Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File:                     BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier:          cw5z1QuzagqTRIZ6ONhOQWQIGOhDDHtT5KhfNhzi2pU=
Subject key identifier:   D6:5F:13:BA:78:E7:DC:1B:5A:E4:37:85:72:7F:09:B6:35:2E:9B:76
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer:       /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial:       0198D5158AA0A39F466F6542D1E2FBD04A1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 04:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:15 +0000
Files and hashes:         1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: NPOJ/LvVgKQVvT/n+WKtD9mdvnG3PjbQJ/6dWCe1A2w=)
                          2: BliaGrjDAqHKNEj9Mx9veOEBPEw.roa (hash: Zp3YmeNzMTw4uQ2BI2h1hZyUbxrVTAnKdQaDtTTNRXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:8a:a0:a3:9f:46:6f:65:42:d1:e2:fb:d0:4a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
        Validity
            Not Before: Aug 23 04:00:15 2025 GMT
            Not After : Aug 24 04:00:15 2025 GMT
        Subject: CN=d65f13ba78e7dc1b5ae43785727f09b6352e9b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9d:ca:98:f1:c7:6f:fe:27:07:f3:11:91:d1:
                    b9:0f:3b:69:ad:f2:ce:e9:d8:0d:c3:44:f9:5f:36:
                    cc:89:7b:a4:c8:4c:5c:d3:bd:e2:04:ea:00:aa:60:
                    56:30:72:78:3d:a4:cb:57:c4:42:2d:29:8f:a7:db:
                    55:a8:68:7c:21:5e:29:d4:44:ad:85:b8:6e:1b:4c:
                    d9:04:a0:25:f3:6d:e3:ff:30:ba:02:4b:d9:8e:85:
                    81:bd:31:e2:61:25:d7:8f:a8:6a:94:6f:fe:1a:c2:
                    a5:08:89:e0:5d:a2:1a:07:62:f6:da:c5:76:7c:95:
                    b8:4b:ae:5b:e5:18:62:32:e1:a9:88:f5:5b:70:05:
                    fa:6e:eb:17:71:4d:c7:a2:9d:d0:f9:00:d5:40:e7:
                    5c:51:89:66:d6:61:9c:83:e1:94:93:3b:1c:0a:55:
                    6b:9c:94:f2:f5:f7:93:ff:f8:e4:9d:2e:e4:68:84:
                    04:71:f1:74:b7:78:cf:81:e4:41:6f:27:bc:66:36:
                    4f:ec:0c:0e:c2:b1:09:7e:44:9a:43:6f:01:56:b3:
                    68:b7:7d:24:da:3f:c0:e8:22:e5:20:b0:ef:dd:5a:
                    e1:71:74:cd:26:ea:4a:25:1a:18:9a:94:ca:19:97:
                    f8:f4:54:f9:61:ff:b4:f2:1b:54:f9:36:b5:c8:55:
                    ea:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5F:13:BA:78:E7:DC:1B:5A:E4:37:85:72:7F:09:B6:35:2E:9B:76
            X509v3 Authority Key Identifier:
                keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d5:5d:9e:87:73:5e:84:42:56:5d:fb:70:49:2c:a6:80:de:
         76:16:67:88:1f:6c:5c:3d:c0:18:d9:bf:ba:8a:20:53:e1:2d:
         e6:f4:99:30:7f:28:85:ad:8a:b1:15:ef:e8:9b:da:8e:de:a5:
         b3:01:2c:2f:18:b3:e3:00:1e:25:7f:cc:df:ec:c3:fc:23:16:
         7d:11:b2:1e:fa:36:b2:37:14:2c:c5:8e:f8:fc:66:9f:cf:e3:
         f2:43:8f:52:84:da:78:1f:64:f4:82:f5:e4:52:64:4b:08:4c:
         31:8b:f4:3e:e9:3b:d9:ae:24:66:7b:5c:e4:de:18:d8:62:e1:
         4c:45:b6:e3:53:cc:cc:a1:33:a4:1a:1f:48:87:ec:14:d5:73:
         2c:2f:c7:ee:c8:37:eb:35:98:f9:dc:4e:ae:b9:e4:c7:eb:8c:
         b5:58:1b:10:3a:45:9c:a7:be:ac:2b:8d:4b:7f:69:9d:ab:32:
         71:b8:0d:ba:b9:69:e7:22:fd:8c:b8:00:c2:61:b5:d8:02:1d:
         fe:a2:90:ef:03:1f:69:57:30:29:f2:50:0c:c6:55:dc:19:82:
         b7:da:d8:c4:02:06:e1:08:9c:0b:35:80:11:84:13:10:39:fd:
         6d:22:0b:d8:4b:ee:ce:32:c5:61:91:bf:23:11:1d:a2:50:dd:
         ce:53:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 07:04:20 2025 by rpki-client