Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
File:                     BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft (raw, json)
Hash identifier:          5NOBrNjzsvFmUVap5BRlDFcf3iUbbY7FhNZssymdOrE=
Subject key identifier:   AF:AE:9B:24:C2:21:86:49:48:BC:4C:0A:61:D4:FC:B9:D9:A4:DA:DF
Authority key identifier: 06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53
Certificate issuer:       /CN=06e42d897e96895c70f43ca0350d0ff44b848953
Certificate serial:       0198D84FB987FC20B023825BCE0452771DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:02:40 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:40 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:40 +0000
Files and hashes:         1: BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl (hash: uW5tfa32YAKaLcOZbGdqeLMHRhKDCb6cYvHFg3dSICg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:4f:b9:87:fc:20:b0:23:82:5b:ce:04:52:77:1d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e42d897e96895c70f43ca0350d0ff44b848953
        Validity
            Not Before: Aug 23 19:02:40 2025 GMT
            Not After : Aug 24 19:02:40 2025 GMT
        Subject: CN=afae9b24c221864948bc4c0a61d4fcb9d9a4dadf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ad:79:0e:0c:00:5d:ee:94:e6:e4:32:5d:a5:
                    64:2e:ab:37:f2:bd:73:c0:69:d7:07:56:09:60:b4:
                    ca:0b:81:9e:0c:e5:a4:19:83:0f:f2:e5:c4:b1:84:
                    62:94:97:98:b0:f0:c9:94:23:39:7d:82:89:e1:61:
                    ed:d0:3e:d5:36:91:0d:65:4c:44:d9:3f:1c:9f:5e:
                    1b:57:e5:99:c1:6f:9c:d5:cd:ec:d1:79:2b:c9:7b:
                    66:26:e6:42:08:6e:a1:2b:63:5e:62:ce:74:d6:64:
                    79:c7:3d:c5:89:e1:49:65:71:23:66:21:77:3e:74:
                    77:df:22:1f:d8:99:cd:29:2a:6c:76:4e:1b:de:74:
                    54:b6:36:2e:68:4a:80:7d:bc:11:47:cb:2a:0e:15:
                    db:ff:c6:a4:a6:07:cf:41:88:a9:bb:78:a5:b6:07:
                    87:90:f6:46:59:90:16:f1:b6:93:98:b4:e4:97:9b:
                    4e:5e:39:0f:65:7c:a5:a8:ac:1f:42:6d:cc:3d:54:
                    ac:1d:20:df:fc:46:7a:f8:5e:b7:d1:cd:a5:6a:9b:
                    dc:9a:75:b1:ce:67:29:00:98:c0:8f:92:df:4e:17:
                    a6:6e:b5:fd:62:5b:26:d2:d2:65:60:44:9a:91:00:
                    6e:69:2a:75:28:f2:cd:59:84:5a:81:81:56:0d:9f:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:9B:24:C2:21:86:49:48:BC:4C:0A:61:D4:FC:B9:D9:A4:DA:DF
            X509v3 Authority Key Identifier:
                keyid:06:E4:2D:89:7E:96:89:5C:70:F4:3C:A0:35:0D:0F:F4:4B:84:89:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuQtiX6WiVxw9DygNQ0P9EuEiVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/39a006-63aa-483b-9d9f-29527ce199ed/1/BuQtiX6WiVxw9DygNQ0P9EuEiVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2b:4d:a4:52:84:ee:63:dd:c3:d7:44:0c:04:95:64:83:b7:
         ed:21:e5:1e:1c:24:23:82:e3:bd:8d:bd:99:f8:71:ad:f0:93:
         36:07:4b:0c:9e:fd:c2:3c:3c:ce:63:3e:98:49:3f:ba:28:2e:
         8c:0f:a1:77:50:d9:ee:5a:d1:08:65:3d:1b:42:81:f7:44:4d:
         db:e3:e1:af:78:c2:2e:b4:2e:df:9b:2f:ee:aa:0c:67:1b:ad:
         3f:43:a5:ab:81:9e:f3:2b:44:80:6f:af:50:4e:21:9f:aa:88:
         ed:53:35:17:d4:f2:c9:34:c9:8b:08:af:b1:23:0c:ab:23:52:
         34:77:0f:8b:8e:64:90:ea:b9:de:0a:6b:40:8a:85:ab:a8:c0:
         91:ce:d8:fd:c0:d9:ff:a1:ca:36:cd:75:ac:fa:2d:bf:8c:12:
         c3:85:3d:3b:f4:9c:ec:32:55:20:e9:95:47:a3:37:8a:f3:70:
         3a:fa:6b:cd:84:20:cc:00:5e:6b:3f:6c:06:64:69:c9:de:23:
         c6:40:c8:75:68:be:99:df:f4:23:c5:2b:4a:ad:3b:99:c6:dd:
         04:59:d7:04:b7:27:c4:c5:81:a7:6b:5c:4e:85:ff:21:1b:04:
         93:73:a6:3b:5f:09:40:2b:eb:f4:96:dd:68:69:d8:e0:54:88:
         77:f5:bd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:40:25 2025 by rpki-client