Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          lT31PA3lGjXL+SKzxwS84w4I53hAC9t9S+JqucgBPqE=
Subject key identifier:   EC:C1:43:F5:99:12:89:02:4F:79:48:AA:D9:44:F7:F4:A4:EE:A6:3F
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       0199307F56BE5A64A20F2EDBF97E80B68DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0E8D
Signing time:             Tue 09 Sep 2025 22:01:15 +0000
Manifest this update:     Tue 09 Sep 2025 22:01:15 +0000
Manifest next update:     Wed 10 Sep 2025 22:01:15 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: VAoTTavJTEz7UqjGyFgR3J1eOMTbxTHdji/UqmJedzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:7f:56:be:5a:64:a2:0f:2e:db:f9:7e:80:b6:8d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Sep  9 22:01:15 2025 GMT
            Not After : Sep 10 22:01:15 2025 GMT
        Subject: CN=ecc143f5991289024f7948aad944f7f4a4eea63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:67:13:86:09:62:25:eb:3b:38:6e:34:d5:
                    b1:c2:68:35:8c:cd:d3:15:c2:43:80:ec:f8:58:20:
                    ec:78:e1:f9:2f:f9:4a:b8:3c:1a:33:ae:6d:cf:69:
                    29:13:dc:9e:0c:34:75:c8:27:6e:2c:d5:fb:9a:b0:
                    c3:91:9a:7e:07:89:11:30:fa:f3:53:be:5b:bf:ee:
                    fd:91:f2:76:a4:15:b1:ac:6e:d4:b2:fb:ef:f5:cc:
                    4e:5a:a6:07:89:0a:d2:c0:28:56:41:8e:90:b5:e3:
                    e6:f3:e6:65:93:aa:55:d2:3f:fa:90:b6:5c:93:fa:
                    c3:c4:46:06:5c:7e:5e:c9:21:86:46:06:43:ee:b3:
                    d4:4e:5e:3f:b8:4e:2e:d4:0b:f3:9b:b5:9e:ce:a2:
                    6d:cf:af:29:ec:fc:49:1b:a4:73:84:65:1b:27:e9:
                    5e:6d:49:5a:33:61:d2:ce:b8:76:ed:0b:d8:f2:ff:
                    c0:82:b8:67:d5:bc:b9:b3:21:29:61:c3:b2:ef:36:
                    01:2f:e5:fd:bf:8b:02:ee:00:41:14:dc:c3:df:6f:
                    fb:23:c3:4a:5b:dd:8b:3f:11:04:d9:75:2a:55:6b:
                    72:ff:34:43:04:77:03:b8:0a:48:e9:88:eb:40:89:
                    e7:0e:f2:9f:c4:c1:7c:39:12:98:98:fa:a7:a0:5f:
                    cd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:43:F5:99:12:89:02:4F:79:48:AA:D9:44:F7:F4:A4:EE:A6:3F
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:72:46:79:50:00:99:ab:5e:a5:fd:c4:72:98:c6:26:b1:01:
         9b:8b:f3:fa:d5:29:33:6e:d6:6b:78:cf:cb:78:a6:47:84:23:
         75:7a:ff:36:68:25:13:77:d3:cc:e7:97:73:23:33:9f:cc:37:
         38:ab:b6:87:96:89:7f:8a:7a:84:5f:80:5c:c2:fc:a1:57:e9:
         4f:dc:b0:00:99:5e:64:5e:13:c5:b9:56:38:b8:6a:9f:da:7c:
         4d:dd:cf:4f:67:d3:17:46:f2:63:56:26:db:e6:6e:fd:e6:05:
         90:d3:7f:0a:d1:ad:e0:fc:07:d2:6f:ff:fe:e6:00:a9:bd:c1:
         f5:09:ed:b0:99:5e:cb:17:a2:d5:38:0c:73:71:78:1b:59:d4:
         d2:d8:c9:15:50:c4:27:79:e9:40:22:bc:15:a6:7e:39:61:ec:
         3d:3e:be:0a:27:e3:13:db:d0:70:83:d3:8a:f1:c1:0e:25:0d:
         25:31:fc:ac:28:05:ee:a8:0a:62:aa:ad:9d:f5:17:c2:f1:e4:
         dd:d0:af:7a:ca:38:86:01:41:87:34:5d:85:8e:33:ed:da:53:
         04:a5:67:c2:cf:63:48:cb:26:c3:29:50:67:b9:9a:f8:93:04:
         46:dd:d9:25:39:b3:7e:5e:ae:81:30:3b:ac:33:3c:6e:29:6d:
         e0:dc:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:27:09 2025 by rpki-client