Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          dkHj2AUYA2hEFlutum+TBfRHjp3Vmp0QLeFsyXJkTJs=
Subject key identifier:   57:21:BC:B9:FE:BB:40:59:35:55:B8:1D:C6:D3:AE:52:53:9A:AB:57
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       0198D8512F07F227A80C792E0B865EF1B907
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 19:04:15 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:15 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:15 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: HPU1VKYBmpTS8R9du3/9MTRylmH3juibHERqtE0h7xM=)
                          2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:2f:07:f2:27:a8:0c:79:2e:0b:86:5e:f1:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Aug 23 19:04:15 2025 GMT
            Not After : Aug 24 19:04:15 2025 GMT
        Subject: CN=5721bcb9febb40593555b81dc6d3ae52539aab57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:55:ed:82:5a:10:ed:1d:ef:75:76:17:5c:
                    d7:cf:10:6a:87:b5:69:f5:67:64:0c:3f:76:88:5c:
                    c3:c5:91:43:fe:90:88:a3:f9:be:03:e6:c4:c3:a4:
                    42:bc:b1:e5:39:54:0b:b4:4a:4c:30:d7:ac:96:ca:
                    3f:db:cb:7e:db:4c:04:4a:1d:3e:36:f6:07:17:43:
                    61:e9:7e:c9:03:df:b9:44:13:18:3b:26:bd:f3:ab:
                    85:fb:d4:b8:35:0c:78:32:0d:b7:98:e8:08:12:91:
                    ff:5c:40:af:df:3a:3a:96:25:9b:81:7a:ea:4a:b7:
                    09:5d:85:61:2e:af:d3:02:5f:ca:d6:b3:d2:79:d5:
                    0a:65:f5:57:92:46:98:f4:5a:c0:86:0f:e3:0d:36:
                    9e:a5:c7:7a:95:6b:62:a5:a0:9c:3a:dd:10:dd:9d:
                    67:42:00:46:61:f0:54:9c:dc:ed:ce:20:60:9a:b9:
                    7c:ca:f1:84:2c:d2:03:74:a6:7a:1d:01:71:91:e0:
                    96:9e:97:f1:96:92:19:84:ad:78:36:7d:e5:b1:bd:
                    01:53:0a:2e:4b:83:ae:8d:97:4b:26:6f:af:40:69:
                    eb:30:64:f9:0e:29:c3:12:d3:d4:5d:09:a6:e1:79:
                    36:71:c2:7e:05:0f:9c:6f:f5:83:10:31:4b:55:40:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:21:BC:B9:FE:BB:40:59:35:55:B8:1D:C6:D3:AE:52:53:9A:AB:57
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:df:92:f7:1c:aa:dc:48:5c:05:91:2a:f2:40:7a:dd:17:e1:
         b1:bd:3d:4b:45:bc:46:70:b6:c8:64:a8:7a:2b:cd:af:e3:fb:
         c1:76:10:12:8c:47:96:5a:a7:04:b6:a9:47:8a:77:b3:10:76:
         44:62:7d:ad:50:70:89:fe:72:d2:6b:bb:aa:3e:7e:57:07:3e:
         7f:57:a6:7e:15:89:5f:01:6d:75:bc:9e:e2:ff:4e:2e:c3:3d:
         ad:60:83:f0:0c:ef:84:9e:34:34:72:96:85:5c:ad:74:22:40:
         d2:d1:ef:9d:e8:b1:0a:17:29:c7:52:3f:83:2d:e6:ab:9f:56:
         0c:37:0c:8f:51:ef:b9:b6:d8:af:5e:37:c1:71:29:d8:d5:69:
         ab:90:c6:9f:30:57:95:38:f6:95:0d:0a:2a:48:30:5a:53:26:
         f6:0e:7c:21:0b:06:42:5c:c2:49:68:b0:0f:c9:fc:e0:72:39:
         35:05:d1:0e:be:3e:82:b6:e5:09:63:0c:43:26:5b:73:59:d2:
         d4:8b:27:e0:71:a3:1a:af:c8:23:7d:7b:67:b1:29:c6:ca:0d:
         9a:b0:0e:ac:56:c6:6c:df:2f:0c:9d:4f:57:af:d6:68:aa:68:
         0c:2c:2d:1a:1d:0b:4b:00:8d:41:db:28:f2:cd:f3:ef:e4:09:
         24:a5:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:46 2025 by rpki-client