Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          U5rA/bFL5I0LPOGh1Tz7J2eFfGh58onCxrTYsPbXTaI=
Subject key identifier:   34:AF:36:6F:BA:36:28:98:5A:E8:BD:CB:61:E0:5A:9E:41:C6:FA:D7
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       019A49CE13980595DF7BD2DD95D94E6F472A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0F3B
Signing time:             Mon 03 Nov 2025 13:00:33 +0000
Manifest this update:     Mon 03 Nov 2025 13:00:33 +0000
Manifest next update:     Tue 04 Nov 2025 13:00:33 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: 87fFO4rLeuwM/mnbhwzUIo78zizQPC13hFdTtfIgteE=)
                          4: ijeoYWWuQU7RZMBbxRTbMcXGHJ0.roa (hash: EhlVkFVVdh4wazceOuNOkG+gmIkWhBrp+b57IZ5gdpU=)
                          5: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 13:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:49:ce:13:98:05:95:df:7b:d2:dd:95:d9:4e:6f:47:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Nov  3 13:00:33 2025 GMT
            Not After : Nov  4 13:00:33 2025 GMT
        Subject: CN=34af366fba3628985ae8bdcb61e05a9e41c6fad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2f:41:9d:27:3e:66:02:97:45:b8:31:22:26:
                    eb:8c:86:44:5d:f9:4d:f2:3e:0d:eb:2d:a2:59:af:
                    55:5e:74:09:61:10:e9:d2:fa:46:1a:6c:a4:0b:7b:
                    19:80:39:36:ee:07:0e:63:0c:f1:bc:43:76:66:1b:
                    5d:15:a8:f7:41:bf:12:d4:94:90:c4:f6:20:6d:5b:
                    9a:6e:d8:db:b6:f5:f3:ff:cc:0d:7f:d1:8e:9c:7d:
                    c3:22:bf:28:61:23:d6:bf:ac:11:9f:02:a4:04:54:
                    9d:cb:34:ee:9a:39:b1:bb:85:96:a8:0e:44:64:a4:
                    45:9d:20:12:85:b2:70:39:c2:ef:f5:22:52:0f:09:
                    38:2e:23:fe:b4:98:55:a0:33:06:27:ed:42:3f:a9:
                    f0:09:0d:a4:d8:10:71:44:1c:79:7c:43:1b:f0:20:
                    81:27:13:d7:c2:08:28:3a:53:18:7b:d6:1e:e3:6b:
                    62:9a:bf:5f:dd:ff:be:ff:cc:18:93:1c:50:d2:8f:
                    c8:55:f0:65:0a:5f:bf:9b:fb:6d:7b:1e:c8:03:eb:
                    d4:f4:83:4c:aa:ea:87:a8:83:a8:f9:07:c7:ae:73:
                    5d:62:6d:47:e2:8f:21:a5:23:b6:74:65:b8:80:2e:
                    72:52:83:72:a0:f9:9c:18:5c:2a:c1:de:89:52:bb:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AF:36:6F:BA:36:28:98:5A:E8:BD:CB:61:E0:5A:9E:41:C6:FA:D7
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:0e:e5:7d:78:5b:ff:3f:2e:f5:3e:f2:35:47:b4:1a:76:cb:
         ab:10:71:99:3b:4a:ef:0e:80:d1:65:d4:0c:d2:eb:87:c1:48:
         56:f1:c4:2f:47:34:5d:98:75:dd:d1:90:35:e3:17:44:14:e1:
         fb:ef:32:0f:69:67:bc:80:e1:87:e0:cf:32:e2:51:a4:32:95:
         0a:72:ea:6e:e3:72:d1:25:36:4a:3a:f3:ee:0a:cd:be:73:c5:
         72:c1:50:68:f9:63:23:ab:a3:96:d0:5d:00:06:3f:67:7a:94:
         a1:e4:2e:39:f6:a5:3d:61:03:84:eb:4c:74:4f:51:00:b7:35:
         d5:08:83:34:6f:23:58:fc:23:e1:d9:bb:ae:d7:6d:6d:10:6d:
         df:53:e5:66:09:b0:3e:e3:9b:d5:29:03:b3:88:c4:28:fc:41:
         45:70:85:c2:f9:cd:44:f3:95:42:5a:17:cd:89:e8:ec:0c:88:
         4b:16:f6:df:cc:35:59:1e:7a:a0:1c:79:96:47:ae:88:6a:fd:
         09:5b:f2:64:82:47:41:06:5d:56:26:95:07:bf:d0:34:79:78:
         42:b3:29:13:5c:c6:f6:c9:47:f8:cd:14:1d:16:29:24:d4:2c:
         82:f6:e5:b2:8c:41:9f:e4:6a:83:1e:f9:27:e5:ba:1c:85:f5:
         24:ab:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 17:01:01 2025 by rpki-client