Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File:                     BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier:          CuT/9JRBr/RGXcyZwEPmHB+wWi0CrT5HbrzaoxcR7eM=
Subject key identifier:   59:04:92:6C:55:C3:F2:3B:D6:61:65:00:49:E0:32:00:DF:6B:68:8C
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer:       /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial:       0199FE477E3843F4DF4EB9C367407A25E789
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number:          0D4F
Signing time:             Sun 19 Oct 2025 21:02:02 +0000
Manifest this update:     Sun 19 Oct 2025 21:02:02 +0000
Manifest next update:     Mon 20 Oct 2025 21:02:02 +0000
Files and hashes:         1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=)
                          2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: QTPARBmdp9atzTHwibLbtkTyPgT8r28JkpSRuS9XPcY=)
                          3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=)
                          4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:7e:38:43:f4:df:4e:b9:c3:67:40:7a:25:e7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
        Validity
            Not Before: Oct 19 21:02:02 2025 GMT
            Not After : Oct 20 21:02:02 2025 GMT
        Subject: CN=5904926c55c3f23bd661650049e03200df6b688c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:1c:a2:63:76:33:2c:a1:ce:e4:53:03:26:
                    c3:98:3b:02:30:8c:7c:cd:7e:a3:01:80:e4:a8:f3:
                    74:a6:25:bd:5c:31:64:4a:04:52:77:e3:f2:64:24:
                    5e:6d:ce:85:9b:c6:b1:cf:a2:ca:93:4b:1b:d2:31:
                    90:26:64:16:c2:8d:1a:aa:77:42:62:8e:db:c9:f9:
                    56:8d:39:55:2c:02:aa:c9:b2:41:3a:ec:08:f9:fd:
                    ce:4f:7a:19:58:be:6a:8e:e7:1b:3b:70:d9:e9:e9:
                    ac:60:98:73:c3:68:34:b0:ea:48:e7:4c:a8:3f:59:
                    2c:dd:a2:31:27:4c:bb:e2:46:ae:d4:11:00:ff:7c:
                    c8:6e:ac:17:1f:dd:19:85:52:9e:7d:89:58:a7:87:
                    78:9b:22:d3:a9:26:1a:23:95:06:8f:d7:86:bb:37:
                    02:7b:b0:fc:3c:27:41:03:8c:3c:44:43:18:7e:ac:
                    5f:57:35:e8:e5:a8:2f:b8:62:a3:09:a1:a1:23:1b:
                    f8:01:a1:96:0a:0e:1b:36:70:c2:33:54:21:ec:07:
                    12:11:6b:44:85:65:07:b8:11:e1:6d:3d:a7:89:6f:
                    0e:3c:b3:3b:84:0e:7d:fa:88:68:24:11:41:df:20:
                    43:5f:cd:c3:68:ab:74:87:78:29:18:f5:d0:e1:64:
                    8a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:04:92:6C:55:C3:F2:3B:D6:61:65:00:49:E0:32:00:DF:6B:68:8C
            X509v3 Authority Key Identifier:
                keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ae:41:4d:25:cc:7c:f3:4a:49:51:c8:7e:93:35:24:0a:1f:
         7f:50:ac:b4:a1:78:2b:8d:d9:f9:7a:35:01:cc:63:10:91:69:
         33:1f:a8:b9:fc:72:6f:68:33:f3:a0:cd:97:aa:c4:45:27:2d:
         36:8d:19:19:af:65:16:cf:a4:f0:54:a9:52:7a:32:6d:e0:f9:
         88:34:72:14:f3:29:9e:ea:a5:65:74:61:31:b5:c7:72:4c:2e:
         0d:70:c4:ee:d7:f4:70:55:a3:55:b3:13:6e:1f:b1:ec:c2:80:
         e2:07:77:d2:25:f4:f2:61:ca:2a:06:f0:07:a6:22:4e:53:a0:
         d4:ec:aa:f0:d0:38:1e:c3:81:a7:d0:9f:dc:64:1c:ad:6e:56:
         48:33:01:b9:06:72:3f:34:c8:52:d2:72:37:d2:09:81:6c:2a:
         31:f4:02:a0:df:c4:ba:64:af:6f:0e:ce:12:67:d9:6d:2d:cf:
         14:4e:16:8b:f9:92:0f:3b:09:50:a6:9e:97:62:9f:3c:54:f0:
         ad:a5:86:f4:3a:c5:1a:8a:01:9c:48:71:2b:30:db:42:87:33:
         bf:06:21:ef:37:b1:83:d3:11:b3:10:5f:2e:9a:0e:6f:32:76:
         6c:12:73:09:0f:35:f0:05:4f:b8:48:ff:d6:f6:67:ec:51:d1:
         a7:7f:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:39 2025 by rpki-client