Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
File:                     BdCJpxSLJhoFnmZv66WfkqJowWw.mft (raw, json)
Hash identifier:          go26BduP8L9/4KLgQ8y2opm1h5qYgKno5qH175pF9r0=
Subject key identifier:   C6:37:99:76:5A:CC:79:DC:A0:7E:46:36:3B:41:D8:A1:4B:26:DA:D8
Authority key identifier: 05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C
Certificate issuer:       /CN=05d089a7148b261a059e666feba59f92a268c16c
Certificate serial:       019922FA167C76A58EDA3C7231BF8843A335
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
Manifest number:          0AC0
Signing time:             Sun 07 Sep 2025 07:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:39 +0000
Files and hashes:         1: BdCJpxSLJhoFnmZv66WfkqJowWw.crl (hash: 1NJLQfj4DxPKuz9zPn7xybAMALnoQi3gBwF0rQCyHB8=)
                          2: Q0dd8vdSkfkyu7Ca5EdjCX19qvM.roa (hash: Ja8TY9ppItEtGQ58YrEF8baZTzPApBnwUBrs1rAUdS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:16:7c:76:a5:8e:da:3c:72:31:bf:88:43:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d089a7148b261a059e666feba59f92a268c16c
        Validity
            Not Before: Sep  7 07:00:39 2025 GMT
            Not After : Sep  8 07:00:39 2025 GMT
        Subject: CN=c63799765acc79dca07e46363b41d8a14b26dad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:4c:22:11:80:ea:b1:b1:ef:36:ca:35:15:
                    f5:4d:c5:af:15:7a:5e:bc:19:49:09:be:3c:15:d9:
                    85:70:81:ef:24:e3:cb:7e:5f:0a:11:89:e2:19:a1:
                    ee:d3:a5:5d:0c:be:72:33:4d:60:94:95:a8:ad:da:
                    c6:c1:d9:81:20:54:e3:a8:83:1b:cd:97:c1:1e:b1:
                    0d:78:04:5f:7a:b0:63:43:c2:32:5c:a3:75:f2:ea:
                    ff:c7:12:1a:39:05:a5:50:f6:0a:97:c1:f6:7e:9f:
                    5a:51:ad:b2:b9:f4:c1:85:97:53:86:69:3f:87:d9:
                    a7:8e:ce:61:2b:97:23:e0:0d:61:be:41:f3:ac:39:
                    8d:7d:f9:0b:39:52:6f:e6:6e:61:d2:62:f7:06:8b:
                    d0:28:21:70:4c:b5:76:7b:bc:21:a2:43:33:e9:c7:
                    58:6f:14:60:e7:99:88:46:bc:1b:22:53:6a:28:d1:
                    b4:38:b0:e3:85:cf:87:c9:5f:64:94:3c:62:2a:ee:
                    da:54:7f:d3:e2:4c:e3:4e:1b:37:22:4c:af:97:06:
                    99:45:45:84:b3:99:99:74:f2:72:95:7a:eb:fc:bd:
                    07:6b:9d:7d:dd:29:b4:a8:5d:e9:24:b1:7b:47:bb:
                    cb:2f:a2:63:96:06:16:df:3e:c1:e8:3f:7a:b4:2e:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:37:99:76:5A:CC:79:DC:A0:7E:46:36:3B:41:D8:A1:4B:26:DA:D8
            X509v3 Authority Key Identifier:
                keyid:05:D0:89:A7:14:8B:26:1A:05:9E:66:6F:EB:A5:9F:92:A2:68:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdCJpxSLJhoFnmZv66WfkqJowWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/310388-6cf4-455d-b551-1eaa3f22df52/1/BdCJpxSLJhoFnmZv66WfkqJowWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:25:bc:72:7e:9f:20:d8:c6:31:10:71:a2:21:8a:77:cc:e2:
         d7:e2:a9:9a:f7:df:e8:f0:59:68:df:a8:b6:8a:21:2f:61:a8:
         59:5e:bd:0e:aa:d2:1a:46:73:d8:a4:2a:19:48:e4:f1:0a:e6:
         55:6c:11:a2:01:91:06:de:6d:18:ef:1e:2c:15:25:06:7f:31:
         bb:b3:a5:a9:11:de:75:af:36:84:6b:51:1a:e1:f3:97:17:ed:
         7d:1a:37:90:64:5f:3d:96:ba:0a:9b:72:3d:4b:09:07:25:5f:
         4c:92:c4:df:e4:ee:5d:ca:bc:df:80:9f:42:72:01:84:eb:53:
         54:df:c6:73:f7:b8:c5:28:fb:63:d6:73:ca:ae:25:04:77:db:
         46:c7:af:46:27:e4:c3:1d:cb:ae:b6:8e:82:ca:1c:29:4e:c4:
         01:f9:63:89:7e:33:28:71:cd:dd:93:19:a1:64:4b:8c:c4:ae:
         df:b2:a4:26:58:e2:ff:fd:aa:9f:04:de:2c:db:bf:3d:19:84:
         f6:d7:9b:af:11:18:5b:46:2b:bb:02:24:d5:d2:b8:2d:0f:95:
         73:33:47:85:45:96:65:11:f3:51:68:ef:14:fa:a0:89:76:52:
         45:d1:d2:af:38:cd:ef:cd:8a:8d:b5:7f:e4:ae:84:a9:b7:b3:
         ad:56:9a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:55 2025 by rpki-client