Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
File:                     BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json)
Hash identifier:          SR7oUWalsHK4bPrHZwxPLUro2tjvOq2DmLLp7kuL1f0=
Subject key identifier:   92:31:AF:0F:EE:F3:96:B1:9D:C6:FD:63:A1:09:34:0C:88:3B:9A:78
Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2
Certificate issuer:       /CN=04bec7578450f945d4f334df600c61a6f47232f2
Certificate serial:       019A142951FC8F669B74307FF686F008CB7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
Manifest number:          46
Signing time:             Fri 24 Oct 2025 03:00:43 +0000
Manifest this update:     Fri 24 Oct 2025 03:00:43 +0000
Manifest next update:     Sat 25 Oct 2025 03:00:43 +0000
Files and hashes:         1: 0n3IhvMlD8R2xsMnJ9ZPf0nDToE.roa (hash: t2Tn22z9Q7lcMtYGDqmIRPKsokDYXbfrCxFsJmnIYnc=)
                          2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: nbDItOI3dj1w5rTBurATsQyruxBWXU2vW4UKatr+p0c=)
                          3: Cch2VifmQnrl3ySCO9FpJWyP-jY.roa (hash: 2g5UoC4Ft4ADLPnKCU1ruihX3luMvHq35SeKVhY1no4=)
                          4: Dc-BfiZIADDfJyyUXbSq_9zpR8c.roa (hash: FPbL8Lg90NHmUgvGvaONurl4W9W2qlIvpuWREBmyr5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:14:29:51:fc:8f:66:9b:74:30:7f:f6:86:f0:08:cb:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2
        Validity
            Not Before: Oct 24 03:00:43 2025 GMT
            Not After : Oct 25 03:00:43 2025 GMT
        Subject: CN=9231af0feef396b19dc6fd63a109340c883b9a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:40:92:16:9e:3c:a9:28:9d:33:6e:49:92:cf:
                    f6:63:ef:46:49:9c:05:80:c9:8f:e2:14:85:2f:80:
                    77:8a:69:61:ed:18:b6:f4:e4:8d:fb:81:72:39:83:
                    97:a7:d9:83:84:b2:47:41:7f:0a:85:83:75:6b:b8:
                    aa:32:e8:2c:f5:52:09:28:ab:a9:36:b1:6d:a8:67:
                    89:c9:53:9e:c3:e7:51:4a:c5:a8:c3:db:ce:a7:43:
                    cb:c4:b7:98:4e:4e:f8:04:13:58:bf:8d:be:18:0d:
                    33:27:10:25:ed:08:fa:70:8e:fc:54:2b:de:69:0f:
                    2a:36:38:93:c6:40:a8:c9:17:9e:d8:03:05:e0:e2:
                    5c:da:69:af:b7:9d:85:cd:fa:3f:f8:fd:6d:22:ec:
                    a3:34:6d:42:01:da:45:db:d4:97:97:2c:9d:5b:33:
                    59:f4:c6:af:90:b7:44:e5:9b:dd:d3:34:a6:64:05:
                    55:ae:1f:ee:c8:20:9a:70:a7:23:93:87:ef:9c:a4:
                    a4:5a:d4:11:3b:e8:5e:31:3a:93:34:f7:d9:83:58:
                    12:bf:d6:72:98:72:33:87:93:f7:6f:07:f3:d3:32:
                    48:b8:cd:29:51:fd:41:a1:5f:76:9a:7d:6b:c9:2e:
                    e8:50:7e:e7:54:e2:05:1c:fe:7f:02:18:76:cb:f4:
                    b6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:31:AF:0F:EE:F3:96:B1:9D:C6:FD:63:A1:09:34:0C:88:3B:9A:78
            X509v3 Authority Key Identifier:
                keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:e0:ee:29:6f:7e:28:24:6d:80:6b:3b:67:cc:58:cf:d5:
         5c:62:03:85:45:cb:86:83:6c:15:e9:de:b0:de:71:c1:e3:65:
         a6:0f:41:04:f8:db:11:dc:b2:a2:bc:14:4b:c9:a2:6a:9d:93:
         36:cc:3a:a7:59:63:17:00:9e:12:66:73:74:a2:6e:74:b3:62:
         86:ba:99:86:2f:12:5c:bb:58:e9:4d:e7:d0:8e:25:00:b1:f3:
         cc:31:94:d0:8c:b6:26:fe:f9:d4:6a:72:6a:fd:2b:16:5e:2a:
         1c:72:2d:05:1a:4e:d1:a6:78:f1:0c:a6:31:7c:32:fd:ca:a4:
         b9:fb:1b:a9:87:ab:fe:5f:13:82:11:71:2b:99:87:68:78:c0:
         59:39:3e:a7:6d:b1:37:b1:ff:f9:74:fd:4a:66:62:7f:bb:d1:
         96:2a:a5:68:9b:b8:02:7e:39:95:3b:a5:15:5a:f2:92:7b:64:
         39:d7:da:a2:00:a2:44:fa:0e:10:4f:3b:12:a1:0f:d5:95:4d:
         ea:cb:76:9f:ea:ef:8e:f0:e0:4e:b7:3b:fa:97:fa:37:58:23:
         40:f3:b3:83:4f:51:da:28:ad:48:93:a2:87:92:3a:76:f5:c9:
         1b:ac:79:79:fe:25:e1:57:8d:f7:22:79:7f:eb:dc:ff:7c:33:
         9a:d9:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:59:04 2025 by rpki-client