Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
File:                     Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft (raw, json)
Hash identifier:          s7XeOLAVPns7b7Si7iYdxuT00IkiG5C1KMY/Ro1Z3hg=
Subject key identifier:   55:A8:80:B4:60:45:16:E4:EC:30:EC:D6:3D:EC:E4:F9:16:AB:2D:F2
Authority key identifier: 06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F
Certificate issuer:       /CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
Certificate serial:       019A1B06C78007CCA9673A50CB3B7827644E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
Manifest number:          13CD
Signing time:             Sat 25 Oct 2025 11:00:20 +0000
Manifest this update:     Sat 25 Oct 2025 11:00:20 +0000
Manifest next update:     Sun 26 Oct 2025 11:00:20 +0000
Files and hashes:         1: Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl (hash: sXi0kIm4kaZ9f8oldB4rmVYJFVJODiCFb0qE/5ZrC4k=)
                          2: kVsLk-GwVR6PxNcCkI01AGuQido.roa (hash: rA9QYx0rx3lXPqBazEwKKf6dcd24i+QHCtscNmScr3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:06:c7:80:07:cc:a9:67:3a:50:cb:3b:78:27:64:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=068cb85bc4e9e4b732e957f08aa1c0237aadc47f
        Validity
            Not Before: Oct 25 11:00:20 2025 GMT
            Not After : Oct 26 11:00:20 2025 GMT
        Subject: CN=55a880b4604516e4ec30ecd63dece4f916ab2df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c3:b9:dd:2a:89:9d:e9:95:17:99:80:15:af:
                    e0:14:c9:7a:d5:a7:8a:e0:42:58:76:13:57:e2:6d:
                    d3:be:b1:39:71:c9:e8:59:4d:d4:0c:3c:53:a2:57:
                    f7:4b:44:9a:c0:73:e7:be:c0:de:02:0a:93:6d:93:
                    06:40:4e:6d:1c:d9:c4:51:74:56:06:33:dc:d9:7d:
                    bd:3a:51:3a:56:22:a1:b0:54:51:30:40:52:3c:05:
                    c8:f3:24:a9:86:b9:89:be:d9:bf:5b:65:c9:d0:05:
                    d7:dd:e1:35:e8:91:f7:5c:2c:e5:4e:db:e4:e5:a9:
                    2f:9c:c8:1d:9b:6c:aa:df:6b:b5:3c:a1:5e:18:68:
                    89:5e:17:12:ef:f6:f8:09:a6:d5:e3:29:38:77:e5:
                    dc:96:67:a7:0c:31:08:b9:fd:5c:8b:4b:30:db:ae:
                    84:fe:69:9e:76:81:bf:f6:6f:5c:e0:cd:63:e4:e1:
                    5d:70:a4:e6:f7:d5:0b:0e:a0:07:ff:e4:3e:86:67:
                    07:c0:5a:de:48:25:14:8b:f3:02:c8:3f:29:a8:e0:
                    e2:49:8c:09:96:e0:00:81:2c:bc:23:83:3c:ed:d0:
                    20:63:cc:c5:6f:f2:1e:a2:41:b8:10:2d:52:4e:29:
                    d9:aa:b5:b6:4e:cb:3c:d1:28:39:27:1d:6c:1b:59:
                    71:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A8:80:B4:60:45:16:E4:EC:30:EC:D6:3D:EC:E4:F9:16:AB:2D:F2
            X509v3 Authority Key Identifier:
                keyid:06:8C:B8:5B:C4:E9:E4:B7:32:E9:57:F0:8A:A1:C0:23:7A:AD:C4:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/18c856-18b1-4375-bcac-19f22ed613a5/1/Boy4W8Tp5Lcy6VfwiqHAI3qtxH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c2:0c:67:eb:a7:fa:3c:0b:3f:20:7c:88:7a:5e:e5:f1:cf:
         e4:ce:97:b5:35:cc:cb:6d:10:0c:9f:ab:78:ac:e3:75:09:f1:
         e0:71:22:60:8b:23:ea:11:5d:a7:8d:53:e0:7f:9f:43:2f:41:
         9b:00:10:07:2b:04:94:42:06:54:17:a7:60:cb:8c:25:17:b1:
         45:70:eb:27:9d:02:b2:d9:3a:7f:ef:01:e1:f7:5f:54:2e:f7:
         59:f6:8c:fc:7b:01:3c:af:b1:ca:05:8d:dc:3a:54:06:30:d4:
         a5:ea:5c:6b:f0:5f:8c:49:1e:73:1b:7e:c8:48:e7:6d:8b:e3:
         0c:4e:6d:69:32:3f:50:07:6f:a7:94:90:2d:ea:2d:cb:a9:60:
         8f:b1:de:13:22:ad:f6:cb:f8:93:b9:12:50:ac:44:7b:e6:e6:
         15:1d:ec:23:5b:09:3f:ac:18:00:94:5a:28:28:b6:6b:8b:6e:
         56:35:57:3e:d9:20:41:71:4b:1e:15:cb:b8:2e:9f:84:f1:50:
         0a:54:93:57:c1:83:5a:37:52:ae:90:76:49:ba:86:ae:c7:46:
         35:4c:4b:b0:a0:8e:83:49:18:14:1c:26:d2:7b:6f:3c:7d:45:
         00:c4:ae:8f:15:00:ca:da:15:8b:3f:ac:2f:03:09:5c:59:94:
         17:65:1b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:55:36 2025 by rpki-client