Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
File:                     BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json)
Hash identifier:          UaDHY/ryt/E5COqQ7LnEevFPRDFy3ERTtO1GDBW20xs=
Subject key identifier:   1A:B8:9E:3B:29:C1:A6:E8:35:C7:19:6D:4E:92:87:9F:EC:C0:D3:5E
Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8
Certificate issuer:       /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
Certificate serial:       0198D7E18219C7C3E61CD212E80C6FC39FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 17:02:16 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:16 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:16 +0000
Files and hashes:         1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: IVz3jMCJwV5PB5oi8lEX/SUBBPrU5xajEEYB/6YtOHs=)
                          2: NqaLmcA0hS3kbvvGXTMO3PSyQ-c.roa (hash: /fpzuan/b2/lZgMGOV41W9znkrskBH2VUdOsvVz//ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:82:19:c7:c3:e6:1c:d2:12:e8:0c:6f:c3:9f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8
        Validity
            Not Before: Aug 23 17:02:16 2025 GMT
            Not After : Aug 24 17:02:16 2025 GMT
        Subject: CN=1ab89e3b29c1a6e835c7196d4e92879fecc0d35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ea:ce:44:54:20:12:39:cd:e6:f9:36:42:5c:
                    19:7e:92:7b:74:56:87:42:d7:17:2c:72:c6:22:b2:
                    68:2e:8f:3d:e9:a2:9d:21:5f:d8:a3:e3:e5:09:c1:
                    0b:02:9e:13:84:29:a6:e9:20:17:9c:5a:b8:ef:36:
                    f0:0b:ee:ab:fd:c5:e8:ce:1c:e3:5d:d5:55:f7:d9:
                    92:41:e4:4a:c3:58:ff:24:6c:5c:82:78:50:40:07:
                    d6:4f:83:42:70:3a:ca:88:8e:6a:a6:e9:0b:04:b6:
                    42:06:7d:75:44:8e:3f:1e:a5:bd:a0:bf:45:56:08:
                    da:37:9a:49:08:8f:1c:b8:6b:0f:6c:c0:7f:d5:fe:
                    6a:d1:f5:b5:40:63:d0:99:67:8c:89:c9:42:6a:69:
                    d8:7f:ba:07:f0:f7:87:d5:c1:d6:4b:05:e8:0f:3f:
                    7d:17:b2:36:ee:82:a1:25:30:b7:81:da:cb:70:b6:
                    f6:3c:61:f8:26:5b:db:6f:ad:09:37:0a:0f:c8:aa:
                    29:17:70:c6:a4:b3:d1:5c:a0:08:2c:f6:75:8b:d8:
                    14:43:10:f8:62:20:d2:7a:ea:07:df:92:83:e1:bb:
                    26:2b:80:b0:6e:05:ff:c8:e1:5e:fd:2b:79:c0:3d:
                    30:c3:d9:7f:39:80:0a:a8:29:8c:af:83:29:78:6a:
                    4f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:9E:3B:29:C1:A6:E8:35:C7:19:6D:4E:92:87:9F:EC:C0:D3:5E
            X509v3 Authority Key Identifier:
                keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:7a:7c:e9:7d:1e:50:c4:c4:21:eb:16:fc:03:8b:ef:d5:5b:
         21:0e:14:a3:95:aa:97:80:10:7b:5a:4a:4f:f1:f0:b8:a9:55:
         77:ec:21:c5:fd:ce:20:33:1e:bc:8d:ed:42:58:6f:d0:92:3e:
         b6:c9:f8:0d:69:7f:2c:5b:85:00:98:0e:9e:f7:0d:a5:73:45:
         e8:f7:72:56:02:40:95:cd:46:10:14:2d:22:48:5e:57:a3:89:
         44:dd:d2:21:b3:a3:d6:41:fe:1d:92:de:73:27:ac:b0:36:e3:
         4c:27:1b:f1:0c:74:a5:2a:73:74:bb:1a:bc:3c:06:33:e0:8d:
         43:20:0e:30:7a:96:d4:81:bb:46:54:a8:80:82:dd:12:09:4a:
         3f:53:22:ee:3a:df:45:20:28:32:4a:7d:ab:a1:4c:94:80:fc:
         69:ca:79:58:7b:75:15:65:77:1a:6a:f3:74:24:65:09:30:24:
         c7:3d:d8:b0:f9:18:e7:b2:a0:2c:b0:8b:5d:e4:22:64:27:07:
         0d:d2:61:9f:18:a7:32:34:e7:47:28:38:c8:0b:83:9d:52:3f:
         39:4b:97:ab:18:50:81:6f:d7:69:6a:ca:7c:51:30:e8:5a:05:
         9e:fe:58:f9:a6:5d:98:26:e8:1f:ac:0c:f9:06:6a:c8:46:20:
         f8:68:b4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:41 2025 by rpki-client