Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          w2KAHjWW3/tJkJ9hgx3YFv+iU8/QKuMgsTCrWKue43s=
Subject key identifier:   54:87:52:E9:9E:DD:44:4B:42:87:19:CE:A5:CF:5E:17:78:78:2A:CB
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       0199228C3821B091EE8125ECB7B8619028A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          11EE
Signing time:             Sun 07 Sep 2025 05:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 05:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 05:00:38 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: 5rUIciqrukOV71Iss69Q1YYlToDZQwFT9zuM6a045e4=)
                          2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:38:21:b0:91:ee:81:25:ec:b7:b8:61:90:28:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Sep  7 05:00:38 2025 GMT
            Not After : Sep  8 05:00:38 2025 GMT
        Subject: CN=548752e99edd444b428719cea5cf5e1778782acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:70:e0:1d:f6:51:61:0e:3f:b0:a0:f8:ea:5c:
                    f3:74:49:39:6f:8c:3a:91:c3:67:0e:a2:5e:95:8e:
                    16:7d:74:74:17:ee:ab:ab:b1:e7:f3:81:0a:0e:41:
                    b5:cd:4e:8c:f3:65:98:c4:7e:b5:d6:d3:37:82:2f:
                    6d:c8:b7:db:7f:3a:a3:f1:63:a7:69:7e:08:29:b5:
                    60:15:ee:42:0e:c2:cf:1a:7f:a3:b2:3f:1a:e2:37:
                    7b:1d:99:48:1a:4f:d6:80:4d:9b:1d:9b:29:7a:95:
                    e6:d5:d7:3b:c8:0b:36:67:e7:db:32:2a:6d:98:b8:
                    7a:65:66:37:82:ba:30:7c:a8:12:4d:01:8f:53:33:
                    d4:0a:f9:4a:00:5a:9a:1d:e6:61:00:e4:67:4c:98:
                    83:81:e2:ae:b7:a8:a4:ab:27:b9:ba:a3:01:c9:b9:
                    6a:7b:70:63:93:e2:14:6c:7c:da:b2:0e:8a:12:fd:
                    49:a9:4b:29:25:66:1b:b7:b1:25:a9:37:29:d2:80:
                    92:33:23:a1:24:82:86:e9:0b:cc:77:7d:4e:be:7c:
                    05:e2:b5:e5:86:32:63:90:69:22:1b:42:2d:06:9e:
                    84:ed:a9:fe:21:a2:38:12:07:32:51:06:9f:88:ab:
                    28:33:63:4e:ec:49:25:1b:ee:55:f7:13:64:d1:2e:
                    b7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:87:52:E9:9E:DD:44:4B:42:87:19:CE:A5:CF:5E:17:78:78:2A:CB
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:4f:6e:56:03:cc:55:9d:68:db:02:61:db:4a:cb:01:d9:
         4b:72:50:86:6a:0e:d4:34:b8:b1:43:1f:ba:6e:33:96:ec:b4:
         b0:f3:33:2f:5d:b6:e8:cb:f9:28:ef:ee:20:55:0a:95:e1:9d:
         97:24:cb:80:49:68:84:73:0d:fe:49:6d:c9:a7:83:ee:22:9d:
         9c:be:91:b3:3b:40:1e:74:1e:5e:37:df:30:e4:a0:a1:e7:b0:
         e7:b3:6f:53:87:19:ac:b2:fc:d3:c4:4b:f7:05:84:06:d7:3f:
         fa:86:c2:6c:56:c0:55:61:55:a3:65:1f:3d:70:4d:c6:9d:6a:
         b3:32:21:7d:73:4d:e0:9f:9d:d7:d8:98:76:7e:fc:61:e1:77:
         98:9e:9a:d8:5f:ae:52:28:c2:d1:ac:f6:9d:0e:93:88:aa:9f:
         b3:c6:be:ad:1a:ef:5e:73:50:c1:8e:8b:ec:21:cd:20:47:80:
         62:0d:0e:f7:9e:6e:38:ef:9b:be:9c:59:71:ee:aa:14:8b:2f:
         40:34:95:08:4f:82:7d:9f:31:ad:10:d1:9c:a6:5e:66:09:01:
         4b:f1:88:ec:47:74:ea:00:ea:18:48:28:a5:63:bb:91:ef:71:
         b4:10:3b:bc:c9:71:4a:27:4f:c2:15:1c:bb:75:db:d8:7d:3c:
         c3:70:aa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:42 2025 by rpki-client