Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File:                     BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier:          cXc+7/P00idSjdsHfC8PkxRa+DbHXrSveA+WexbCByc=
Subject key identifier:   B9:CB:1A:57:7A:00:50:F0:62:DA:E4:2B:CA:F7:01:46:05:3D:DD:84
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer:       /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial:       019962EC13F2991C00D6C390965AF09A9412
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number:          1693
Signing time:             Fri 19 Sep 2025 17:01:02 +0000
Manifest this update:     Fri 19 Sep 2025 17:01:02 +0000
Manifest next update:     Sat 20 Sep 2025 17:01:02 +0000
Files and hashes:         1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: afd+PqcLdV53grDv9JIyI2d1CrUqu8VDFseqeI1nG48=)
                          2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:62:ec:13:f2:99:1c:00:d6:c3:90:96:5a:f0:9a:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
        Validity
            Not Before: Sep 19 17:01:02 2025 GMT
            Not After : Sep 20 17:01:02 2025 GMT
        Subject: CN=b9cb1a577a0050f062dae42bcaf70146053ddd84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:81:2e:46:76:96:67:b0:74:bd:63:ba:c4:
                    88:f2:e1:16:58:3b:d6:7c:79:03:c6:50:7f:0f:99:
                    34:2c:78:67:0a:1f:84:44:09:6f:f9:dc:28:26:6f:
                    7c:45:6c:3a:88:23:a3:88:c8:4e:87:5b:fb:cf:2c:
                    f2:31:e8:c7:cb:c2:61:fa:a9:1d:be:4c:b5:7b:7c:
                    d9:ab:c6:85:b4:6e:33:e4:ba:c2:d3:2e:37:e0:bd:
                    18:85:1b:54:41:29:53:6c:78:6c:32:b4:eb:2e:d5:
                    08:8a:75:3d:44:0b:08:df:64:08:9d:9a:f4:47:76:
                    36:bf:c9:d0:0c:c9:b1:19:a6:4c:f4:db:56:0a:2a:
                    73:e7:fc:05:71:69:53:f8:e8:f0:b1:d3:27:13:2b:
                    a3:62:78:bd:37:e5:2d:5d:24:ac:44:c4:8d:6e:31:
                    d7:89:b0:3e:04:12:b9:82:82:d3:9e:e2:70:d9:ac:
                    9d:80:96:bf:c9:4d:5e:fd:cc:13:4b:48:44:53:27:
                    e3:59:a7:03:c7:04:de:db:85:b5:1e:ed:10:5c:e3:
                    e2:b2:e9:bc:ff:ed:d3:a3:d9:b4:79:82:72:12:68:
                    7c:54:60:95:70:6a:ff:1f:36:f0:51:49:c1:34:81:
                    ea:47:08:7c:a4:1e:28:df:f3:27:a0:4f:57:9e:fc:
                    32:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CB:1A:57:7A:00:50:F0:62:DA:E4:2B:CA:F7:01:46:05:3D:DD:84
            X509v3 Authority Key Identifier:
                keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:e9:b2:89:1b:d7:43:2d:31:48:3e:68:18:59:41:94:8a:
         14:3b:a0:3e:fa:4f:69:0f:8d:9f:0c:8f:84:64:46:32:a1:46:
         c0:18:d8:0d:42:72:67:9c:ba:48:ae:21:0c:2b:8a:de:a4:6a:
         5b:f1:de:47:27:3e:24:64:88:9d:6b:b7:10:30:18:e8:d0:3a:
         ac:19:8c:6f:00:4f:c1:0c:af:90:da:3c:ee:b7:9b:8e:6c:af:
         9f:32:41:80:8b:8b:57:aa:52:3f:1b:f0:3f:55:c5:7c:a3:a4:
         3c:71:2a:5b:cb:9a:73:ce:fe:6c:a0:b1:ae:bc:6d:7d:84:e7:
         cc:1a:62:2f:ec:38:88:c7:27:7e:3b:d8:f9:58:6a:57:b6:e3:
         d9:aa:60:b2:0c:04:b5:10:c5:19:cd:7a:1d:18:37:1f:ee:42:
         3d:33:2e:32:7b:8e:18:6f:14:7a:1f:97:bf:23:4a:31:fa:fe:
         a4:d4:3d:48:2c:6b:b0:ad:ee:fc:c2:91:14:98:91:d8:fc:a3:
         b5:25:21:04:84:82:71:40:61:f1:9f:23:92:74:dd:69:c8:99:
         95:98:85:c7:be:f7:9e:ae:eb:03:e0:60:0b:1c:c1:c4:3a:15:
         81:f6:cf:2d:1e:27:79:82:8b:31:12:69:11:75:4a:81:17:04:
         95:01:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:15:55 2025 by rpki-client