Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
File:                     BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json)
Hash identifier:          cM1ybDRW7LwKJtfBxRVOrYmPzgv+FiLe0j8KGsDmFa8=
Subject key identifier:   29:9A:0C:47:18:C1:47:C0:27:74:9F:EC:E4:B7:4D:5D:83:73:DC:BB
Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74
Certificate issuer:       /CN=063b660f569b546b530ec6de69b308b3693e7f74
Certificate serial:       01984A413DDF0DED1C67253F31FE7430BE80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
Manifest number:          1597
Signing time:             Sun 27 Jul 2025 05:00:46 +0000
Manifest this update:     Sun 27 Jul 2025 05:00:46 +0000
Manifest next update:     Mon 28 Jul 2025 05:00:46 +0000
Files and hashes:         1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: slM+zVJnRBi2rKHP8JQiOtQR/BeUcH89edlYVsoeFBE=)
                          2: r96qSxTq9VrHJe-onW3LkjF49Kw.roa (hash: p6sDqHuX82k5Unz8oj5BmB2jdvjyrfcaODzxUCtvtmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:41:3d:df:0d:ed:1c:67:25:3f:31:fe:74:30:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74
        Validity
            Not Before: Jul 27 05:00:46 2025 GMT
            Not After : Jul 28 05:00:46 2025 GMT
        Subject: CN=299a0c4718c147c027749fece4b74d5d8373dcbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f5:d0:f5:ae:8f:4d:f0:52:94:3e:95:92:4c:
                    e8:b2:54:22:ed:8e:11:72:e1:93:b6:fe:8b:8d:d1:
                    b3:4d:fd:d1:12:08:38:72:5b:bf:54:1c:c5:52:a7:
                    85:48:c7:3c:e5:ea:80:a2:09:18:b2:e1:00:54:76:
                    f5:e8:f1:16:6b:04:22:1c:30:e1:71:b1:d2:0e:c0:
                    ab:0d:74:18:7a:2d:74:9a:e9:73:59:94:2b:31:87:
                    40:d7:e5:27:68:ac:01:8e:0b:f7:e7:47:c9:64:b4:
                    0b:ec:89:e6:32:4e:09:40:46:07:42:fa:c1:96:55:
                    e7:4d:e1:fb:e2:dd:ab:a4:98:c1:85:dc:4c:d5:f7:
                    df:68:ef:81:bd:4f:c8:b8:9c:77:32:a4:67:0a:bc:
                    29:48:24:8d:4c:78:2a:8f:e9:e7:28:61:dd:91:db:
                    2c:ac:a7:40:ab:04:15:76:78:23:45:0c:42:25:e8:
                    4a:e8:ce:e4:59:80:9a:5d:49:f0:57:40:4b:f0:94:
                    18:82:e2:88:cc:1d:73:ad:3f:7e:fe:f9:34:9f:28:
                    cd:6f:01:69:5c:1d:0b:31:99:d7:fb:f2:4c:dd:70:
                    f2:87:5d:ad:0a:de:6f:16:75:b9:64:e3:3e:d2:76:
                    7f:a4:6e:19:24:3f:86:ea:15:25:e4:64:3f:74:e9:
                    08:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9A:0C:47:18:C1:47:C0:27:74:9F:EC:E4:B7:4D:5D:83:73:DC:BB
            X509v3 Authority Key Identifier:
                keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:18:2b:90:e0:61:3b:6f:a4:bd:eb:db:8f:16:d5:78:1f:bb:
         8c:01:3a:a9:f9:e9:a5:44:f8:07:7c:54:f1:fe:a9:b1:56:4c:
         48:f4:03:48:6e:21:0e:02:06:52:c0:c2:ae:65:ce:3f:be:5a:
         5e:e6:e9:f9:70:19:8a:98:9e:d4:52:0c:de:b9:32:e1:96:9c:
         aa:e4:06:96:4e:98:46:7a:81:81:31:a5:cc:8d:06:64:f9:37:
         5e:e3:0d:b7:5a:07:c0:05:26:b5:dd:c5:5f:b5:78:55:19:2c:
         43:08:5a:f4:51:bf:8b:bf:49:38:40:1b:32:0a:15:8c:d9:a8:
         cb:b0:79:ed:f1:aa:de:d4:66:f5:90:19:30:f8:48:c9:23:42:
         fe:c7:1d:33:93:09:8a:1a:d0:a5:03:5a:f3:27:bd:77:e1:8f:
         c3:0b:a5:d2:03:e4:9a:5a:9f:0d:78:69:87:92:83:1d:a7:b3:
         aa:07:19:3f:c8:76:32:41:64:85:56:a8:5c:fa:8d:a3:58:5b:
         f9:0d:2a:0d:2f:08:35:ae:91:79:39:da:bf:39:6f:e9:cd:ef:
         80:51:dc:e8:f8:22:a0:19:f0:07:54:61:a9:d8:a8:60:6e:c6:
         91:a4:4c:f6:c8:a0:9b:68:9f:ad:39:cb:0c:5c:cc:9b:4c:5f:
         63:6b:65:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:53:09 2025 by rpki-client