Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
File:                     BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json)
Hash identifier:          lDMh3MYw5+YV08fbmB15zQd0o2x44EDJ3GGWNgMc10U=
Subject key identifier:   1C:A8:29:48:D4:11:08:23:9B:35:8F:09:96:FD:3C:C3:F4:DA:1E:CF
Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1
Certificate issuer:       /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
Certificate serial:       0199FC21BF478EDB36E46F4F940AB6635C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 11:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:34 +0000
Files and hashes:         1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: gRZibqtVOcYYs9MSCBYhFvPtSMm7KHc94S2dz4M/ol4=)
                          2: Vmwsf00DfqOwuLyDtJ5jOR7xMVY.roa (hash: P2Qrd2w/dVDOjboJIyQokkF6gW9skwfXbb15mFHi7ww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:bf:47:8e:db:36:e4:6f:4f:94:0a:b6:63:5c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1
        Validity
            Not Before: Oct 19 11:01:34 2025 GMT
            Not After : Oct 20 11:01:34 2025 GMT
        Subject: CN=1ca82948d41108239b358f0996fd3cc3f4da1ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fb:c4:bd:41:c6:8e:32:d8:62:de:56:86:fd:
                    6d:31:16:ba:56:56:cf:46:6a:d4:4e:ac:e7:05:52:
                    84:b7:b1:d9:60:c6:b0:7d:67:fa:bc:c9:d4:63:43:
                    23:8f:41:be:57:ab:e6:67:d9:71:3e:15:73:65:b9:
                    7b:3d:7c:82:11:f9:1f:b0:34:fa:77:e7:ce:8b:0e:
                    84:3c:91:34:2a:32:7d:e9:6c:13:7a:aa:e5:0f:11:
                    ba:66:22:a6:45:02:14:9f:a1:da:a5:b4:eb:8d:c9:
                    ee:4e:1c:b6:f2:2c:f6:96:37:4f:81:68:b7:0f:c1:
                    a6:ff:05:f2:75:ba:12:ca:78:0f:49:64:c0:f9:7d:
                    f2:fa:6a:19:fc:20:01:63:5d:44:e0:ca:4d:e5:80:
                    d6:f0:df:72:8d:04:60:1c:7d:bd:ec:17:9f:2b:cd:
                    05:d4:e0:6c:af:13:e4:87:8b:0b:61:33:b9:94:6d:
                    e4:26:80:8d:3a:af:06:4f:e3:6b:b4:bb:1f:b4:bb:
                    87:ea:1b:42:21:e3:02:e1:74:5c:db:e9:e0:88:e9:
                    de:a6:ec:96:0a:64:08:a2:f5:4d:99:3f:51:ca:76:
                    f1:75:24:c4:1a:dc:ff:17:2a:e2:36:17:7b:49:c5:
                    0e:3d:d1:f9:d7:1a:02:31:43:a1:54:38:2d:08:72:
                    52:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:29:48:D4:11:08:23:9B:35:8F:09:96:FD:3C:C3:F4:DA:1E:CF
            X509v3 Authority Key Identifier:
                keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:1b:75:ac:0c:bd:d4:d8:79:a2:89:4d:12:7e:46:98:fc:82:
         6f:69:83:6c:e2:e4:2e:90:8e:0a:57:46:dc:28:d6:9d:04:80:
         a1:fb:a7:41:ea:24:bc:2d:f6:1e:50:d1:e0:d2:de:c7:18:b8:
         f7:0a:12:b1:e8:03:54:ac:a9:3f:1b:27:6e:23:f1:9b:33:03:
         69:f5:70:b9:59:97:21:ef:26:2d:9a:1e:67:c2:e2:15:48:27:
         e8:d4:48:19:3a:4e:7f:3a:0b:2c:b5:69:cb:76:8f:25:51:ed:
         2e:f2:a9:63:cd:b7:03:c5:a1:bf:6b:37:aa:f7:dc:a1:a3:3f:
         05:c6:cf:cc:bb:6b:e7:19:84:c2:76:c0:b9:96:42:36:ea:cb:
         2e:5c:1a:d5:d8:56:b3:a7:c5:49:c2:ff:d4:71:26:ad:b4:a3:
         69:41:b1:b9:bd:e4:9c:4f:22:dd:57:14:ed:93:b2:86:e6:4e:
         21:79:2f:69:e6:ac:bc:3b:5b:bd:f5:f5:9a:70:fc:17:88:3d:
         22:1b:8c:e8:9c:7b:d6:39:9b:c6:98:93:eb:72:8b:19:95:e2:
         fb:35:bd:3a:79:e2:b1:b3:74:fb:14:ab:24:0f:cd:56:e6:1d:
         61:ea:16:11:75:6b:ae:68:72:b8:63:bc:65:8c:f4:11:d6:ec:
         35:66:a7:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8Ib9Hjts25G9PlAq2Y1xSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz
NDdmZDEwHhcNMjUxMDE5MTEwMTM0WhcNMjUxMDIwMTEwMTM0WjAzMTEwLwYDVQQD
EygxY2E4Mjk0OGQ0MTEwODIzOWIzNThmMDk5NmZkM2NjM2Y0ZGExZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vvEvUHGjjLYYt5Whv1tMRa6VlbP
RmrUTqznBVKEt7HZYMawfWf6vMnUY0Mjj0G+V6vmZ9lxPhVzZbl7PXyCEfkfsDT6
d+fOiw6EPJE0KjJ96WwTeqrlDxG6ZiKmRQIUn6HapbTrjcnuThy28iz2ljdPgWi3
D8Gm/wXydboSyngPSWTA+X3y+moZ/CABY11E4MpN5YDW8N9yjQRgHH297BefK80F
1OBsrxPkh4sLYTO5lG3kJoCNOq8GT+NrtLsftLuH6htCIeMC4XRc2+ngiOnepuyW
CmQIovVNmT9RynbxdSTEGtz/FyriNhd7ScUOPdH51xoCMUOhVDgtCHJSmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByoKUjUEQgjmzWPCZb9PMP02h7PMB8GA1UdIwQY
MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt
YjZjYzRkNTcxMTdlLzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl
LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRt1rAy9
1Nh5oolNEn5GmPyCb2mDbOLkLpCOCldG3CjWnQSAofunQeokvC32HlDR4NLexxi4
9woSsegDVKypPxsnbiPxmzMDafVwuVmXIe8mLZoeZ8LiFUgn6NRIGTpOfzoLLLVp
y3aPJVHtLvKpY823A8Whv2s3qvfcoaM/BcbPzLtr5xmEwnbAuZZCNurLLlwa1dhW
s6fFScL/1HEmrbSjaUGxub3knE8i3VcU7ZOyhuZOIXkvaeasvDtbvfX1mnD8F4g9
IhuM6Jx71jmbxpiT63KLGZXi+zW9OnnisbN0+xSrJA/NVuYdYeoWEXVrrmhyuGO8
ZYz0EdbsNWansA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:38 2025 by rpki-client