Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          1kedF+Z8cqsQAbp8WulW+U4NuoASUmtRvjkMOpdH62M=
Subject key identifier:   08:93:B1:02:C2:2C:3C:AA:6D:D9:57:93:E9:DF:22:C7:F0:4B:98:A4
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       0198D54E5DC7A268BC96D2782BB87FA1372B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          03FA
Signing time:             Sat 23 Aug 2025 05:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:19 +0000
Files and hashes:         1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
                          2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 8+X8Oveb3vnzID0ZQG325ggMq6f65noLH2hMSXnU1Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:5d:c7:a2:68:bc:96:d2:78:2b:b8:7f:a1:37:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Aug 23 05:02:19 2025 GMT
            Not After : Aug 24 05:02:19 2025 GMT
        Subject: CN=0893b102c22c3caa6dd95793e9df22c7f04b98a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:55:de:88:e2:6e:18:f0:9d:09:e1:69:6a:
                    0c:ce:48:e7:b9:a1:35:8f:2c:1d:1e:0f:43:e2:59:
                    1a:20:c6:bf:cf:fd:45:a1:46:7d:45:23:25:a0:f7:
                    a4:87:c6:41:73:6e:cf:59:fa:8d:dc:21:b9:e5:cf:
                    03:06:9e:d6:83:ec:f0:6a:b4:71:ab:eb:35:46:19:
                    90:8c:ba:c7:8d:9f:cc:a1:39:77:95:a8:67:07:cb:
                    d9:43:ee:e9:2e:7a:c4:86:c4:d8:82:88:29:9f:97:
                    9e:cd:22:7a:5b:ed:da:9f:29:1f:f2:24:c4:d8:ed:
                    e7:9f:6b:0e:cb:0a:91:23:b8:fd:e6:f2:4a:d9:87:
                    5b:e1:c5:08:67:9c:95:b0:93:aa:bd:c7:f6:76:47:
                    b5:78:ae:f5:4b:60:2c:ea:78:b1:77:14:a1:23:33:
                    f5:0c:4d:91:13:b5:fc:ae:7e:23:d3:a2:fa:7e:c1:
                    60:12:f4:a0:25:80:e6:71:c8:f5:c0:aa:ea:af:11:
                    f6:1b:3c:ac:4e:ab:b4:17:23:39:d6:34:53:43:79:
                    31:25:ad:6c:53:ad:bf:55:98:54:2f:c0:57:d3:44:
                    e9:a1:20:22:05:97:e7:3d:62:73:87:41:e8:2e:9f:
                    15:94:52:f6:9b:aa:8d:0c:1a:ca:28:5e:b2:f7:34:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:93:B1:02:C2:2C:3C:AA:6D:D9:57:93:E9:DF:22:C7:F0:4B:98:A4
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:45:99:bb:d7:61:b5:32:7f:d6:00:d3:5d:41:db:04:11:0b:
         2a:2e:f1:59:8c:cd:de:31:78:96:b5:a6:6b:62:dd:eb:38:c8:
         3a:81:38:97:8d:23:b7:43:d5:47:db:21:e0:22:7a:f7:ec:a7:
         1a:dc:e8:cf:1a:76:cf:79:05:ab:84:ef:7b:1e:c1:1c:db:7c:
         bd:85:b3:4e:1a:34:1c:7e:05:bd:65:35:a0:f4:8a:d4:a6:83:
         8d:f5:ac:0a:f2:7d:31:de:b9:9e:5d:b6:ab:da:bc:38:4d:e2:
         64:e4:c1:45:ab:ed:ea:d5:f6:d7:a6:1e:ab:b7:63:76:24:28:
         93:ca:cd:84:95:da:b9:bc:7f:0c:8b:db:48:69:76:d2:7f:33:
         b4:5a:0f:32:bb:5e:27:4c:79:b8:6d:10:4b:df:ad:8f:c6:4f:
         b5:d5:fc:99:88:7e:d9:ff:17:ff:88:51:4a:dd:7f:68:3a:76:
         80:e3:6c:26:b9:7f:29:c8:03:9e:1e:d0:4c:ad:a8:7d:1d:11:
         52:bf:37:89:10:47:d0:cd:96:b8:20:a7:a8:57:e2:a0:fc:81:
         0c:5b:68:e4:e3:d1:4a:28:97:04:62:30:3e:3a:18:11:e6:63:
         d1:ec:2e:f1:58:50:60:c3:19:0a:fc:e1:27:34:40:d6:75:df:
         cd:7e:2f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:51 2025 by rpki-client