Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
File:                     BPRq-IXRzLsMCbBocHhbXmkXh-E.mft (raw, json)
Hash identifier:          xVOj1vkS5YtDKqRJT3p+SjJ6g07/0FKhjMMRiJTFO+A=
Subject key identifier:   E0:62:61:8C:9F:7C:3D:BE:39:9E:F4:0A:D9:13:7A:89:31:C6:E7:C3
Authority key identifier: 04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1
Certificate issuer:       /CN=04f46af885d1ccbb0c09b06870785b5e691787e1
Certificate serial:       0199FF59AE6EC91E84D3F079965B37156FC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
Manifest number:          08F3
Signing time:             Mon 20 Oct 2025 02:01:31 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:31 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:31 +0000
Files and hashes:         1: BPRq-IXRzLsMCbBocHhbXmkXh-E.crl (hash: IVWd2FFDWA4V+0M0yyWVKW1cRZbkEB9thywPoOGXolM=)
                          2: WLEkgsNLxhLL76J5KjgZ5ke2MzY.roa (hash: RM1foKQFE5R9Jao+pHN3ZInAMoldAOTi6T7jSW4GCSU=)
                          3: oZ7M5J6HpPSme6D2TdfG5_Zm_5g.roa (hash: 8k6SZEwbSYAoh3FpUOBzIDoo9yUrmYt/XSxxWhqtR38=)
                          4: yySGGL88ifuhtX4UWyplsao1PEY.roa (hash: PUZ7Y080pWmyPRE6f/sxnztUsgX4TTtPZlKlNa3Vh2c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:ae:6e:c9:1e:84:d3:f0:79:96:5b:37:15:6f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04f46af885d1ccbb0c09b06870785b5e691787e1
        Validity
            Not Before: Oct 20 02:01:31 2025 GMT
            Not After : Oct 21 02:01:31 2025 GMT
        Subject: CN=e062618c9f7c3dbe399ef40ad9137a8931c6e7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:53:a1:d8:7f:ae:43:db:5d:e0:34:00:71:
                    9c:fe:62:18:84:85:ad:16:68:26:2e:7b:41:93:9d:
                    cb:c2:e7:c4:26:26:b5:de:c8:7b:63:a7:2d:b5:73:
                    7a:b4:2e:0f:a9:85:2d:cc:53:21:61:b4:ba:35:57:
                    36:85:12:a2:ed:b2:a6:7a:f5:f9:f8:0c:53:5d:e0:
                    d5:ce:a7:f2:ea:b9:a6:eb:68:72:b4:39:dc:ad:c6:
                    7b:84:a9:de:bf:cf:bb:3a:79:9d:55:8f:a4:4d:cb:
                    2a:93:d7:1b:8a:c8:12:dd:4c:d1:3f:b6:00:29:73:
                    d3:41:08:77:44:d7:ff:83:77:1e:6a:4e:9a:1f:b3:
                    62:36:51:d6:8b:f7:1e:11:30:1c:b2:52:71:f0:ce:
                    96:ed:c3:73:c3:f6:d2:11:4a:2e:ca:19:b7:db:07:
                    5c:31:7e:6b:d2:68:8c:e1:15:ec:c2:89:d1:66:c9:
                    20:d8:81:b3:44:30:23:3a:71:b8:50:b4:28:7f:16:
                    7a:19:58:c3:32:89:56:1a:c6:f4:7c:b8:fe:ee:61:
                    cb:3b:32:9e:4c:6a:bb:2a:34:f0:15:ce:a1:e3:c2:
                    54:b2:ce:b6:54:1d:40:3b:3e:ce:09:27:24:6a:d1:
                    39:1e:a0:ef:be:e9:10:b6:bf:12:8c:6c:4a:f7:61:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:62:61:8C:9F:7C:3D:BE:39:9E:F4:0A:D9:13:7A:89:31:C6:E7:C3
            X509v3 Authority Key Identifier:
                keyid:04:F4:6A:F8:85:D1:CC:BB:0C:09:B0:68:70:78:5B:5E:69:17:87:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPRq-IXRzLsMCbBocHhbXmkXh-E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/fb53d6-ada8-426d-99fb-c5cf4b3b1ca6/1/BPRq-IXRzLsMCbBocHhbXmkXh-E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:3c:11:ea:5c:24:4d:fb:78:83:3d:b0:7d:06:e6:e8:22:de:
         d3:85:22:c8:ba:10:9c:80:5a:28:f8:ea:51:7b:b9:48:62:dd:
         b2:74:bb:99:c1:9e:9d:9a:e8:f8:3c:33:e8:be:f5:3f:f6:5a:
         5f:fb:a9:12:c4:d4:9c:c4:59:b2:ad:7a:3c:33:c2:73:74:7a:
         f3:ae:11:2d:3a:38:51:18:1b:39:9a:24:3f:56:27:f8:7e:74:
         71:67:76:e3:23:f7:7b:d6:fe:6d:5d:bb:57:0f:57:55:1d:13:
         ef:86:d2:ea:96:9a:22:ee:67:05:1f:00:f9:22:76:7b:d8:03:
         c7:14:b3:b3:49:34:a0:e5:0f:1e:2f:71:b1:6c:49:a5:0d:c5:
         9f:93:3f:8d:e9:c3:e8:62:1e:b9:3e:b7:3a:46:fd:19:f1:03:
         ee:39:00:0f:9a:69:26:8a:b7:b4:70:7e:1d:69:c8:0d:ec:89:
         b2:e5:54:2f:1e:2a:53:ee:70:43:55:49:07:c1:a4:bf:b2:9c:
         5d:0c:3d:8f:f9:e1:a7:86:1d:0a:78:17:7b:09:55:7f:9f:06:
         ac:6d:19:2a:2c:44:0b:03:13:42:95:0c:a0:e3:4b:a0:0e:36:
         52:03:76:4e:47:1f:b0:d3:30:23:7f:65:c1:59:51:10:06:cc:
         da:d8:47:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:52:58 2025 by rpki-client