Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          3WJaHKIW9olXYX31EgxWtPxwhm87hxSHI4YxBNcewG0=
Subject key identifier:   67:A9:F1:05:30:E0:59:07:DF:1E:F2:79:27:35:EA:D6:D1:20:8F:F3
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       019933EE780E6FC11CE16667A248DB8E95C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          0E20
Signing time:             Wed 10 Sep 2025 14:01:30 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:30 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:30 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: vI4ixN7cXrNsXMKTmSw7Uyh7UWpyRCWn5DSd8XqICs8=)
                          2: Xziix3WpukeN1e5SpGgnYgqIF3I.roa (hash: IunBp4C+veP99rGSTt8SQ5POqclxS7qKVFGqTiG4pb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:78:0e:6f:c1:1c:e1:66:67:a2:48:db:8e:95:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Sep 10 14:01:30 2025 GMT
            Not After : Sep 11 14:01:30 2025 GMT
        Subject: CN=67a9f10530e05907df1ef2792735ead6d1208ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:52:97:49:7a:3f:4a:b1:9b:3f:ac:c6:69:
                    5a:44:65:f1:01:e1:c6:b2:1e:73:57:01:10:08:11:
                    47:3b:a8:6e:f3:5a:a2:51:58:fb:99:09:37:8e:5c:
                    f7:97:f1:8e:62:b1:ef:fe:cb:80:7a:ec:69:a3:88:
                    98:fb:9a:58:7f:c7:3b:26:de:6a:60:5e:2d:39:23:
                    e0:ad:7f:4e:c5:2a:5b:8e:eb:a5:0a:cc:ff:68:90:
                    c6:30:7a:0e:01:2c:3a:39:05:68:da:dc:4c:a1:ad:
                    fa:f4:cf:30:82:e4:cc:69:b2:5c:7e:bc:bb:1e:1e:
                    78:8d:0f:6d:23:10:fc:4b:47:ae:34:86:7a:15:71:
                    fc:9d:50:0f:ec:e5:05:41:7c:2f:4e:4b:4b:18:16:
                    08:fb:42:43:de:5a:9a:a5:dc:bb:32:df:88:3f:43:
                    41:94:8d:1c:21:28:6f:7f:65:d2:1e:46:3e:4a:46:
                    cb:6c:a4:e4:5d:af:66:02:e6:04:07:7c:32:7c:1d:
                    cc:b8:5f:c0:69:5d:a3:16:2e:ed:9d:de:f0:36:d2:
                    05:cd:6b:48:a9:79:a6:11:60:ac:de:e5:84:69:75:
                    d6:66:5e:fc:66:9f:d0:c5:2e:fb:8c:dd:d6:f0:05:
                    ae:50:23:20:f1:c5:62:46:1b:45:39:81:7d:b7:25:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A9:F1:05:30:E0:59:07:DF:1E:F2:79:27:35:EA:D6:D1:20:8F:F3
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:ce:f6:68:bd:d9:55:3c:d4:4f:91:8c:60:9e:08:54:a0:
         6c:ec:f8:90:8f:8a:cd:7b:da:c8:c6:e5:b9:2c:41:da:8d:ef:
         91:0f:8f:ca:e3:03:d3:0d:4a:39:1d:00:7b:fd:50:23:5e:0b:
         8a:35:c8:94:3d:e6:46:4a:04:c9:ff:dc:4e:5e:7c:44:07:f8:
         8e:2d:fc:85:cc:92:66:e2:22:c7:a6:98:c2:76:b3:4c:9a:a6:
         65:9d:dc:c9:db:47:10:10:96:14:f4:6b:2f:05:20:7b:4c:7d:
         e3:9a:fa:f3:77:ec:e6:f3:b0:d2:f1:52:cd:c8:40:78:76:c4:
         a4:35:6d:08:72:39:05:49:c4:82:cb:fa:53:3e:22:e4:48:29:
         7c:84:a1:93:b2:9f:78:6f:a3:e5:fd:a4:ee:fc:30:e2:71:a1:
         3b:5d:3e:94:5c:da:9e:45:c3:3f:c6:94:8f:8c:c9:b6:e7:31:
         99:dc:99:8f:01:d4:42:63:06:3a:43:83:df:06:bf:fa:76:9f:
         65:d8:17:42:54:4b:af:32:67:d2:5a:3c:f7:9a:b4:dc:fa:c2:
         90:7e:5d:f8:0a:1c:95:4b:72:be:ec:b0:59:7b:ff:87:30:cf:
         8e:db:04:f3:3d:2c:dc:a7:33:b3:3d:76:e5:66:fd:d7:00:b2:
         94:97:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:51:39 2025 by rpki-client