Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
File:                     BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft (raw, json)
Hash identifier:          dHQm4YEhfOncAz76cw/GIGIEwZvkTd3gUmRUL/6GXzM=
Subject key identifier:   53:9A:54:F3:1E:ED:38:7C:25:E7:57:DA:A5:6B:5A:31:FB:A8:29:88
Authority key identifier: 05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01
Certificate issuer:       /CN=056c66d45fe7e2f35599572a776b12764dc69a01
Certificate serial:       0199225572168408ABB15231DC1B1DAA25F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
Manifest number:          77
Signing time:             Sun 07 Sep 2025 04:00:49 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:49 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:49 +0000
Files and hashes:         1: BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl (hash: /0K9792vdMv2ZRqxNjK1LRE/mP+VjALt0zmKraAjp1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:72:16:84:08:ab:b1:52:31:dc:1b:1d:aa:25:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056c66d45fe7e2f35599572a776b12764dc69a01
        Validity
            Not Before: Sep  7 04:00:49 2025 GMT
            Not After : Sep  8 04:00:49 2025 GMT
        Subject: CN=539a54f31eed387c25e757daa56b5a31fba82988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:05:05:4b:86:0a:b6:f8:4c:c1:b3:1d:b9:
                    46:77:f5:51:01:c1:05:c8:eb:f7:82:41:a4:f2:f9:
                    f0:6e:b0:69:bd:98:f8:c5:45:e0:39:c6:9e:60:32:
                    ad:ac:9f:98:38:3e:2a:eb:db:4c:27:be:54:4a:97:
                    a5:70:ae:c5:dd:da:e6:3a:4f:b7:11:b5:21:32:71:
                    55:44:45:97:20:4d:a5:6e:25:06:d7:77:29:b9:8d:
                    95:a3:25:14:f0:37:0f:a7:b5:cc:15:6c:f6:ca:fb:
                    eb:15:c5:43:b2:47:de:e2:5d:3e:4f:f6:9f:49:19:
                    91:ad:38:76:d9:23:36:5e:91:9b:bc:18:27:94:ee:
                    9c:4c:44:95:5f:00:1b:0f:ef:4f:52:bc:7e:5d:91:
                    8e:5b:01:65:b4:42:f2:8b:98:92:2f:59:c0:d5:4d:
                    62:e2:ad:86:4a:4f:81:7c:34:da:56:51:3b:04:23:
                    1f:e2:83:c8:6f:f1:f1:c9:32:ad:79:d0:04:52:5d:
                    04:c6:18:66:11:32:f0:fd:4a:f1:13:c8:31:55:f3:
                    6d:3f:44:1a:ab:62:4d:f4:f2:6f:38:e6:0f:2b:d1:
                    bb:5a:1a:ef:58:a0:e4:4e:17:91:d9:d5:63:a1:0c:
                    02:c4:38:21:a4:c3:f9:e7:3d:32:a1:1e:6d:af:8f:
                    0f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:54:F3:1E:ED:38:7C:25:E7:57:DA:A5:6B:5A:31:FB:A8:29:88
            X509v3 Authority Key Identifier:
                keyid:05:6C:66:D4:5F:E7:E2:F3:55:99:57:2A:77:6B:12:76:4D:C6:9A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWxm1F_n4vNVmVcqd2sSdk3GmgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c02c5c-ea17-4893-85e0-0205460e8990/1/BWxm1F_n4vNVmVcqd2sSdk3GmgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:7b:7a:17:26:3c:55:a3:7f:43:c9:8f:e1:2b:49:3e:85:64:
         a4:a8:1d:78:81:5e:c3:44:1a:85:a8:31:e3:da:ca:fe:51:21:
         0f:c5:94:40:e7:22:00:4f:f3:d7:d7:0e:db:94:09:3b:a5:de:
         f5:bd:45:ed:bc:af:c3:34:83:43:c1:34:8c:31:e7:d7:bd:4a:
         67:f7:41:72:90:b9:a0:1e:fd:60:6f:49:f1:06:13:a1:fb:f5:
         7c:b1:0d:5e:59:ce:5b:51:95:08:ef:82:52:56:f5:ec:de:c9:
         63:34:55:72:2f:af:4e:cb:79:fb:10:82:b9:c8:db:7a:d9:56:
         60:c5:5b:49:5c:fa:05:58:63:df:2a:03:ef:f9:d9:92:19:22:
         b1:73:0a:c7:ef:04:3e:2b:ef:af:21:db:f5:8a:a5:6d:09:3b:
         66:61:3c:18:e7:7c:c4:02:a1:a6:cd:72:af:3c:bf:7b:1b:c9:
         de:9e:df:49:17:71:3c:39:5e:4c:cb:eb:5f:e3:99:39:24:d9:
         1e:ce:a3:fa:e0:bc:f2:01:34:de:9c:9c:05:31:2f:db:04:f3:
         9c:ab:51:da:48:64:8d:93:e8:c5:d1:d4:4f:79:01:0b:23:79:
         a1:d8:62:d2:73:9f:f6:dc:8f:3a:2a:cb:4f:31:65:5d:ae:a2:
         2f:68:4e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:23:06 2025 by rpki-client