Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          5Et15bxpG6dWJewgivg/gcf7LamDwyFy+ykevzUFHlE=
Subject key identifier:   B7:EC:93:10:61:62:48:44:97:54:82:0F:9C:DE:11:CC:E1:A8:FE:24
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       01991EAFD38E4FFFC24C3F2B4EE5835B7CCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          1670
Signing time:             Sat 06 Sep 2025 11:01:03 +0000
Manifest this update:     Sat 06 Sep 2025 11:01:03 +0000
Manifest next update:     Sun 07 Sep 2025 11:01:03 +0000
Files and hashes:         1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
                          2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: JE+Is1N4hnOTXKFqSuJJ8pJtt5zeM5jdvio62Hvn6uE=)
                          3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
                          4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
                          5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
                          6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1e:af:d3:8e:4f:ff:c2:4c:3f:2b:4e:e5:83:5b:7c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Sep  6 11:01:03 2025 GMT
            Not After : Sep  7 11:01:03 2025 GMT
        Subject: CN=b7ec9310616248449754820f9cde11cce1a8fe24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:fc:1d:07:2c:c5:34:ab:ba:d1:48:55:f9:
                    f7:87:6e:9c:02:a4:db:f7:dc:4d:30:54:df:24:e2:
                    df:7b:7d:ab:4e:53:01:4d:d3:1a:2f:dd:4d:29:5d:
                    06:fd:65:2a:14:74:f0:f0:ad:b1:f9:69:04:f9:ff:
                    03:58:08:b8:c1:7a:3d:8e:26:8b:3b:f1:c6:f8:64:
                    0f:7f:0e:d6:79:a7:d2:91:15:11:82:e9:b3:a2:ef:
                    5e:b4:2d:38:c3:62:09:15:87:ef:f4:3f:a3:4e:8c:
                    ac:8c:a8:ba:b6:39:50:e7:d7:43:5b:7d:46:a8:f9:
                    69:87:32:e6:47:72:fb:55:eb:88:f5:f1:17:70:45:
                    b5:75:72:d6:32:6e:f7:0e:b4:cf:4d:05:ee:24:74:
                    86:8a:09:c9:c1:72:2f:d3:e4:12:2b:12:a9:54:16:
                    a8:ed:ea:f5:fb:57:13:de:61:96:ed:5b:22:78:4a:
                    cc:99:a3:df:78:f1:b1:85:93:db:78:6b:02:d0:b4:
                    f8:af:72:8a:c9:aa:ff:c3:0a:a1:9c:00:bb:be:93:
                    9e:e0:f7:b4:a5:9d:d3:df:b0:ab:16:9b:7c:b2:89:
                    1a:95:93:5f:7a:1f:a3:08:3a:27:26:97:db:ca:4f:
                    5e:b3:f2:39:2f:b4:c2:30:3b:44:29:fd:01:24:98:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EC:93:10:61:62:48:44:97:54:82:0F:9C:DE:11:CC:E1:A8:FE:24
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:c2:75:4a:5a:bc:c6:c6:b6:b0:2c:6c:ab:ef:aa:0c:75:
         47:00:fe:60:f2:66:30:ef:07:a1:02:94:96:8f:82:9f:9f:98:
         07:9a:fe:7e:4d:68:39:cf:33:0b:99:4d:79:d5:ba:4d:c6:17:
         04:0e:e3:7b:1f:37:1c:c9:0f:d5:2c:8a:c5:3a:16:dc:6d:99:
         1e:dd:ca:de:cd:67:5d:13:c3:d1:74:63:c7:b3:74:bf:ef:17:
         ee:99:53:06:d1:0b:30:92:e5:c2:2a:fa:c5:d5:24:30:48:6a:
         35:49:f8:16:36:2d:b4:50:d4:d1:4c:fb:8b:e9:30:46:fa:4a:
         4d:4b:19:cb:92:f4:6a:d7:bf:dd:47:4e:04:3c:06:0b:64:09:
         2a:8b:6c:d6:a5:65:29:8d:48:25:69:a5:c7:0f:82:dc:d4:3a:
         c7:90:47:6e:6a:b3:33:98:6b:37:80:73:60:ca:2f:ae:2d:11:
         89:32:9f:9b:85:95:39:47:54:e6:ed:be:da:16:d5:19:5b:f8:
         b8:0d:de:9d:52:47:59:26:b9:97:d2:f4:62:f7:6f:c5:17:f1:
         1b:de:a3:de:6e:8f:47:f6:b4:e4:1f:46:9a:83:46:51:36:fd:
         f0:87:93:7a:e6:d6:f4:1e:dd:e0:f3:92:a5:0d:71:3d:b7:d9:
         6a:d7:2e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:25:52 2025 by rpki-client