Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File:                     byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier:          5bfzORNd6ZFoXzF2St8n2O63qXHpmaCbCG3BOnV9FhQ=
Subject key identifier:   5E:28:08:F1:8A:00:0A:5A:93:5E:19:95:90:13:70:FE:5C:F5:5A:7A
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer:       /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial:       0199507767BDF6C971256F83FD7A25575D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number:          066C
Signing time:             Tue 16 Sep 2025 03:00:26 +0000
Manifest this update:     Tue 16 Sep 2025 03:00:26 +0000
Manifest next update:     Wed 17 Sep 2025 03:00:26 +0000
Files and hashes:         1: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: +aotBIEXflo8CW/8M5VTTMW6AhT7BtYyHIn4LjY5QF4=)
                          2: jcl3DEDvFDbe2n1OkuP9O1mNtE4.roa (hash: zm9D2SdmmGYoULIl+hQH6eijqdwsjK8xxtq2NuIqYhs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:50:77:67:bd:f6:c9:71:25:6f:83:fd:7a:25:57:5d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
        Validity
            Not Before: Sep 16 03:00:26 2025 GMT
            Not After : Sep 17 03:00:26 2025 GMT
        Subject: CN=5e2808f18a000a5a935e1995901370fe5cf55a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b0:c9:fc:8c:5e:34:34:4f:7f:da:07:38:c5:
                    b3:85:07:12:72:3e:5b:12:a9:0b:c5:8b:c3:ca:19:
                    88:41:2b:f5:08:87:fd:76:81:37:b8:f4:5c:ce:43:
                    5b:02:7d:62:e0:c9:9d:b7:4e:3c:11:53:fa:e7:36:
                    fe:49:34:42:01:0e:5e:9e:68:74:a2:ad:5e:21:3c:
                    3a:4c:99:4e:5a:9c:1c:d2:ec:52:d6:73:41:31:22:
                    91:b9:3f:0a:39:a7:71:9e:c7:38:a3:57:cb:5e:c2:
                    b9:89:81:86:3b:b8:f1:ef:dc:5d:43:ef:f5:59:29:
                    d3:03:4d:80:6e:82:9a:db:da:e4:f8:63:97:d3:04:
                    fb:77:56:9a:a0:83:ec:e3:48:14:82:45:63:85:29:
                    73:ea:cd:ea:36:db:e8:44:ec:7a:75:1b:b3:f1:2c:
                    e2:2e:cf:cd:6d:20:db:96:83:a8:b5:08:e4:95:aa:
                    d2:32:6b:cd:85:9b:3d:ac:00:8f:79:8e:1e:0e:fc:
                    08:5c:89:10:ab:6e:41:c0:64:cd:42:52:77:75:17:
                    fb:b7:37:fa:79:01:37:4b:69:0f:7f:ba:f5:c6:6e:
                    ed:35:f5:af:7e:1a:f7:cd:af:78:37:d3:f3:d7:f9:
                    70:24:3b:fa:5c:2e:04:61:4c:91:84:f1:9d:8c:e5:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:28:08:F1:8A:00:0A:5A:93:5E:19:95:90:13:70:FE:5C:F5:5A:7A
            X509v3 Authority Key Identifier:
                keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e5:6e:cb:58:2f:c5:84:ac:a4:94:be:a9:11:85:1a:76:a6:
         55:60:87:4f:23:ab:af:44:22:e9:e5:af:4c:ed:54:0c:0e:43:
         f2:47:90:e7:62:59:0d:08:93:f2:fe:05:a2:99:e2:24:2f:63:
         fd:34:6a:20:ae:78:a8:b7:e4:63:f4:21:07:56:60:33:2c:6d:
         73:ff:48:84:49:c4:73:7b:86:cc:e2:a2:7d:af:53:c8:40:90:
         50:f9:a8:c5:56:1e:43:7c:68:fb:32:d2:ab:ca:19:14:41:25:
         7a:55:13:05:55:e8:49:b6:d6:46:f4:5b:b1:87:49:18:49:bd:
         3a:02:4d:87:64:10:e3:88:eb:98:5b:c1:f2:bc:88:56:7d:84:
         43:36:70:a4:58:70:5a:a9:ad:fa:01:d8:2a:57:2f:42:80:64:
         29:3b:fb:df:91:36:9f:24:1c:b8:5d:c1:6c:a1:41:d1:cc:04:
         4e:02:41:21:46:35:b7:f5:c6:53:b8:aa:4a:71:ec:1f:0b:21:
         60:52:fb:19:e1:d9:8c:45:76:fe:d2:b3:af:c0:3b:13:b5:06:
         76:c3:1e:75:17:5d:cd:d8:66:da:c1:f8:e0:0b:79:6d:b0:0b:
         e7:0e:af:cb:d4:2e:eb:54:00:72:dd:28:16:e7:3b:91:6a:82:
         5d:0b:12:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:40:11 2025 by rpki-client