Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
File:                     BUdoDlOuWJdMtpQdCGldPA3swq4.mft (raw, json)
Hash identifier:          phh5HrGpCuBsDuZvXEQIrw7inzRRp2FKKfyEagMeoD0=
Subject key identifier:   59:0B:85:DF:7C:E4:24:2A:C3:FB:A3:38:CC:A1:EC:BA:25:58:E2:63
Authority key identifier: 05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE
Certificate issuer:       /CN=0547680e53ae58974cb6941d08695d3c0decc2ae
Certificate serial:       0198D4E03226CD147F4CF5DD86F80D209E89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
Manifest number:          0146
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: BUdoDlOuWJdMtpQdCGldPA3swq4.crl (hash: CEMaj/np9O1ePgaZax31ot+s9ElFeufoSThpk6xhzsU=)
                          2: zV2FqjFlGJe1sQ7mobIeiW5XHzk.roa (hash: qBKcaNstJOD1ItKIM/todQYRv+HqCOCgyFPfIIjpV2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:32:26:cd:14:7f:4c:f5:dd:86:f8:0d:20:9e:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0547680e53ae58974cb6941d08695d3c0decc2ae
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=590b85df7ce4242ac3fba338cca1ecba2558e263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:8a:a4:23:11:cd:79:11:cd:87:e5:5e:41:
                    8c:84:9f:fd:7b:0e:50:7a:bf:9f:57:63:30:19:29:
                    1f:43:de:3f:ba:62:a2:04:67:4e:6b:83:e5:f1:ec:
                    3f:c9:46:1c:a9:6d:87:e8:c6:ac:fe:2b:cf:fe:9e:
                    b7:e4:2d:f3:70:57:cd:ad:26:80:9c:be:8b:0d:e8:
                    a2:9a:5c:a2:91:8f:be:cc:11:fa:9a:e9:f1:16:6b:
                    7a:7f:92:93:64:38:2f:fa:98:45:66:55:13:b2:c3:
                    56:17:64:09:c4:3c:65:1c:00:66:a1:de:71:a1:df:
                    05:9b:60:7e:12:4d:30:8d:45:99:7d:fc:3a:6a:1b:
                    4f:f6:37:9e:46:12:6d:4b:99:a4:90:1b:bd:38:d6:
                    ec:bf:ba:1f:79:a8:10:31:97:8e:0c:24:8a:34:7f:
                    38:28:81:a3:33:db:c3:bc:da:c1:f7:c0:63:a3:6a:
                    35:3b:33:b9:13:1e:1c:4f:29:3c:34:30:f9:42:0c:
                    1a:26:75:59:be:7d:f5:48:db:0b:8a:9e:c8:57:bd:
                    b7:5c:9a:45:d3:ff:39:07:35:a9:65:64:af:32:c2:
                    87:e7:75:f1:bb:b5:b0:6b:da:e7:d1:9f:c7:5e:67:
                    25:50:a1:16:d2:94:28:50:58:d4:0c:d6:0c:ff:a7:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:85:DF:7C:E4:24:2A:C3:FB:A3:38:CC:A1:EC:BA:25:58:E2:63
            X509v3 Authority Key Identifier:
                keyid:05:47:68:0E:53:AE:58:97:4C:B6:94:1D:08:69:5D:3C:0D:EC:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUdoDlOuWJdMtpQdCGldPA3swq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/12240b-7237-49bf-8f21-e4e6f8d7e77c/1/BUdoDlOuWJdMtpQdCGldPA3swq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:39:c1:29:67:50:b4:3b:59:a1:9e:2a:00:06:3a:95:51:59:
         9e:8c:cd:4a:9e:ff:29:da:7d:d5:07:b3:f4:c3:b6:1b:5e:f1:
         d7:e8:d7:ab:2d:13:fb:0f:b6:27:9f:0f:cc:c5:6b:a1:1c:3e:
         39:19:b2:54:35:d9:12:6d:b8:9f:2f:e1:08:ad:8b:ac:fc:d8:
         d2:e0:20:ef:19:a4:c8:13:ef:38:ad:0f:6d:94:0c:97:20:87:
         21:1b:6b:eb:c8:bc:48:7c:9d:90:42:ff:90:06:fa:19:07:20:
         37:4b:1c:d0:49:a0:73:f6:cd:0e:88:4e:2b:a6:ba:f6:de:ea:
         c3:a8:90:f6:b9:81:b9:a6:67:e6:2d:32:0b:2b:63:f1:60:7a:
         08:03:24:17:b0:f5:f3:68:55:74:fa:39:05:31:d2:64:30:32:
         64:0b:52:73:f9:ee:d1:79:f5:a7:45:38:44:8b:f0:27:41:4b:
         78:4a:f1:b5:cf:16:78:6b:f9:ac:20:47:96:ae:da:71:9c:2c:
         ae:27:2e:1e:40:6e:78:90:01:a9:11:b1:d2:c1:60:22:73:9d:
         a4:67:69:4a:48:86:d6:f3:20:ce:ec:dd:7c:5d:4b:e5:5b:85:
         07:27:73:0b:92:8c:fd:78:54:f3:6d:08:6d:f0:27:e8:c3:e6:
         a4:cb:39:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:35 2025 by rpki-client