Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          FGX1ehQRcnzyACxPklDpYNI+n00AvYLg/jRKXqeazp8=
Subject key identifier:   9B:73:6E:03:AE:96:33:7A:10:10:1A:96:9B:B7:E9:EE:6F:D9:92:6F
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       019939826769EED51B1D1C9148448F09B524
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          1682
Signing time:             Thu 11 Sep 2025 16:01:11 +0000
Manifest this update:     Thu 11 Sep 2025 16:01:11 +0000
Manifest next update:     Fri 12 Sep 2025 16:01:11 +0000
Files and hashes:         1: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: 6Y874nP9WVDJn83NCPFYrsgSMKkPWNBJrswJET4MOWo=)
                          3: L7e4J1RQTn0nIwk--GSUaD-UmoM.roa (hash: 2gs+pIrBMmE/Jpl0M+ftbVMtlfnyIgG+tIOj7MBw26s=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 14:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:39:82:67:69:ee:d5:1b:1d:1c:91:48:44:8f:09:b5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Sep 11 16:01:11 2025 GMT
            Not After : Sep 12 16:01:11 2025 GMT
        Subject: CN=9b736e03ae96337a10101a969bb7e9ee6fd9926f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:c3:c9:31:16:3f:dc:e2:12:63:a1:7b:2d:
                    fe:2f:1c:7a:98:2d:86:75:29:85:bc:78:9e:87:fc:
                    cf:c4:39:f2:8b:f8:f7:00:72:03:66:59:2b:2e:d8:
                    82:39:e8:8c:a6:ca:6f:6f:55:f0:af:91:4f:dd:7f:
                    67:0c:86:07:81:89:3d:bb:40:fd:70:de:df:29:8e:
                    13:ab:16:b2:62:b3:fc:77:c3:66:a5:ef:08:95:71:
                    13:6b:49:b4:2f:05:c6:58:24:0c:3b:25:6b:e4:7e:
                    6f:78:8a:6c:f5:b3:98:8b:07:65:fc:3f:ce:52:ac:
                    bb:00:00:65:dc:30:d0:3d:52:e9:2f:bb:1e:b4:af:
                    ee:65:57:80:2f:1f:13:67:22:59:20:ad:49:bc:d8:
                    84:13:b1:e3:7b:0c:0a:9c:46:1d:08:ff:9b:39:19:
                    66:59:3e:74:59:99:84:6f:41:91:fc:ae:8e:f6:2e:
                    9f:56:3a:cb:48:ad:ca:7e:d7:59:2e:6b:27:0e:53:
                    dc:60:9b:6f:7e:7c:79:be:90:1c:73:f8:6f:a1:6d:
                    c0:da:5b:60:a9:ae:ec:52:b6:b8:37:be:1f:6e:e1:
                    95:85:16:97:39:7e:1f:d8:7c:20:0f:d7:49:57:95:
                    03:3e:ab:97:4c:dc:d0:2d:11:27:b0:ec:fb:fe:71:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:73:6E:03:AE:96:33:7A:10:10:1A:96:9B:B7:E9:EE:6F:D9:92:6F
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:27:4e:eb:46:97:a4:8b:6f:25:31:20:af:5a:24:9b:1d:b0:
         ca:87:e0:19:78:82:1d:18:92:13:ae:f7:10:e8:f1:92:2b:96:
         92:4e:b6:72:ab:3d:11:2e:4c:e2:18:d3:e2:e7:a7:9b:fe:98:
         24:10:12:1c:77:56:e8:e6:8d:c0:a2:f9:43:3f:7d:d4:5f:d9:
         45:37:08:9c:f0:4f:75:00:51:f3:6f:17:5f:73:34:e7:1c:e9:
         f9:86:e9:e6:79:c6:69:e0:3d:a7:87:65:5b:b6:97:74:b4:39:
         e8:14:01:a5:bd:53:e8:f7:f6:dc:0b:c8:96:ea:b8:ce:13:1c:
         c6:80:72:04:71:3f:4d:74:1b:af:eb:c5:54:57:2d:32:4e:17:
         f2:68:23:76:87:2b:64:81:6c:6e:46:9c:27:69:4c:ea:ab:93:
         25:12:8c:90:40:0a:08:d5:5b:d8:6d:f2:03:f6:26:27:97:ce:
         85:c8:fc:e1:31:eb:c2:b6:8a:9b:fd:23:a7:85:1e:47:e8:be:
         4d:ad:8c:9e:1d:e5:12:50:96:5d:a7:d8:b6:24:3f:66:84:47:
         42:b6:04:99:76:31:77:d4:60:37:e5:a8:b8:86:f5:6c:ac:8f:
         34:bf:13:4b:c0:41:cf:dc:ae:5e:ca:55:1c:d3:15:9c:f9:0b:
         01:59:c0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 18:16:32 2025 by rpki-client