Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
File:                     BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft (raw, json)
Hash identifier:          fkMv9y8jJAUKasCfy/rZ9MPnUUZxzhLkY+vef/2mKMQ=
Subject key identifier:   5F:51:8C:96:1D:1F:F3:E4:99:67:E8:1A:A7:69:DD:90:1C:C2:AB:D9
Authority key identifier: 04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E
Certificate issuer:       /CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
Certificate serial:       01984965B8576540697C5C35594B4AE12F1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
Manifest number:          0AF2
Signing time:             Sun 27 Jul 2025 01:00:59 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:59 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:59 +0000
Files and hashes:         1: BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl (hash: ioRRoOfCjbPcf2EpZijEQ+vC4a3T6LwK7Q+apVddOvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:b8:57:65:40:69:7c:5c:35:59:4b:4a:e1:2f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04347fa51109ddecd6cd594c67bb02b2d5e7210e
        Validity
            Not Before: Jul 27 01:00:59 2025 GMT
            Not After : Jul 28 01:00:59 2025 GMT
        Subject: CN=5f518c961d1ff3e49967e81aa769dd901cc2abd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:d2:25:0e:c9:29:58:d4:73:04:98:45:83:
                    34:be:cf:c0:57:1f:69:cd:e9:dd:bf:37:8d:62:c4:
                    5f:c9:ba:96:6e:da:b9:d7:41:fa:5f:dc:7c:2a:18:
                    99:92:a4:02:07:d6:1e:bb:b9:63:8a:1b:d8:52:70:
                    57:88:3d:a4:b2:87:52:e3:f3:3e:a7:a9:86:da:67:
                    30:1b:3c:fb:5e:e5:10:1e:44:3b:94:d8:04:aa:4d:
                    d5:45:46:76:4a:48:6b:ca:12:36:64:7e:c6:30:50:
                    39:7a:b0:38:2d:a2:fd:26:ec:6a:7b:1b:c0:ff:c2:
                    a2:00:42:83:60:5d:6b:8a:74:f0:05:35:19:85:62:
                    65:9b:26:8f:13:d3:c6:d4:ef:4e:26:62:52:28:32:
                    69:0f:c8:de:d0:22:d1:38:ac:30:9c:e6:5d:28:e6:
                    f6:4a:ef:14:f8:ff:96:fe:2d:a6:c5:a9:3d:29:bf:
                    62:4c:b5:2e:da:80:1c:09:54:a4:98:f3:f6:d7:a8:
                    c0:84:91:c1:36:b9:b5:f9:4b:da:3e:fe:e0:df:73:
                    9e:56:3e:ac:96:b8:54:9c:6b:82:d2:f7:35:34:91:
                    f1:3b:8a:28:9f:a7:d9:14:fa:57:f0:57:81:e8:58:
                    81:9d:0f:12:9c:3a:b3:2c:0b:7c:31:9d:af:8e:32:
                    c6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:51:8C:96:1D:1F:F3:E4:99:67:E8:1A:A7:69:DD:90:1C:C2:AB:D9
            X509v3 Authority Key Identifier:
                keyid:04:34:7F:A5:11:09:DD:EC:D6:CD:59:4C:67:BB:02:B2:D5:E7:21:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/916186-5572-40fc-9e2f-77eb53e82c5e/1/BDR_pREJ3ezWzVlMZ7sCstXnIQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2b:9e:69:ed:ab:90:da:34:7d:af:76:da:25:e4:32:cc:31:
         1e:b1:66:44:46:27:d9:75:c7:75:74:b9:e5:ef:0b:74:be:fe:
         08:4d:f1:3f:50:e3:df:d0:83:05:72:34:e8:bf:c5:21:7c:fc:
         1d:b7:d7:4a:04:d4:3f:ad:ef:dc:d0:ee:ef:80:1d:40:13:0c:
         c8:56:99:a8:6e:95:81:40:6d:77:ee:2a:ae:16:db:f6:9b:22:
         68:12:e1:38:ff:e1:bd:c3:6a:89:c3:da:75:fc:c8:a7:0a:7b:
         b1:fa:fa:d9:46:39:fb:c1:d8:e1:a7:db:43:1a:a8:4c:4e:32:
         a0:fc:da:a8:15:5c:6d:62:6b:49:16:1b:53:73:55:5a:84:13:
         71:13:f0:08:42:5b:b3:ea:38:69:95:21:8d:09:99:83:f8:ab:
         19:b5:11:71:78:43:24:39:02:29:4e:d5:20:9f:3a:1b:68:b2:
         b2:00:b1:f1:f7:13:20:ba:36:18:c3:2c:46:e0:a8:2c:1a:5d:
         50:39:02:5b:60:08:0f:dd:f3:a0:73:50:10:53:23:91:b8:05:
         1f:db:b3:d3:22:6f:15:3e:8e:b2:a7:84:55:0a:bc:1a:78:14:
         b8:15:f2:22:8f:70:ad:40:03:02:2b:d5:60:18:1f:40:db:13:
         c4:86:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:47:06 2025 by rpki-client