /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial:       01983616BBC04B4D7A3ECED054766B769E37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
Manifest number:          1629
Signing time:             Wed 23 Jul 2025 07:01:56 +0000
Manifest this update:     Wed 23 Jul 2025 07:01:56 +0000
Manifest next update:     Thu 24 Jul 2025 07:01:56 +0000
Files and hashes:         1: 5t_gEPyzONNwmcX_6ew0Ih3Mk2Q.roa (hash: vkkst1UDRXFHGnw3oCIz/VahP4EJhU4cLye1AO0QLS0=)
                          2: B-VB7mD6d3yYH8PU8AgFih1fMDc.roa (hash: T5HGrFxvsUPySvUxTWFtkDKWgc+DSV2mLNavrR7oxEo=)
                          3: BVFgW2dezk4PznF1rjGpP6gnK6Y.crl (hash: GSoauIS4xjOHIHbpce4y071dOdJaomrC6sVj1oYWT/k=)
                          4: FQTXSvb27ypAWeWR6u4PUk-NFzc.roa (hash: oVmw4Wr4zacFRrwMuuDV+itYXymrywavxqZKYRr/zHc=)
                          5: GIdtnYTfB_OfNmkj58C5zvwyoiY.roa (hash: mrolhVBCf9ezcIiNdke1ILuseOXCo3lGnZtCw7CJdqk=)
                          6: JIWScFv9Kksz3-WjVTMxXPLjiWo.roa (hash: 9Ejcda+LEF9Prza7a6M4k8Cqx+Jsocz8uwzratsGHfs=)
                          7: Ry99V7wdnB63QA0YiggryZhHU-U.roa (hash: mMBh91Bzq2gPCtQkwNpkOUuuvLHWXUK22LlIXX1xS/g=)
                          8: T2zf4MlLIMSvzzuDsJMAjIOyKkY.roa (hash: ueRz8nTweEwyQ4f6p4yvV8towA7SPGMkaN88JD99IhM=)
                          9: WTBCbSxb7h1w4Up4KNg9SZTnE6c.roa (hash: zGDl99MvN6NddN0ACg6xKrKwSNupTCXGaQXZUdGsWZY=)
                          10: Wgn-Z3i6lXU4mVGYn9zEOu2Y5uo.roa (hash: KDlQZdCuo/nIV3/PuDzNC2v7AGRYnk63vIIL7+xFyqo=)
                          11: ZNVBvSaI1BNlFT5y4meV0Zbgnzw.roa (hash: bWlw2kG0F8Yo+irCKVO4en+85QCKnglxRBdSlkv67r0=)
                          12: ZmV3RrHyNbdlPpXWHxyJNKlqz_0.roa (hash: duiYNAfkU9vNSfSeoTIVT6MoGsXF5yCoHKwjI4a3RZo=)
                          13: bLACyeWnCQUwWZqE5WZ_BrmQU6Y.roa (hash: uwoE5/d36cX/Ks6beQm+PxMT5NEUJYwmYJZfciGwpzU=)
                          14: lSQaQo1pT929AIuNEO-jfbBj_uI.roa (hash: aky/WPIxzMhPYRkj4RXOkjGc0PhL0aXcIKo/I7TPgXM=)
                          15: lmjGoIkmtRARzMHJ3Iv6xZvWT5U.roa (hash: D1V3yIkbb8Fb2YGAP6nceG/MedRCxNzvPEgyVbvAN7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:16:bb:c0:4b:4d:7a:3e:ce:d0:54:76:6b:76:9e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
        Validity
            Not Before: Jul 23 07:01:56 2025 GMT
            Not After : Jul 24 07:01:56 2025 GMT
        Subject: CN=c331d7886acf2b1ec3cf40be13329506a0e5ac76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2e:41:40:b1:ba:d3:66:63:8a:a7:75:e3:58:
                    ce:6c:13:55:e7:71:36:f7:c1:2c:b1:10:5f:8c:37:
                    47:8f:cb:01:b9:06:13:a1:cb:c4:01:de:a9:aa:19:
                    50:1e:f9:f4:85:66:19:3f:9c:08:a5:7f:85:4c:ca:
                    99:78:64:9a:88:2e:99:4a:7f:86:50:1c:96:54:8e:
                    43:f3:fe:cc:2c:99:b9:70:82:2a:bd:2a:6d:cf:2b:
                    69:55:90:95:f0:dc:61:64:d5:66:fc:ae:81:77:54:
                    5b:d1:18:a3:bb:ba:8d:ff:08:d1:19:40:95:c9:75:
                    a5:5b:cd:af:7b:3e:de:52:92:73:af:0d:9d:d4:9d:
                    0c:88:80:49:bf:ef:b4:56:08:c6:b5:80:a3:bb:dc:
                    a6:e0:7c:69:8e:33:ba:02:ff:b9:99:37:44:77:91:
                    f3:a7:b4:45:d2:40:2f:2a:29:6a:13:ef:fb:76:cd:
                    af:18:b8:cd:93:02:01:52:e3:50:78:d6:08:27:f8:
                    a1:2f:82:8a:08:9a:ef:e5:4f:19:f8:4f:ae:11:da:
                    61:9e:68:07:a6:f8:f7:da:a1:3b:e9:2d:2a:d7:ff:
                    b9:39:bb:3d:4f:92:6e:37:f6:71:2a:9f:f6:35:dd:
                    1f:04:31:b9:69:05:11:3e:96:ea:da:36:01:bd:a7:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:31:D7:88:6A:CF:2B:1E:C3:CF:40:BE:13:32:95:06:A0:E5:AC:76
            X509v3 Authority Key Identifier:
                keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:de:36:0b:df:39:16:2e:0f:2e:82:92:96:fa:fd:ff:ce:
         3d:a9:95:33:9f:ba:2c:00:23:d4:21:de:1b:47:ea:b5:de:ea:
         2f:0f:2b:8f:97:5b:4a:0c:95:34:83:90:a6:38:66:96:1f:4c:
         19:20:f1:98:2f:ed:4f:3e:2e:40:c3:b0:c7:55:e4:88:a2:d6:
         98:e5:26:bd:ff:98:c2:a3:98:2e:79:b1:5d:2f:4d:4e:be:03:
         5a:46:27:30:3f:8a:36:e1:b5:a9:11:8a:3b:26:f9:49:49:39:
         3e:b3:11:11:90:2d:51:06:15:4c:c3:7a:20:60:8e:d1:60:30:
         0e:de:05:61:0e:9a:8f:51:6a:43:62:b5:b2:cf:9e:3d:71:0d:
         37:4e:d3:75:95:4f:5c:46:bf:7d:b7:fd:79:3a:92:98:f1:41:
         73:fd:4d:49:bb:d6:85:8f:5d:01:bd:37:20:e0:18:50:56:1b:
         9d:d4:7b:95:80:95:84:a2:64:10:25:0b:9f:db:88:a0:41:49:
         19:be:b7:b9:f0:c6:e6:0e:08:df:b7:0e:a3:30:2c:27:9f:0c:
         52:1a:a2:df:3b:9d:cc:a2:30:57:7c:5c:64:f3:43:af:52:4a:
         56:b0:58:f3:05:11:0d:87:cb:05:28:32:7d:98:5f:d6:35:9d:
         5f:28:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:26:02 2025 by rpki-client