Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
File:                     boP2het7ai-EZLmXEpM41j9-7Wo.mft (raw, json)
Hash identifier:          BnZSAfbQWPOmY3tk0b2z07QNXorcRB4RbOVFHaS28HM=
Subject key identifier:   3C:BB:B2:15:E5:5A:3B:2D:1B:3E:15:1E:2F:50:DC:DF:74:1B:A2:4B
Authority key identifier: 6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A
Certificate issuer:       /CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
Certificate serial:       019A20641D1412978D4233FAA06661F9A58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
Manifest number:          16F3
Signing time:             Sun 26 Oct 2025 12:00:23 +0000
Manifest this update:     Sun 26 Oct 2025 12:00:23 +0000
Manifest next update:     Mon 27 Oct 2025 12:00:23 +0000
Files and hashes:         1: boP2het7ai-EZLmXEpM41j9-7Wo.crl (hash: waX6kh5e8TdErF0R3iG2H7G38vW/vpH+r6oKukujRuI=)
                          2: xL1waNLH89tu16gqR_InkZtP0MM.roa (hash: UbiBAyPW5WcKpHG6QUDn1a6TZhLyyQKfdK3u0M9NdEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:64:1d:14:12:97:8d:42:33:fa:a0:66:61:f9:a5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83f685eb7b6a2f8464b997129338d63f7eed6a
        Validity
            Not Before: Oct 26 12:00:23 2025 GMT
            Not After : Oct 27 12:00:23 2025 GMT
        Subject: CN=3cbbb215e55a3b2d1b3e151e2f50dcdf741ba24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:bd:57:71:39:4f:37:1f:73:70:b4:a8:da:
                    3f:5f:4e:4b:e0:8d:c9:08:5e:9b:3a:fb:1b:32:38:
                    2f:60:5a:95:2b:80:f2:f7:f5:38:e1:6c:83:4b:b4:
                    cf:8a:0a:04:21:db:c9:06:48:ee:5a:ae:08:5f:f8:
                    04:00:71:d8:9f:43:fb:42:5c:92:41:d6:18:93:f8:
                    23:57:17:e5:73:96:f5:33:8e:ce:9c:a3:97:5f:c0:
                    ee:d8:0c:5e:0d:28:ca:c2:b0:b2:00:7c:6d:dc:fc:
                    44:2f:95:a3:dd:6a:f6:2d:64:1b:35:91:16:bf:e2:
                    75:00:97:b1:6b:dc:3e:bb:1a:7d:78:7f:81:23:ee:
                    5e:a5:51:84:3b:bf:eb:ee:41:78:8f:69:00:66:ba:
                    8f:38:a1:cd:26:bc:d5:85:99:c4:66:5a:05:2c:e3:
                    81:5b:93:96:2b:d6:e7:92:42:04:cf:54:7a:e8:c1:
                    07:4d:a5:2f:f2:7a:e1:85:c3:85:43:72:6e:91:31:
                    91:ac:d8:db:54:cd:b2:a6:dd:81:06:f6:aa:2b:72:
                    5e:a4:86:4e:a9:ca:40:ec:22:cc:36:ed:4e:ad:a3:
                    47:32:95:b7:12:81:25:ee:ca:b4:09:b8:7b:0f:e8:
                    ff:8b:44:69:51:34:3c:d1:bf:63:92:5c:03:aa:ed:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BB:B2:15:E5:5A:3B:2D:1B:3E:15:1E:2F:50:DC:DF:74:1B:A2:4B
            X509v3 Authority Key Identifier:
                keyid:6E:83:F6:85:EB:7B:6A:2F:84:64:B9:97:12:93:38:D6:3F:7E:ED:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boP2het7ai-EZLmXEpM41j9-7Wo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4aeb8a-b96f-4ec4-8d8e-eabe34e802b4/1/boP2het7ai-EZLmXEpM41j9-7Wo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:54:62:96:11:24:5f:74:4d:3b:05:8b:ba:af:07:01:85:9c:
         51:cb:2d:d6:21:21:1f:49:f9:0c:74:fc:68:2a:e0:7e:34:e3:
         49:9f:16:9e:79:54:36:23:58:a1:b5:23:4d:5b:2f:7c:2b:ff:
         b5:74:ee:dc:65:ba:9a:d2:b1:0d:a4:7d:19:5c:17:e2:8a:80:
         da:df:a7:55:8a:5a:ff:88:0f:07:27:61:3c:a5:c8:b5:16:5d:
         6a:07:dc:90:26:d4:dc:71:04:64:82:fc:a6:8d:42:97:44:78:
         f4:d6:ee:bc:cc:27:e0:e6:69:03:b5:1a:3b:ac:17:d1:4a:a2:
         d2:4d:07:2c:71:1b:78:78:7a:9b:8d:14:33:68:60:0e:87:bc:
         e4:3c:c9:7f:7e:df:32:39:8d:a8:31:88:90:f7:5d:38:6a:27:
         6b:8c:9d:d2:f8:58:69:b1:71:46:73:8a:c0:24:4b:7d:1d:8c:
         cb:39:46:46:dd:02:a7:fd:f5:ab:25:8b:5a:5e:17:f3:2e:24:
         69:e3:2f:91:e2:81:e3:ed:cc:72:6c:44:0c:6c:56:d5:fc:65:
         1e:8c:ee:ce:df:71:cf:ab:a0:66:c3:61:7d:38:5d:f7:c6:ce:
         28:a3:c3:8d:16:d9:8d:b8:76:b2:31:83:c8:ae:1c:e5:60:c5:
         59:36:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:29:08 2025 by rpki-client