Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File:                     bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier:          DFbaxALRDlPKD8lBj/gZv4+qSBJQRss7vBSc0PEyEV8=
Subject key identifier:   94:60:6D:7A:1B:55:C2:27:D9:39:F3:23:4A:AD:E3:DC:C9:09:43:43
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer:       /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial:       019A71B7EC65EB0B8EF829061C809490ECE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number:          16B0
Signing time:             Tue 11 Nov 2025 07:01:10 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:10 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:10 +0000
Files and hashes:         1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: Iape+WL58Yw/INxsJE7KeRqeJ2NwKRbHa7sH46CCMX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:ec:65:eb:0b:8e:f8:29:06:1c:80:94:90:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
        Validity
            Not Before: Nov 11 07:01:10 2025 GMT
            Not After : Nov 12 07:01:10 2025 GMT
        Subject: CN=94606d7a1b55c227d939f3234aade3dcc9094343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6e:cb:36:90:78:2e:49:54:4b:7e:96:25:32:
                    45:f7:3c:22:6a:22:ed:5d:bd:c8:66:d9:4c:c4:7f:
                    e3:13:46:a9:e6:9d:0f:10:4a:65:fa:79:a0:a5:c2:
                    ea:52:41:e1:5d:9c:02:6d:ae:7b:86:e2:62:90:66:
                    34:9d:fe:90:b0:65:a2:55:6d:34:b5:66:ff:73:58:
                    cd:5b:47:d4:e2:cf:37:7b:b4:cd:f6:22:01:9e:7c:
                    2a:9d:7e:a5:35:37:76:bc:a5:41:10:a5:2c:c6:ec:
                    11:62:25:ed:64:52:c1:35:08:84:39:25:3a:d5:69:
                    81:6f:5e:1a:1f:53:00:cd:6a:ba:c0:e3:51:4b:8a:
                    c5:4f:e8:57:89:85:29:94:c7:7b:ef:00:24:07:02:
                    a0:0e:19:34:95:b8:3a:9c:c7:61:7d:49:1f:e5:50:
                    37:c0:94:3c:6d:22:3a:7c:34:4c:b1:b1:2d:74:37:
                    ab:7e:c5:65:2d:d9:56:89:7c:b5:17:6e:4c:12:d5:
                    63:bd:2d:9b:bc:96:69:41:35:3e:13:ae:c1:ac:a2:
                    9c:c5:72:3b:21:0b:b6:ac:ed:3e:ba:eb:1b:f2:24:
                    1b:2c:f9:ab:8f:fc:47:98:1f:e1:2d:f6:ad:29:55:
                    54:2c:3e:cd:fb:da:ff:d3:8d:21:45:ab:cd:37:a3:
                    1d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:60:6D:7A:1B:55:C2:27:D9:39:F3:23:4A:AD:E3:DC:C9:09:43:43
            X509v3 Authority Key Identifier:
                keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:b1:63:b4:40:3e:6b:cd:76:a1:24:b4:cd:bb:76:8e:f2:24:
         d9:2b:fd:24:2c:49:4b:c6:20:17:b9:17:84:95:f4:0d:8f:ee:
         5d:7e:d2:b1:c7:13:26:76:3f:de:fa:94:ed:ed:a5:88:10:6f:
         dd:46:86:2d:1a:a8:5c:46:da:d6:87:97:04:76:f3:60:58:61:
         b1:7c:a5:9d:a9:43:a8:3c:31:25:df:8c:b4:0d:13:39:dd:b2:
         d3:08:bf:d1:b8:dc:2b:ae:53:37:07:94:ef:e9:80:97:61:8b:
         30:80:71:6b:9a:77:51:56:4f:cb:c1:f2:ba:5f:51:0c:f8:6d:
         7b:91:bf:75:66:70:07:02:05:bd:0b:ae:55:7f:95:19:a1:53:
         3d:56:20:d4:5d:6d:de:98:1f:aa:2c:7e:ba:5a:95:b7:db:d8:
         12:11:49:91:75:77:0c:02:1e:c7:fd:0f:6d:7b:55:b1:e7:01:
         fb:f5:b7:34:a5:4f:39:1f:17:94:d4:19:f8:99:0e:ca:91:d2:
         b3:8b:0f:39:a3:43:a1:39:7a:90:71:f4:0a:43:f6:b6:a5:e4:
         fe:5d:d1:66:89:2f:09:7d:d4:3d:22:1e:26:00:a3:23:57:6f:
         8f:51:8a:a5:4b:e0:bd:3e:82:74:76:b2:79:bd:6d:eb:2e:58:
         a3:26:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:03 2025 by rpki-client