Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
File:                     BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json)
Hash identifier:          n3bsNTvrqulcgbX3JwOz2mce+YUuE9FzcHKJBhU3cnQ=
Subject key identifier:   1C:36:79:6F:F7:82:92:22:ED:B7:46:8C:82:67:E8:DE:69:25:4F:24
Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16
Certificate issuer:       /CN=06b164189f7db61e8b61fddae5622a0b134f5c16
Certificate serial:       019852313DA07B010E4BBAF7AD826CBB69BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
Manifest number:          06E9
Signing time:             Mon 28 Jul 2025 18:00:15 +0000
Manifest this update:     Mon 28 Jul 2025 18:00:15 +0000
Manifest next update:     Tue 29 Jul 2025 18:00:15 +0000
Files and hashes:         1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: knD6wojsm2XwPexQgMs5Z8CoAb5SQQtwG3hP/kRucvU=)
                          2: xiu8A8Z9HiQjvOQtwLKzLq6Rmzs.roa (hash: lWKOLN6hC8W0RzZe4v2RWSxfRmyJvM8+WBxEcTGjqnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 18:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:31:3d:a0:7b:01:0e:4b:ba:f7:ad:82:6c:bb:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16
        Validity
            Not Before: Jul 28 18:00:15 2025 GMT
            Not After : Jul 29 18:00:15 2025 GMT
        Subject: CN=1c36796ff7829222edb7468c8267e8de69254f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f9:95:17:a9:f2:b7:38:ee:d1:4e:d3:fb:cc:
                    18:8e:a2:d7:d3:ec:67:18:3e:52:92:81:b6:f4:5c:
                    f4:dd:f9:42:b9:6f:fe:22:65:aa:36:c1:af:ea:65:
                    d0:df:32:3a:89:74:3b:41:a7:73:b8:e5:15:b1:99:
                    7c:1c:e1:8a:00:0f:4b:49:55:b7:d3:cc:7b:69:b1:
                    e9:ff:41:5f:08:9b:b6:67:3e:8f:19:f2:1f:07:26:
                    95:ae:4f:b2:b6:92:14:4e:68:c4:64:cf:0d:f2:f1:
                    ab:45:29:57:70:20:db:c5:42:13:4d:36:10:59:8c:
                    52:a6:a0:83:81:50:58:06:b6:77:ea:07:9d:6c:62:
                    65:9e:33:5d:5c:c7:b2:8c:e5:9e:f2:3b:b8:a7:f5:
                    00:b2:ef:ba:05:42:02:0a:75:82:8c:8e:a7:1c:ef:
                    20:c5:b2:23:c1:03:10:5b:9a:23:20:ba:cc:b6:d4:
                    49:09:d5:9f:75:94:a9:1a:de:91:14:b6:5c:d3:99:
                    80:dd:eb:63:7d:4e:db:16:42:b6:f7:28:50:ad:1a:
                    fc:aa:e9:74:59:b5:96:4a:dd:70:57:ad:1d:e6:2e:
                    10:4d:8c:45:20:d2:5a:88:b5:a9:55:de:f9:0a:2e:
                    23:c9:c7:ef:bd:8f:e7:f0:e4:11:af:91:bd:cc:01:
                    9b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:36:79:6F:F7:82:92:22:ED:B7:46:8C:82:67:E8:DE:69:25:4F:24
            X509v3 Authority Key Identifier:
                keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:73:f3:a0:e5:e2:02:f1:16:d9:7e:a1:4e:49:8b:a9:b2:5a:
         60:dd:86:e2:42:5b:99:66:cb:85:d5:54:a5:f9:69:0a:cf:67:
         b4:76:30:fe:1c:c7:5e:a6:d5:37:05:be:7a:a7:3e:c8:d4:2b:
         2d:a4:d8:b9:09:ee:b5:e5:43:07:0c:ee:a7:59:a3:c7:59:65:
         64:b3:34:46:04:8f:0b:0a:f9:9d:77:af:88:e2:18:f6:77:4b:
         1b:08:ef:19:60:d1:02:1c:ea:66:5a:24:b5:b7:bb:24:36:df:
         4c:99:60:cc:7b:21:db:88:91:8c:c1:52:96:f1:6a:25:77:6c:
         6b:96:7b:68:db:fb:b5:0b:5b:b8:9f:db:89:f0:a9:27:cb:ec:
         cc:a2:13:5d:7b:e1:cb:ed:2a:a1:d9:f5:8f:44:7d:b6:46:71:
         e3:fa:79:6b:6e:a3:39:ba:49:71:35:bd:f6:d1:30:90:78:c3:
         fa:7f:39:91:b8:66:ff:58:03:8d:0a:43:6a:88:92:01:bc:58:
         06:c9:de:6c:fa:7b:bf:46:e6:9a:7c:cf:31:01:3d:00:48:77:
         e9:11:2a:5b:95:8e:82:f4:a0:93:9d:65:a0:48:ad:04:24:ca:
         2c:7b:2f:7b:83:85:29:43:bf:57:20:f8:b8:3e:d7:13:1f:3f:
         c2:18:0f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:19 2025 by rpki-client