Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          FVg+3AVvYFaHLtvrgNDkrsvxDB1rfRitxeZ+bozKk60=
Subject key identifier:   4C:4E:95:EA:0E:16:1D:BB:67:C7:3D:43:68:53:CA:E4:FE:72:6E:9E
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       0198D58397862BC68D0EA3436401A4FF81E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          107D
Signing time:             Sat 23 Aug 2025 06:00:27 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:27 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:27 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: gKDXsdn3qb+efb+UUi3veFeLIWz6jAwS/CZQU3j/XIg=)
                          3: XN_B3DWfBoiPOokFjbBN7WpWUJI.roa (hash: a6a3vckoKglRgJ10cyCX/u7htKkSn4XXsBvj/+qxYDM=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:97:86:2b:c6:8d:0e:a3:43:64:01:a4:ff:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Aug 23 06:00:27 2025 GMT
            Not After : Aug 24 06:00:27 2025 GMT
        Subject: CN=4c4e95ea0e161dbb67c73d436853cae4fe726e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:32:25:da:5b:52:e5:7e:2b:57:78:64:49:
                    92:b0:51:f3:5c:dd:70:f0:d0:08:10:26:27:73:d4:
                    61:24:fe:a5:3f:6c:e4:58:e0:29:8d:47:00:0c:ad:
                    a8:51:9e:81:d6:30:6c:be:fa:52:cc:29:0c:23:93:
                    d0:89:98:56:dd:8c:91:49:2d:c9:d1:f7:fb:6d:12:
                    da:98:49:96:55:b4:6e:e8:d0:ca:9e:e0:bd:e7:da:
                    bc:7a:49:c3:c4:c6:52:b0:d4:fa:b7:79:3c:79:16:
                    f2:03:93:59:fd:71:16:61:c9:97:cd:5a:8b:55:71:
                    b8:76:91:ce:13:b0:15:6e:ba:fc:8f:48:5c:5a:b9:
                    22:98:9f:b6:01:f3:8a:86:28:46:ef:d4:c4:12:09:
                    e6:ab:4e:db:e8:65:23:bc:94:eb:0d:7b:4a:f3:86:
                    8e:19:93:be:35:ef:f6:ce:29:79:f4:85:72:e0:80:
                    39:2c:f9:3c:44:bc:bd:6a:7b:34:7b:f4:46:c4:2d:
                    53:a0:af:54:d0:75:42:85:17:30:18:7d:93:44:b0:
                    f1:4d:e3:ab:0d:ea:b5:67:65:c4:e1:96:6a:e9:bb:
                    20:4a:74:a4:e7:20:9d:01:2b:ba:c1:e1:9b:a1:59:
                    91:22:5b:26:d8:39:26:0c:b6:21:9c:0b:da:36:43:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:95:EA:0E:16:1D:BB:67:C7:3D:43:68:53:CA:E4:FE:72:6E:9E
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5a:56:e6:e3:6a:88:38:cb:bb:7e:08:5d:3e:9b:25:ba:68:
         2a:c9:92:c5:af:15:ee:4b:32:4d:14:1c:ed:b4:cb:07:f5:b2:
         3c:1f:6c:c2:39:66:a1:f2:12:99:0f:d3:96:e2:33:aa:f1:7f:
         26:ab:ef:ce:9c:71:10:ab:29:af:68:92:1d:2d:09:9a:a7:b6:
         28:fd:38:94:8d:e8:b0:8f:ca:b6:77:ff:23:0f:a4:08:98:d2:
         1e:86:8f:bd:5f:25:2f:af:bf:3d:75:2b:80:5f:f2:9f:57:90:
         fc:ae:0c:37:bb:41:5d:ed:c5:85:1b:68:9e:2a:47:d9:ef:5a:
         a9:4c:f8:69:9d:9a:d8:af:72:3e:91:16:e6:ae:ea:be:23:52:
         15:12:41:5c:43:6a:75:20:cf:ac:b7:a2:5b:47:8f:79:be:10:
         16:da:ca:68:a1:f9:36:e7:3d:40:49:fe:61:98:d6:72:74:bf:
         4b:99:0b:c9:35:fd:50:08:e4:42:9c:66:01:48:b5:a9:b0:fe:
         59:b9:f6:0b:3a:fe:0d:8c:be:ca:54:d9:39:94:cb:8b:00:e5:
         2d:28:05:7c:64:42:ce:93:af:10:77:35:09:d9:81:d2:d0:40:
         1f:17:90:54:5d:3e:ef:e0:a0:33:d3:ef:fb:04:08:cf:d3:9a:
         11:e2:6a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:57:50 2025 by rpki-client