Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
File:                     Ben594wsu8X6CLm4nwoR0rC6Rzw.mft (raw, json)
Hash identifier:          LkZD113spHKYfyVCYYG+ces6NW1E3JsoiIExAQgVwgA=
Subject key identifier:   03:4F:5F:61:0F:5D:75:1A:5B:48:0D:B3:2C:D3:3E:30:3E:1F:B2:F4
Authority key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Certificate issuer:       /CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Certificate serial:       019A29674786ACC7EF1E0023F0D41BD7002B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
Manifest number:          80
Signing time:             Tue 28 Oct 2025 06:00:25 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:25 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:25 +0000
Files and hashes:         1: 4xxMaURQ6IADglTVk2St0bC5k2E.roa (hash: Yadjh2IYdz4IzlLeUdcLgBY4JXTOO4MXda5WL/4Uk5U=)
                          2: Ben594wsu8X6CLm4nwoR0rC6Rzw.crl (hash: vlktHwe95rRG28QuSGY5vsAXbQm0vOsShbqkQQXsfRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:47:86:ac:c7:ef:1e:00:23:f0:d4:1b:d7:00:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
        Validity
            Not Before: Oct 28 06:00:25 2025 GMT
            Not After : Oct 29 06:00:25 2025 GMT
        Subject: CN=034f5f610f5d751a5b480db32cd33e303e1fb2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:df:57:cf:c3:8d:53:fe:5b:06:82:9d:2f:68:
                    ca:19:98:ce:dc:25:77:ac:19:8a:13:b6:a8:d6:7e:
                    b1:48:16:69:6c:5c:f3:24:01:98:ee:54:68:8b:95:
                    f6:ab:f6:01:d2:08:e4:6b:37:3b:55:3b:a3:e4:d9:
                    58:bd:53:e4:7e:2f:1b:a5:e8:9b:ea:0c:5b:f0:c8:
                    de:0e:88:62:7b:f1:06:f1:f4:dd:de:00:8c:53:39:
                    b0:72:ff:a5:75:87:36:84:11:18:03:e9:a0:46:4e:
                    ee:de:c5:21:4e:ab:49:11:87:cf:e1:9d:e8:96:c4:
                    b2:74:c7:37:e9:62:ad:7d:ab:90:59:a0:aa:a4:4e:
                    06:31:e2:14:12:f6:1b:a9:d2:c1:2c:f0:63:91:73:
                    03:73:cb:00:60:52:8b:ce:af:b1:99:ea:93:f8:7f:
                    a6:b6:dd:19:3a:22:54:c1:f9:05:b7:c8:ed:70:2f:
                    a2:01:f8:8a:d4:6d:28:12:63:44:3e:d1:39:da:f3:
                    be:90:9e:29:75:2d:e7:5a:3f:08:01:44:b4:c7:a3:
                    cf:dc:e0:cd:73:02:3e:88:15:5b:63:14:a5:c9:51:
                    11:06:3d:03:c5:31:69:cb:e5:eb:97:76:85:be:ee:
                    85:cd:e2:b3:e6:3c:2f:fa:0c:0e:1d:01:c5:0a:9a:
                    a5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4F:5F:61:0F:5D:75:1A:5B:48:0D:B3:2C:D3:3E:30:3E:1F:B2:F4
            X509v3 Authority Key Identifier:
                keyid:05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:2d:0b:90:8f:e8:dd:a9:cd:34:65:1e:be:e8:bd:6c:f0:9f:
         b5:97:b9:a5:d4:21:b9:b2:2d:ef:91:c7:f4:6e:b9:c1:eb:43:
         63:66:ed:3d:d3:6f:c0:0c:43:d6:54:7f:82:fd:c8:9d:a2:9c:
         8e:90:3f:7b:49:10:13:79:65:01:78:aa:ef:8b:87:88:ab:22:
         0d:26:99:11:07:22:9c:ca:c2:30:ca:39:c0:9f:35:df:2a:3a:
         83:31:f9:66:53:aa:aa:f0:b1:27:71:9a:8c:13:44:39:8c:9e:
         66:12:bd:ab:ba:eb:7b:97:8a:7c:d6:eb:04:f7:05:e9:7c:e1:
         10:f5:31:7f:f4:88:95:75:35:2f:2a:2b:4e:6a:83:6d:4c:d4:
         72:3e:1b:5e:92:08:eb:35:ac:c3:23:de:f0:78:29:c1:57:35:
         1e:7c:50:25:a9:d8:65:a3:72:d3:74:90:65:b6:67:a6:cc:99:
         2d:73:75:9a:8d:6c:4c:d1:14:d2:a8:c0:86:f1:44:db:2c:0a:
         0d:a2:60:28:c3:c7:24:e5:74:be:eb:66:5b:b7:b7:3c:df:20:
         5b:40:60:88:35:7a:c2:a9:8a:94:ff:63:9b:22:be:cb:01:13:
         1e:cc:1a:ca:42:b8:17:42:ef:f0:d3:3a:70:3e:27:d2:d2:83:
         61:63:d1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:29:09 2025 by rpki-client