Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          CItd0U1J6DQevfv8hHGwqQNIvY7pWrqkEGmDtb/z6UQ=
Subject key identifier:   95:B1:F6:DA:53:CC:66:0F:31:82:90:4F:BF:AA:39:98:5F:60:E7:7B
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       0198D4E01727A5B96F37236EC649CF1DA903
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 03:01:52 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:52 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:52 +0000
Files and hashes:         1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: HwJPiR6AO6I7IJYiKlyRWx2lXmuZbQ44UU8xpQ7IJjw=)
                          2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:17:27:a5:b9:6f:37:23:6e:c6:49:cf:1d:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Aug 23 03:01:52 2025 GMT
            Not After : Aug 24 03:01:52 2025 GMT
        Subject: CN=95b1f6da53cc660f3182904fbfaa39985f60e77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:88:59:44:cc:e7:80:89:2d:4b:07:b3:85:
                    48:6e:ca:28:37:8f:31:16:11:49:16:a8:3a:ec:98:
                    08:27:29:1f:32:cc:aa:1a:1f:87:7a:af:9e:3d:8e:
                    9c:6b:f8:d9:7b:dd:df:99:50:95:95:d4:b2:16:23:
                    89:96:b0:f7:bd:e8:b6:ce:38:da:87:2b:1e:22:4f:
                    68:66:b3:60:06:3f:85:5d:7b:6e:d4:b7:e8:79:e4:
                    e4:87:c0:b4:53:e2:da:d8:42:d5:f7:01:dd:7b:5f:
                    6a:87:5c:69:2a:0d:fa:93:cb:72:57:d1:51:ef:8c:
                    a2:e5:68:39:0b:33:db:ae:ae:c4:bf:11:82:9c:5b:
                    4a:f8:87:07:89:e6:95:cd:29:73:e2:c3:b6:f7:28:
                    7c:bc:d4:07:a5:c3:26:59:de:f3:56:df:51:cc:ef:
                    b4:42:02:49:a1:bc:29:ab:c3:f7:d5:b8:96:4e:a2:
                    f8:e8:dc:1c:50:a4:3b:b9:82:d0:58:44:b0:08:a9:
                    ce:7e:03:e8:6e:9e:7a:94:3c:21:ca:c1:c7:f8:34:
                    81:8b:e7:77:b3:21:b0:54:2c:72:45:24:58:8c:31:
                    83:52:95:95:b4:2e:32:92:1f:82:c0:9b:6b:e7:91:
                    34:ed:fd:c0:38:6e:7f:d6:ca:8f:ff:21:0b:2a:4e:
                    3a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B1:F6:DA:53:CC:66:0F:31:82:90:4F:BF:AA:39:98:5F:60:E7:7B
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:df:28:a8:7f:ac:76:82:31:78:89:26:0a:bd:61:85:44:d0:
         cc:19:1f:16:ce:24:a9:eb:16:da:49:2f:83:ff:f0:4c:10:b5:
         2a:3c:3b:9a:b7:91:77:ee:26:a5:aa:75:dd:c2:eb:b0:65:97:
         ab:33:2b:13:f7:11:49:d6:1c:3c:63:09:16:31:42:be:91:00:
         8a:5d:bf:5d:b8:bb:82:e3:7c:fb:cd:61:a9:ef:c4:fa:e6:b9:
         8b:bb:7f:00:c0:b4:66:e5:b3:4c:82:1b:c2:c5:e6:b7:8d:1b:
         02:0f:d9:03:98:67:90:3c:80:db:51:2f:bf:eb:a0:1d:d9:09:
         a3:9c:a9:ba:38:41:ff:7d:3c:9c:20:6c:aa:f9:58:48:30:fd:
         ae:5a:84:a0:02:3a:13:10:fa:3b:78:34:f3:90:8a:b0:87:b2:
         a7:24:79:66:fc:65:82:7b:c8:91:1d:88:07:1e:15:63:70:63:
         a1:cd:5d:19:47:9d:65:b7:a5:a9:64:97:f5:2c:c7:db:64:ae:
         b3:06:a0:cb:de:ab:75:f2:5b:88:66:92:5c:f2:5a:b3:d7:fd:
         d7:b5:1f:36:a7:35:c9:db:3f:73:e6:fb:dd:c6:d8:53:73:66:
         de:28:30:7d:a9:ae:e2:ea:80:ca:25:f8:02:8b:00:e6:b8:46:
         57:72:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:31 2025 by rpki-client