Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          2AZUDXeTi0qkHbl/3wEODPEUKW24CuaLNrzpZMrQU2A=
Subject key identifier:   51:37:24:FD:7A:52:DE:22:68:A5:24:19:FC:44:80:E3:69:89:96:3C
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       019A2CD5ECFFFA2AF716B235077972B8C845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          0B08
Signing time:             Tue 28 Oct 2025 22:00:08 +0000
Manifest this update:     Tue 28 Oct 2025 22:00:08 +0000
Manifest next update:     Wed 29 Oct 2025 22:00:08 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: LnG4aQ5o9N6Ee4KOK2smv8tfC91S1qfKzK0nbDQb7ck=)
                          2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 22:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2c:d5:ec:ff:fa:2a:f7:16:b2:35:07:79:72:b8:c8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Oct 28 22:00:08 2025 GMT
            Not After : Oct 29 22:00:08 2025 GMT
        Subject: CN=513724fd7a52de2268a52419fc4480e36989963c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:5a:25:28:9e:42:3b:23:dc:6c:74:8f:50:
                    b0:df:17:e2:14:f8:6e:14:ce:34:a7:14:53:22:76:
                    f6:84:d5:ab:c8:c7:40:97:e5:86:0b:eb:fe:7e:0a:
                    b2:a8:85:4e:bf:07:dd:80:f0:e7:27:a2:1f:aa:a9:
                    2a:b4:45:46:e2:35:9a:e0:35:ef:10:3b:65:eb:d6:
                    c8:f7:0f:ed:1f:77:35:7d:b6:54:e7:27:e1:f5:5f:
                    92:d6:c3:59:1e:07:54:0f:75:80:65:7b:bb:2c:5c:
                    04:ee:51:7f:83:ce:e1:31:d5:d7:f2:c4:64:c6:eb:
                    11:77:1a:c6:e0:c8:31:6c:5c:b5:2f:56:4e:37:48:
                    17:81:5b:25:64:3b:e6:2a:2a:b2:5f:b0:54:96:ae:
                    f2:c7:0e:e6:ad:15:09:cd:66:d3:1e:c0:f7:3b:63:
                    32:ab:ed:0a:50:3a:cd:eb:f6:aa:c1:50:76:df:c2:
                    c1:1a:44:3b:d1:e6:71:af:cc:e5:d8:95:5c:a3:ac:
                    d5:4f:11:42:49:e6:78:31:89:6a:7a:40:21:38:f8:
                    26:df:e1:a1:38:56:a8:5e:75:6a:2f:f0:21:de:e7:
                    eb:a2:6f:81:30:6b:7b:55:ff:63:ed:4d:74:64:bd:
                    e8:69:a9:cb:c6:c1:1e:4f:44:30:20:b1:65:a5:2d:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:37:24:FD:7A:52:DE:22:68:A5:24:19:FC:44:80:E3:69:89:96:3C
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:fd:8b:ee:a8:4c:36:5f:e8:db:8f:8c:b4:2a:9c:58:60:
         6f:bf:fa:fa:ec:d1:c6:cd:85:4b:9c:fc:91:1b:9e:73:f4:91:
         47:0d:11:70:cb:8e:ab:28:7f:9f:e7:ad:22:5e:3a:0a:94:cf:
         b2:1e:f7:6c:f3:b2:26:17:e9:b2:20:19:33:e8:75:08:86:f7:
         1d:1d:d2:60:d5:e7:67:c0:4a:d1:b8:fc:d2:9d:5c:71:6a:22:
         2e:c8:19:cc:3f:4a:ce:a7:5a:69:d0:a4:89:cf:f5:1d:f2:b9:
         18:7f:10:41:18:4e:14:bc:5c:4e:d5:6e:64:d3:65:e9:6c:f6:
         c3:2c:ea:8b:65:d1:0c:51:bd:10:39:32:a1:2e:18:01:71:f3:
         a7:b5:7e:6b:f5:c6:1f:99:a2:f0:4e:34:31:3c:3b:8f:0a:47:
         24:6f:fc:7c:73:0a:c1:8d:45:c6:30:a9:ef:dd:34:38:0e:d4:
         f2:86:01:ea:49:62:f6:92:6e:73:69:0d:46:31:05:0c:43:bd:
         f3:09:c5:4c:c2:80:9d:2d:ba:c8:bc:be:7a:63:3c:29:d3:23:
         41:05:49:00:c9:ff:45:67:0e:cd:1b:bb:98:ca:c5:a8:39:5d:
         b3:b2:a5:17:36:93:62:eb:8d:47:12:64:df:ce:fc:e4:e4:62:
         6d:64:5a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:07:06 2025 by rpki-client