Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          QLv7xx1GSaCFPg+PWApGa/v97+kfah1/7pz8Ga/uulg=
Subject key identifier:   59:CF:52:F4:C7:CD:36:DC:84:32:72:35:0A:C6:05:09:98:69:5E:4E
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       0198499C01382A0E98786FD51328BAD7BA4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          12DC
Signing time:             Sun 27 Jul 2025 02:00:17 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:17 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:17 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: jQqb0o2zq3C/Pbeyu2qhAmc9kXxv5iQDgavb/KrmHSo=)
                          2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:01:38:2a:0e:98:78:6f:d5:13:28:ba:d7:ba:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Jul 27 02:00:17 2025 GMT
            Not After : Jul 28 02:00:17 2025 GMT
        Subject: CN=59cf52f4c7cd36dc843272350ac6050998695e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fb:c0:65:cc:2a:12:26:59:9d:56:16:34:e7:
                    2d:88:94:5b:ae:65:63:4e:08:04:22:f8:b6:37:68:
                    96:2a:ef:88:0e:c0:29:2f:90:d9:c1:46:75:3e:f7:
                    ca:69:20:73:98:e9:83:d4:b5:d4:27:db:86:80:e3:
                    40:32:f5:e7:ac:1d:3e:4c:1c:76:01:77:99:1e:c5:
                    6d:f0:f0:d7:05:ba:5a:d9:6a:21:ec:dc:0d:fe:b7:
                    6d:78:80:98:2d:e8:18:8a:f0:47:e3:c8:d8:d9:c6:
                    0a:42:9e:84:68:df:af:b1:aa:1b:db:57:44:46:c0:
                    df:dd:fe:0b:ea:8e:06:fd:1b:7b:12:ee:1a:30:d3:
                    be:12:75:f1:51:4d:7c:5d:d7:fd:f9:95:6c:fe:55:
                    73:5f:9d:08:2d:66:a0:53:4a:7f:69:5a:0a:4d:f7:
                    7e:fd:08:3a:14:5c:13:2c:ff:98:80:b2:10:2b:10:
                    8b:98:7c:e7:61:01:e6:b3:90:7c:a7:5f:e8:66:88:
                    21:d2:8c:f3:ed:6b:2c:ce:a6:ce:99:e4:f3:21:cb:
                    f8:18:a8:4f:13:c2:0d:93:d3:15:c5:09:56:41:1a:
                    db:f3:4e:4e:dc:ae:c4:9e:eb:a2:2d:d3:2b:cc:cb:
                    e4:ed:e8:f6:15:fc:b7:f1:96:4a:b9:ac:01:b1:a2:
                    af:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CF:52:F4:C7:CD:36:DC:84:32:72:35:0A:C6:05:09:98:69:5E:4E
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f1:0f:58:d0:2d:ee:01:81:48:6f:69:4f:85:52:6e:c2:a9:
         17:b7:b3:bc:a2:98:f6:29:ad:f7:d7:45:f3:69:57:77:34:5f:
         21:53:40:5a:82:cd:03:fa:3d:d0:5f:9e:e1:95:06:46:15:53:
         59:30:a4:07:93:e2:ed:57:98:f0:1e:7b:f6:1c:fe:b7:b8:af:
         36:61:6c:7e:68:1e:2a:a9:ea:6c:62:76:aa:ab:84:81:90:cc:
         ce:3c:28:9d:eb:25:ec:2d:dc:35:28:c0:08:6b:34:a7:3e:34:
         60:bc:0c:42:b1:1b:7f:6f:0c:49:20:e3:fa:e6:e7:c3:de:d1:
         6e:94:bb:54:38:0c:4f:65:ba:d5:9a:a3:77:ba:54:7b:ad:ad:
         32:00:1a:7b:f3:2a:8e:94:0d:64:c1:31:69:ac:d7:78:c0:f3:
         14:29:b3:a9:62:b0:67:29:a6:b9:7e:93:6c:32:f8:99:3f:b7:
         d8:a8:4f:bd:d3:d7:08:7a:a7:49:4d:9c:22:b8:a3:03:73:d5:
         d5:c0:35:2a:be:a1:b1:5c:8b:ea:f7:06:37:26:19:25:2b:4c:
         8e:cb:d0:41:10:b5:af:83:07:47:53:18:37:dc:83:bd:d3:b5:
         72:61:fd:99:7d:09:8d:74:1f:72:6b:0a:4c:21:8c:0d:48:89:
         5c:e2:33:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:41:43 2025 by rpki-client