Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          uTT0gE5NVGdorIvZpOkge12lGGWHlRqVGE61JggmUyc=
Subject key identifier:   1B:C0:54:65:01:DA:3C:D8:07:16:E8:C3:E1:D5:0B:59:67:04:B1:B7
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       019A1CBE78C7D41A077B8AA508CB27789CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          1127
Signing time:             Sat 25 Oct 2025 19:00:35 +0000
Manifest this update:     Sat 25 Oct 2025 19:00:35 +0000
Manifest next update:     Sun 26 Oct 2025 19:00:35 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: 9H9srKnw8RvIQeJ9hJqs_fat0r8.roa (hash: R1zUkw4irStUEIrGPrquDCCAKD1sKGpT/yIr3uujFtc=)
                          3: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: rImGfgzByuWmgBL1h963kpYlr0ItJb5WTfvkjx9zXWk=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:be:78:c7:d4:1a:07:7b:8a:a5:08:cb:27:78:9c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Oct 25 19:00:35 2025 GMT
            Not After : Oct 26 19:00:35 2025 GMT
        Subject: CN=1bc0546501da3cd80716e8c3e1d50b596704b1b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:54:61:05:00:d1:a4:1f:34:8c:1b:47:77:92:
                    a7:05:4e:21:d7:58:bc:86:ec:34:6e:28:3a:67:c6:
                    e4:14:1a:22:99:b2:e8:6c:72:69:c7:1a:a7:fb:80:
                    e6:10:3c:ee:46:c0:8f:ce:2b:c8:03:7a:b1:10:f9:
                    24:0a:a4:f5:34:de:5d:c1:5e:b4:31:cd:1c:91:b7:
                    1c:1e:2d:b0:02:1f:c8:4c:41:5b:15:fd:6a:61:86:
                    40:8f:c2:fd:31:0e:91:73:ce:09:70:f3:1f:63:00:
                    82:5f:2e:76:57:45:7e:b3:dd:36:ed:7b:c7:72:38:
                    d7:09:65:c3:30:ae:b6:ff:f4:a1:6c:b2:05:f4:79:
                    b9:45:7c:4b:95:1f:bd:25:c9:a3:04:d8:3a:b6:84:
                    52:3a:4b:78:25:1f:3b:70:40:42:9a:16:5a:cc:2f:
                    21:96:eb:2b:c5:70:6b:7c:b8:6b:24:52:95:f8:f5:
                    e8:41:5e:74:70:ef:ef:61:3f:3d:fc:6c:67:76:9e:
                    b9:cb:99:d3:d9:c4:fc:ca:8e:63:4c:ca:95:d1:b3:
                    a8:34:fe:0c:74:33:fa:3c:7d:c7:8b:0e:3a:b6:01:
                    d4:4a:44:09:9b:59:d0:78:4d:59:01:2e:05:8e:5c:
                    eb:2e:b1:f9:de:9d:13:90:fa:82:ea:f8:ac:44:c9:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C0:54:65:01:DA:3C:D8:07:16:E8:C3:E1:D5:0B:59:67:04:B1:B7
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:98:56:c8:52:5d:4a:f3:5a:5a:3c:6a:11:64:f1:e5:85:60:
         fb:ec:02:6d:ae:11:44:16:95:2b:6a:cf:39:e8:fd:14:36:8f:
         2e:4a:ad:c4:4e:0b:df:35:4b:34:09:18:09:47:05:34:b4:5a:
         3c:a4:94:49:ca:af:8b:f5:67:46:d2:d6:35:7f:bd:d6:7a:d5:
         83:38:f0:2a:a7:3e:ee:84:cd:1b:32:44:c8:88:77:9d:b6:6e:
         71:50:f1:b9:ea:00:70:03:c3:da:d5:65:60:22:66:c2:24:34:
         96:53:c7:b5:8f:34:67:77:7d:d4:77:24:f0:6a:bc:13:31:0a:
         93:29:44:a5:2f:9a:25:76:af:57:1d:5f:e9:f0:5b:e5:26:94:
         22:d5:cc:be:fd:37:34:b8:6f:e4:7b:e8:3f:d0:f3:e9:b6:6c:
         88:b5:2d:16:c2:3e:68:99:b3:b6:fc:7e:38:ee:54:2e:1a:d2:
         32:a3:e1:42:f9:bf:c6:c3:22:2a:ff:d8:4c:73:54:6d:c2:67:
         f1:27:b6:8d:7a:bd:a4:dd:f0:4c:e2:7e:65:6b:ba:fe:02:7b:
         a0:5f:37:47:81:e0:16:24:cf:91:3d:d0:0d:38:f8:ad:ea:0f:
         90:43:bc:01:5d:fc:4a:1f:97:b0:c2:6b:1f:3c:09:c5:38:81:
         17:30:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 01:43:16 2025 by rpki-client