Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
File:                     BGK247pQCQLmPuFOXKyREoMqLCc.mft (raw, json)
Hash identifier:          YdflvXuDXmxoyuAE6Tl2KQTMeeg74MZ3RUJLm35ib6A=
Subject key identifier:   1B:DB:27:BF:A3:DE:91:3D:5C:DF:53:7D:DF:5E:46:06:F1:65:81:37
Authority key identifier: 04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27
Certificate issuer:       /CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
Certificate serial:       019847E497DCE4219F69B807A7FAFD27EC0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
Manifest number:          0185
Signing time:             Sat 26 Jul 2025 18:00:20 +0000
Manifest this update:     Sat 26 Jul 2025 18:00:20 +0000
Manifest next update:     Sun 27 Jul 2025 18:00:20 +0000
Files and hashes:         1: BGK247pQCQLmPuFOXKyREoMqLCc.crl (hash: IP6popvUcxWi6bnimglwcbZfLLmU2cWX5aUkAtMTbFU=)
                          2: zin7g8rz3XZKgyY-2CCTccUUZMI.roa (hash: FyDDLGXT5pU6Mg/1Kd+gQOcE2BEnBTlrNQt3oLOsDkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e4:97:dc:e4:21:9f:69:b8:07:a7:fa:fd:27:ec:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462b6e3ba500902e63ee14e5cac9112832a2c27
        Validity
            Not Before: Jul 26 18:00:20 2025 GMT
            Not After : Jul 27 18:00:20 2025 GMT
        Subject: CN=1bdb27bfa3de913d5cdf537ddf5e4606f1658137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:59:e1:5f:8a:bf:6e:94:cc:6e:d9:61:3b:
                    28:7b:86:5b:5b:62:58:a3:da:22:5d:d5:9d:53:a1:
                    37:be:7e:3f:1f:bf:e9:ad:00:62:7c:85:e8:29:2d:
                    c5:77:ad:41:46:7c:3d:97:ae:b9:4c:c0:dd:1c:eb:
                    3a:ce:80:db:d7:b3:f5:49:60:3a:4a:4a:6f:2b:46:
                    9f:5c:3b:d2:44:c3:55:31:60:c3:af:fa:04:15:f3:
                    a7:0e:74:04:bb:70:e9:07:22:03:47:2b:4b:08:1a:
                    8b:b2:2b:67:50:44:f6:eb:73:ad:3c:1c:e2:dc:d2:
                    64:c5:58:d9:6c:a1:29:50:4c:9a:8e:e7:c7:bd:47:
                    4f:bf:54:8b:36:b7:e3:cc:49:3b:b4:6b:a1:f8:14:
                    62:83:59:43:13:f0:9e:22:1f:3a:c1:a2:2f:7f:21:
                    37:de:58:fc:3c:20:44:83:d8:c9:65:d0:49:65:48:
                    58:98:c0:55:da:3d:31:bf:fd:b6:5b:b7:e1:58:78:
                    76:45:7e:28:1c:07:ea:4b:f9:c4:62:28:32:cd:9f:
                    a2:94:e0:c3:dd:c0:9d:c4:eb:01:a7:3a:50:6e:a8:
                    c6:c2:70:0c:99:8a:e1:cc:67:f7:b5:06:4a:43:61:
                    e1:92:9f:9b:08:76:8e:f3:2b:cf:84:78:35:0e:47:
                    44:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DB:27:BF:A3:DE:91:3D:5C:DF:53:7D:DF:5E:46:06:F1:65:81:37
            X509v3 Authority Key Identifier:
                keyid:04:62:B6:E3:BA:50:09:02:E6:3E:E1:4E:5C:AC:91:12:83:2A:2C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGK247pQCQLmPuFOXKyREoMqLCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/ee1b01-51ad-4a02-b278-6416cd377b48/1/BGK247pQCQLmPuFOXKyREoMqLCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:81:0b:84:e8:ee:b0:17:a3:d4:ca:8f:95:e7:9e:c3:96:
         cd:48:5b:c6:6d:7b:4d:9e:74:a4:b0:f8:be:6e:a9:34:ac:2f:
         14:ee:20:b2:57:19:81:07:41:4e:24:7a:de:4c:78:1c:76:97:
         3c:a2:96:53:58:77:80:b8:d1:20:3c:57:cb:1e:56:ae:6d:bb:
         6c:a8:6b:08:5d:82:3b:aa:e1:8f:7b:93:68:95:73:af:ff:37:
         1c:a6:ad:e9:34:44:d4:79:50:0c:66:2d:6f:61:05:0c:63:17:
         03:31:9c:93:8c:d7:a2:3f:90:8e:0c:0b:cd:c6:9d:b9:ab:b2:
         62:83:23:1b:9f:13:b6:49:05:d8:22:1d:87:be:43:6e:27:1c:
         02:94:d8:9b:42:04:20:76:32:84:93:63:1d:3c:16:fa:0a:39:
         54:9c:60:1a:d4:dc:28:bd:94:4a:7c:d6:98:9d:6c:ea:c8:1a:
         2d:c8:e3:2e:8b:b9:8a:51:47:e7:da:2a:da:3b:f8:20:f5:7f:
         a8:82:1b:9e:5d:29:bd:36:7d:bb:bf:62:01:5b:ac:78:08:26:
         cd:72:97:06:ee:1c:47:b2:f7:11:92:3d:e9:95:d6:95:df:c3:
         f5:ef:de:11:22:56:e1:a7:ed:03:28:5e:58:3c:e5:22:00:75:
         1d:60:36:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:53:51 2025 by rpki-client