Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
File:                     bzHGTD5afeEED0Daj-3EfDj-Wfo.mft (raw, json)
Hash identifier:          IP1kvc/mFlXEzY8a/H6VbzBcvfNLewB/INhWc6vve0g=
Subject key identifier:   5B:15:A8:98:C8:86:C0:A0:5B:40:6D:03:EA:A3:F7:37:57:7B:8D:A0
Authority key identifier: 6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA
Certificate issuer:       /CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
Certificate serial:       01991688C61071A6F765D32BE5F983D422C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
Manifest number:          0F17
Signing time:             Thu 04 Sep 2025 21:01:26 +0000
Manifest this update:     Thu 04 Sep 2025 21:01:26 +0000
Manifest next update:     Fri 05 Sep 2025 21:01:26 +0000
Files and hashes:         1: V-ziE9ps9Cl1x9ik1a79A00SdKk.roa (hash: vAv5TpbiymJ0TO2JtzeVr/xllon/oJLZTZGZk+qEl8o=)
                          2: bzHGTD5afeEED0Daj-3EfDj-Wfo.crl (hash: UvGdZI8o5GQKWXAfdtGWPJWgZ3n8SyXhK+KFlmkAbUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 21:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:88:c6:10:71:a6:f7:65:d3:2b:e5:f9:83:d4:22:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f31c64c3e5a7de1040f40da8fedc47c38fe59fa
        Validity
            Not Before: Sep  4 21:01:26 2025 GMT
            Not After : Sep  5 21:01:26 2025 GMT
        Subject: CN=5b15a898c886c0a05b406d03eaa3f737577b8da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b1:18:4d:e4:28:22:3b:24:11:9a:3d:ce:37:
                    3f:57:78:e4:6a:cc:c1:a1:f6:6d:7d:07:0a:9c:26:
                    0b:1a:80:ce:88:06:b1:22:06:12:d8:3c:21:cd:7d:
                    73:46:87:1a:d6:00:d1:ff:d2:1b:54:3d:e7:36:df:
                    c2:76:92:ad:cf:61:64:59:f0:0e:f6:51:c3:5f:47:
                    44:23:ab:d1:e0:44:15:fd:d5:7e:a3:88:81:e8:55:
                    b2:bd:c2:46:63:07:06:96:25:0d:07:ae:ec:e8:0b:
                    a6:28:39:a2:ec:48:14:62:35:8d:54:4d:56:54:7e:
                    15:c3:1a:cf:a1:4d:94:49:d9:85:82:6e:09:ee:3e:
                    b0:eb:33:e8:52:e1:85:48:28:d8:1f:ec:64:f4:d2:
                    6b:a2:95:16:4c:27:0c:ed:8e:de:39:af:d4:99:62:
                    e1:0a:62:f6:49:ab:bf:07:a9:89:d3:b4:25:b2:06:
                    b6:70:77:41:56:a8:2b:e0:4b:d3:0e:7b:32:02:16:
                    d8:95:99:2c:82:9e:d4:fb:bf:72:9b:8f:7f:7e:47:
                    12:93:a7:e3:cc:e7:80:0e:49:34:5a:5f:77:a9:da:
                    a1:7a:0d:1a:33:3a:15:8f:77:cf:1f:6f:bc:f3:6d:
                    78:f1:d6:40:39:00:1f:b9:ea:0a:cc:82:5b:e5:0e:
                    64:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:15:A8:98:C8:86:C0:A0:5B:40:6D:03:EA:A3:F7:37:57:7B:8D:A0
            X509v3 Authority Key Identifier:
                keyid:6F:31:C6:4C:3E:5A:7D:E1:04:0F:40:DA:8F:ED:C4:7C:38:FE:59:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzHGTD5afeEED0Daj-3EfDj-Wfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8ed382-3097-413e-b6a2-b080a3451c7f/1/bzHGTD5afeEED0Daj-3EfDj-Wfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:74:3b:7a:8f:72:f2:1e:ec:13:6f:86:5e:83:3e:1d:43:12:
         26:f1:1e:83:c3:3e:26:f5:c6:2e:36:db:58:6a:d2:c8:7d:2a:
         fc:4a:da:83:c7:bb:8e:0f:0f:e7:67:b0:a7:00:db:c4:e7:ca:
         ac:05:e4:89:f4:25:11:81:d7:c4:b9:12:ca:ad:18:ff:32:d4:
         ff:60:c6:50:b5:33:e8:3e:dd:57:c5:c5:7a:87:0c:ae:84:83:
         81:73:52:76:9e:0e:75:41:de:1b:77:e5:83:ee:f9:a7:56:9e:
         a4:11:21:c0:ec:6c:b0:21:92:4c:de:95:84:54:ef:cf:c4:a1:
         79:64:98:06:14:0d:95:5c:25:79:a3:84:d6:8d:01:d2:3e:2b:
         f2:dd:13:6b:99:98:a7:f1:b8:51:96:5c:2e:dc:98:80:f4:3b:
         2f:2e:f1:00:27:a1:68:6d:fb:66:27:40:bb:29:1b:da:81:a0:
         66:d1:89:09:2e:75:d3:a4:e7:4b:ef:e0:2d:d0:9a:6b:20:e1:
         45:69:9f:8f:55:a5:3c:71:7c:a0:1f:ad:68:35:ef:dd:48:40:
         c0:82:58:6d:db:96:f7:0d:19:f9:cb:b6:ae:f0:bb:3f:3e:30:
         15:ef:d6:16:74:17:6c:fa:73:10:b3:cd:e2:95:e6:34:59:a2:
         9b:73:fc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:08 2025 by rpki-client