Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File:                     bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier:          ixyGk48Talu/GMnKtDnw3o7Ju8yIonZj6KTW/0+o8kQ=
Subject key identifier:   A3:2D:2D:6E:FB:55:97:07:08:00:56:5D:F5:8C:46:A6:E8:1F:FC:23
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer:       /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial:       01984777EF4EC98D4F447E58EBD237DDC3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number:          1604
Signing time:             Sat 26 Jul 2025 16:01:39 +0000
Manifest this update:     Sat 26 Jul 2025 16:01:39 +0000
Manifest next update:     Sun 27 Jul 2025 16:01:39 +0000
Files and hashes:         1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: 44wihWHWRxNOl89sWms3GB2UN7yMWefuGQdkLa0Djqo=)
                          2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:77:ef:4e:c9:8d:4f:44:7e:58:eb:d2:37:dd:c3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
        Validity
            Not Before: Jul 26 16:01:39 2025 GMT
            Not After : Jul 27 16:01:39 2025 GMT
        Subject: CN=a32d2d6efb5597070800565df58c46a6e81ffc23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:04:7d:02:c7:15:1b:39:be:ea:92:37:25:fa:
                    d8:bf:e8:40:a1:5d:6d:03:5b:e0:8b:22:4a:99:b7:
                    47:ec:da:25:cd:9b:16:0f:ea:11:c1:2e:72:cd:a2:
                    42:5f:5b:42:2c:d6:0e:bd:ea:bb:4d:a9:43:eb:8d:
                    84:07:10:ee:c5:f5:05:c5:f8:8b:1a:15:7d:71:84:
                    98:87:aa:5b:02:c9:fd:26:3a:11:13:8f:97:07:6d:
                    d7:e0:3f:a4:d0:cb:5f:98:9b:d8:4c:a2:47:25:0d:
                    0d:c9:ad:66:12:35:b4:12:d6:58:04:36:6d:e1:7a:
                    db:49:d3:9e:92:e0:5a:77:63:79:4e:a1:fc:ca:77:
                    01:3a:29:cc:03:10:22:65:b5:b7:2f:ca:fa:ff:76:
                    37:34:0c:bf:33:09:b7:fb:de:25:20:6f:f0:cb:fc:
                    73:b2:9e:82:4d:dc:c4:df:05:12:50:e3:3e:60:32:
                    e8:a3:db:ef:d7:96:09:e4:bb:b5:41:bd:4b:52:1c:
                    29:97:87:08:b4:f6:ca:b2:1a:bc:b1:e5:a0:39:0d:
                    a0:f1:b2:79:5c:d6:20:56:d1:26:85:27:be:c4:f2:
                    ed:9a:83:2b:c7:09:76:30:f7:d9:6b:d9:77:fd:5f:
                    d1:04:c2:05:62:2b:88:31:64:c9:09:fb:2f:51:5e:
                    e3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:2D:6E:FB:55:97:07:08:00:56:5D:F5:8C:46:A6:E8:1F:FC:23
            X509v3 Authority Key Identifier:
                keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:49:7f:db:a2:e4:aa:7b:e4:1e:97:32:d5:d6:79:f2:00:49:
         88:c0:aa:42:8f:80:e7:69:1b:12:e5:4b:57:63:ed:f5:b0:eb:
         55:69:be:6b:ad:5c:a9:c4:4f:f5:ad:91:84:0c:47:34:ee:bc:
         0f:02:5b:aa:db:da:68:b3:3c:2d:29:78:9d:5b:01:c0:21:b0:
         6d:45:00:f2:e5:09:b8:ee:77:15:7b:0c:fc:f6:59:74:18:35:
         68:43:5f:ee:4b:59:cb:58:8c:25:ea:ec:e2:52:f3:bb:23:a7:
         d3:14:27:c1:be:ff:f8:a0:88:2b:0e:91:47:e1:5e:74:bc:59:
         eb:9e:e8:d4:30:eb:c0:a3:60:d5:51:6d:7e:d5:e7:47:89:f7:
         57:53:be:11:61:4f:9d:f5:2e:df:f5:5f:f9:e9:21:17:48:34:
         37:e6:f7:d7:fc:df:83:8d:71:fa:31:7e:2f:4f:9e:5f:59:62:
         c5:a7:97:59:16:76:b2:bb:68:3f:6e:f8:05:7d:6f:87:d2:9f:
         da:9d:da:3b:5d:10:b0:f8:3c:f2:17:5d:9f:95:82:8d:39:6f:
         2f:41:ca:e1:20:f1:ac:17:3b:4b:ca:2f:41:f8:10:b6:29:9b:
         af:f8:a0:d3:7d:4a:7c:8a:f3:f2:76:00:12:c1:3d:2f:a2:a8:
         43:90:ae:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:30:10 2025 by rpki-client