Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          t1XQLjo2sFI3ToGkzfDYj0TUV6UWpoxZczk49nw4lVk=
Subject key identifier:   56:20:52:8A:57:C0:D2:77:A7:4F:E7:E7:12:40:BC:63:69:DA:5A:0F
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       0199FAD7EC905168A8A875AF8BB519CBC57B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          0492
Signing time:             Sun 19 Oct 2025 05:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:18 +0000
Files and hashes:         1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
                          2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: sITR5jXkuFS7kgKBa8FHdsaYSbcxQvsnl8X64bp2YUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ec:90:51:68:a8:a8:75:af:8b:b5:19:cb:c5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Oct 19 05:01:18 2025 GMT
            Not After : Oct 20 05:01:18 2025 GMT
        Subject: CN=5620528a57c0d277a74fe7e71240bc6369da5a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:4f:b4:e2:2a:64:3c:63:1c:97:9c:d4:6a:
                    5c:04:fc:be:b9:df:bc:77:20:8a:4f:a0:16:20:8a:
                    d8:d3:92:0e:6d:a6:1a:e9:96:35:f3:f7:fa:99:7e:
                    f2:8a:cd:6b:df:44:92:f9:6c:54:63:40:0c:e5:f4:
                    d4:ec:a4:0f:1e:85:b4:67:ec:f7:21:2f:59:ad:fe:
                    8f:ab:4e:f7:38:ee:8d:ed:ec:dd:a9:cd:b6:2a:60:
                    85:5b:d4:ba:31:e1:60:bc:db:db:d7:e9:9b:0f:56:
                    2e:a1:a9:67:3b:e9:21:30:82:7b:3c:5e:a6:1f:37:
                    71:f4:51:27:d2:2d:05:a7:61:4b:f2:c1:ee:67:75:
                    9e:d8:af:38:4e:ed:46:03:28:eb:c4:83:1a:1a:b4:
                    86:24:d7:1a:6c:9f:b8:22:74:7b:65:c1:cb:5e:e9:
                    bc:a4:9f:5b:6e:7e:44:4a:51:2e:9f:4d:3d:a3:c0:
                    37:be:a2:1e:db:ed:72:44:be:ae:62:0a:6c:72:11:
                    26:50:f2:45:53:25:53:12:0b:c2:20:22:6d:d2:bf:
                    2b:35:7a:3a:5d:22:02:77:34:a5:d9:10:34:ab:dd:
                    a6:15:b9:43:59:59:bc:46:d6:5b:69:65:32:85:d4:
                    f4:24:37:54:46:de:f0:6f:56:91:ea:20:16:a5:c7:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:20:52:8A:57:C0:D2:77:A7:4F:E7:E7:12:40:BC:63:69:DA:5A:0F
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:f8:41:dc:00:9b:aa:5e:f0:37:a7:53:3d:7b:0a:b5:df:bf:
         37:6c:a5:9e:e5:ee:65:b9:5d:8a:9a:a1:64:4a:fe:2b:d4:e2:
         80:d4:5c:f1:f2:1a:8e:bd:62:4b:4e:5c:2e:c0:8e:d1:82:48:
         9d:01:e9:a2:8f:80:17:83:d7:79:68:fa:3b:73:7d:9c:1a:2f:
         99:76:7f:85:1f:bf:c9:3c:f3:cc:35:42:31:e8:33:42:e3:3b:
         9d:f4:45:e7:f9:3b:96:ab:1c:f8:ef:b3:69:04:90:62:c2:e0:
         75:72:e4:a8:04:a0:7f:2f:59:e7:49:a7:5a:a6:0b:fb:f1:73:
         77:f7:eb:d9:c2:84:69:d7:c4:60:b0:4e:f2:58:59:b1:09:dd:
         dd:fe:0a:ec:79:6f:0d:e0:60:ef:a9:63:f8:d3:b5:3c:12:ba:
         40:dd:c1:ff:ea:8b:cb:20:3e:62:ed:0c:e0:64:bd:cd:2a:87:
         0d:da:db:71:b9:38:72:1a:63:d4:3f:f3:0a:14:31:00:72:f1:
         8f:ec:24:64:1c:fa:67:d2:47:65:c4:ca:87:81:60:f3:c1:20:
         6a:f5:f1:03:8c:96:ec:ca:47:a4:12:a6:c9:5b:90:c4:ec:a7:
         28:d1:f8:e8:d2:b6:19:14:07:c9:ea:18:78:32:35:a7:bb:7d:
         39:01:38:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:14 2025 by rpki-client