Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          XqgOVRrngun6X6JFbVIgXzjAZHjDnswYJIm1SnHmmfs=
Subject key identifier:   A4:88:C1:61:68:CC:0F:FF:50:56:4B:BE:95:90:51:5C:1E:6D:98:9D
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       019A1AD0681F95EE9377719A1DDBB5C39A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          132A
Signing time:             Sat 25 Oct 2025 10:00:56 +0000
Manifest this update:     Sat 25 Oct 2025 10:00:56 +0000
Manifest next update:     Sun 26 Oct 2025 10:00:56 +0000
Files and hashes:         1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
                          2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: x75vNyXFwTyr6kzTE2FCah8uphy4f8zQQkBqgZcIWQA=)
                          3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
                          4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:d0:68:1f:95:ee:93:77:71:9a:1d:db:b5:c3:9a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Oct 25 10:00:56 2025 GMT
            Not After : Oct 26 10:00:56 2025 GMT
        Subject: CN=a488c16168cc0fff50564bbe9590515c1e6d989d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:df:a7:92:ea:de:2c:43:f8:c7:f0:0c:9e:
                    65:6f:52:c8:eb:ba:e8:5e:18:f4:20:42:77:bf:54:
                    2c:05:c2:89:84:83:85:cb:3f:18:9d:a3:2e:e3:c6:
                    c6:12:65:c9:e5:a0:24:3a:76:71:aa:2b:78:f3:9d:
                    d7:85:e5:67:e6:1b:3b:ae:b8:2b:dc:f7:49:11:70:
                    3b:c3:bb:55:06:d5:ad:34:68:e9:c6:f3:58:ee:e2:
                    b2:e9:81:e1:b5:30:ee:17:f6:d8:b8:21:3a:93:23:
                    09:ae:5f:a1:f4:3a:50:13:57:35:95:38:06:2e:c6:
                    dc:4d:b2:01:66:6d:2d:28:0d:ac:90:d1:19:bf:fd:
                    43:3d:74:88:06:71:d6:6c:bb:40:d4:40:76:b4:01:
                    1d:bf:22:9a:20:ef:5e:49:56:d0:96:c1:a4:4e:8d:
                    65:44:cd:ae:b7:89:e3:f1:4d:89:17:27:a3:84:f5:
                    43:6c:ee:a0:d0:a3:47:c8:82:bd:b4:35:ab:50:6e:
                    8d:c4:11:6d:1f:3d:0b:32:b4:8b:ed:99:48:e6:d0:
                    c1:d5:b9:fb:4b:0a:0e:55:c0:39:c3:46:0a:eb:4a:
                    c8:44:9a:81:cc:7f:e2:c6:16:70:54:3f:50:01:88:
                    c2:c2:e2:59:bc:01:ae:12:dc:58:8f:50:0d:e9:f5:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:88:C1:61:68:CC:0F:FF:50:56:4B:BE:95:90:51:5C:1E:6D:98:9D
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:54:74:9e:50:e1:33:f0:b1:83:75:e4:00:e7:72:09:34:
         cb:bb:20:53:05:0e:e5:04:9b:b2:c5:9e:0a:50:c8:8e:bb:80:
         fa:8d:3b:04:c5:5b:71:f0:71:18:67:2d:a7:df:2d:d6:04:09:
         0f:c8:d2:61:d6:ee:25:af:52:7f:01:81:1f:48:f6:eb:e6:42:
         1c:b7:e3:6b:17:7f:ed:a3:32:a1:7f:c2:95:84:03:be:d8:54:
         d2:cc:93:4a:d8:86:9b:37:45:f7:b7:69:3c:d6:fa:a8:c7:e1:
         d0:e5:98:6b:b2:ab:4b:67:d1:60:d8:d3:1e:de:9d:3b:a4:ae:
         30:37:c5:36:c7:61:c9:7c:ae:c0:1f:bc:56:8e:fe:ff:9c:1e:
         31:2b:d4:ea:6d:aa:ce:0d:56:cf:de:c1:33:1a:1e:c4:b4:77:
         50:74:0b:89:25:27:26:e5:ff:4c:77:26:47:ee:cf:92:fd:80:
         a7:d6:49:5d:b1:b3:c3:6c:af:e3:ed:da:5a:e5:a4:3d:8c:d1:
         20:a6:74:b2:21:11:af:3f:7d:ea:32:3c:86:7e:1b:af:89:98:
         17:a6:d3:ff:da:ae:bb:d3:c0:97:08:5a:c0:ac:5b:3c:89:09:
         9d:02:50:12:b3:e4:05:a2:c4:31:01:eb:f3:2f:d1:63:a5:5b:
         d2:94:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 18:23:48 2025 by rpki-client