Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
File:                     BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft (raw, json)
Hash identifier:          VPNXZ0pmLf2Kb3bLwouBNfyC/4coZIWEwnEvleHBKPo=
Subject key identifier:   18:6C:91:CF:6F:E6:E2:20:26:89:3F:DE:73:8D:55:BB:14:10:F9:C2
Authority key identifier: 04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57
Certificate issuer:       /CN=04feaefea82b6103dc2b8971e9bdda01669a1357
Certificate serial:       019849D332D7848E9E583C025D067C189D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
Manifest number:          1601
Signing time:             Sun 27 Jul 2025 03:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:34 +0000
Files and hashes:         1: BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl (hash: eblH/AhX9vHCFotmHRt7VBi61WsPDWyxZo2SgYa9gOA=)
                          2: KGXGULqPenaxgRcZexOaxMw7uAU.roa (hash: a8sv7Oftobeso8n8GcBbyLJbE8e5Okcyojcck4A3GpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:32:d7:84:8e:9e:58:3c:02:5d:06:7c:18:9d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04feaefea82b6103dc2b8971e9bdda01669a1357
        Validity
            Not Before: Jul 27 03:00:34 2025 GMT
            Not After : Jul 28 03:00:34 2025 GMT
        Subject: CN=186c91cf6fe6e22026893fde738d55bb1410f9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:93:af:b1:71:7a:f7:94:0c:73:81:91:8a:a1:
                    c1:52:64:21:04:d2:cb:49:63:80:c8:c1:7d:93:8f:
                    72:91:da:7c:1c:7b:bd:1f:9a:6b:16:5e:05:2e:0e:
                    85:3c:d8:d2:86:b4:a6:a3:6b:e8:1f:65:aa:c7:eb:
                    f5:4a:ed:55:2e:cd:0c:91:ba:f6:54:24:56:58:15:
                    de:cf:e0:ab:75:ab:e2:8c:db:45:45:8a:97:eb:1d:
                    0b:2c:32:c0:da:85:60:7c:26:04:5e:28:a0:28:dd:
                    1f:be:47:2e:ae:40:3b:4c:04:25:12:06:6e:e8:6d:
                    e0:27:96:fe:ac:10:94:7f:36:57:31:42:7e:2b:04:
                    d8:7c:0b:fa:99:15:f3:f6:f9:5e:4a:2f:7e:42:d5:
                    3d:23:a4:0a:69:e7:82:97:07:ee:07:af:08:68:54:
                    37:f4:95:dc:5a:cb:c6:85:4d:44:13:ae:ca:4b:03:
                    26:b6:f8:77:f6:40:da:e1:cc:70:90:dc:73:24:7e:
                    e2:85:b7:53:5b:77:54:5d:dc:97:ab:2b:9e:7c:cb:
                    e1:29:e3:81:26:c0:81:c5:13:33:bb:41:60:c1:1b:
                    ba:81:b7:c2:8e:43:2a:19:3f:c4:41:98:62:27:30:
                    2c:c9:92:71:ee:30:ee:d8:1f:1b:71:34:0d:85:51:
                    b1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:91:CF:6F:E6:E2:20:26:89:3F:DE:73:8D:55:BB:14:10:F9:C2
            X509v3 Authority Key Identifier:
                keyid:04:FE:AE:FE:A8:2B:61:03:DC:2B:89:71:E9:BD:DA:01:66:9A:13:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BP6u_qgrYQPcK4lx6b3aAWaaE1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3f9529-7172-43f8-895d-8eeb089b5caf/1/BP6u_qgrYQPcK4lx6b3aAWaaE1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:de:ad:6f:cb:ea:03:7f:8b:e5:02:0a:06:ed:4a:40:a6:
         8e:b1:ae:36:22:7f:5a:1f:45:00:db:5e:99:52:b2:20:66:26:
         3c:9b:c0:d2:ad:d6:32:ae:0e:c5:0d:99:5e:1e:d1:bf:04:6a:
         e7:fd:ae:2f:90:ad:4d:7d:49:54:dc:85:7b:34:ec:73:44:18:
         05:53:ca:40:ce:16:9a:2d:30:9c:00:60:3e:7e:f2:b6:9e:56:
         69:43:b9:e7:95:0b:76:99:ea:73:00:f2:6d:5c:85:73:aa:d7:
         a5:11:e8:f8:29:b1:3f:52:ec:a8:2f:7f:89:5d:91:c4:5b:fc:
         f6:20:fb:2c:fc:37:0f:71:4f:b6:a6:de:08:4c:6b:c4:8f:75:
         d0:3c:b0:89:ca:d7:be:a8:1a:b6:29:eb:a9:6e:d1:c9:23:c2:
         00:63:26:13:e0:09:3d:cb:50:e4:85:0f:fd:ba:a1:6f:f2:ce:
         d5:ed:20:84:97:1f:8e:2f:53:2f:65:74:4c:4a:9a:aa:27:ee:
         b9:b4:2b:7f:1e:22:01:32:24:a2:2f:fc:18:5b:2c:5e:5d:71:
         6e:c4:5d:4d:1d:83:f1:2a:0a:a5:2f:6e:ce:ed:92:e0:bc:6c:
         bb:9b:17:e7:35:4d:32:06:31:8b:41:4c:ba:2f:4e:52:6e:e4:
         bb:fb:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:33:08 2025 by rpki-client