Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
File:                     BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft (raw, json)
Hash identifier:          esY4AEshlnBSJf3i/wHO/TVWgnTqxAGNnXY5opMp0sY=
Subject key identifier:   E2:DC:4E:E7:03:F3:E7:C3:02:BF:22:63:B6:F0:41:BA:C2:3C:C8:DA
Authority key identifier: 07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA
Certificate issuer:       /CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
Certificate serial:       0198D7E1845C39933947FA39E6F0E53BC331
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
Manifest number:          0ADA
Signing time:             Sat 23 Aug 2025 17:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:17 +0000
Files and hashes:         1: 68akK538AgBQpzV9ol21s3i1l5E.roa (hash: FVtdNzWjJOk17abGuskk0fG+irWuLqKU8WFk4kXyjGs=)
                          2: BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl (hash: zvlUplxfmhafLv3KkVIb3IP6b23UFbeWUVVyR0AaEXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:84:5c:39:93:39:47:fa:39:e6:f0:e5:3b:c3:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07033a910fcf2c1b15977a18ace7d857ba58b9aa
        Validity
            Not Before: Aug 23 17:02:17 2025 GMT
            Not After : Aug 24 17:02:17 2025 GMT
        Subject: CN=e2dc4ee703f3e7c302bf2263b6f041bac23cc8da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:37:a1:49:3f:11:8e:82:cc:52:18:da:5b:97:
                    83:88:ed:15:d3:3f:27:c3:1b:fb:8d:8d:2f:64:ea:
                    79:69:4a:1e:8e:55:79:5d:a9:a7:62:ae:30:86:b6:
                    70:92:26:67:34:1d:e3:33:57:ed:38:6f:ad:6d:99:
                    39:7e:b2:ac:0c:4b:e7:38:4b:14:2d:3c:05:52:ef:
                    57:7e:35:7b:03:12:b5:e3:60:16:6a:4a:b2:4a:70:
                    37:49:88:4b:55:5b:0f:ae:39:90:27:55:ae:56:db:
                    ca:88:20:c0:27:4a:08:76:f8:ff:11:92:ff:bf:a0:
                    3a:b3:c8:c7:8d:a6:09:2d:3f:ea:bc:63:be:35:e3:
                    de:e6:fa:ea:7b:41:87:cd:c8:67:81:af:c3:3f:21:
                    55:1b:b4:92:13:d6:a9:2a:97:cb:70:6e:0c:14:6b:
                    c8:31:83:d4:b2:48:a8:ea:bb:33:15:53:65:8b:b7:
                    4f:45:e8:9e:35:b7:54:bb:67:52:07:1b:7c:7f:e2:
                    a2:ea:42:ae:c9:23:df:b1:0e:8a:27:80:97:5f:d6:
                    a9:db:a3:e2:07:3a:bc:ca:df:8e:9e:80:8e:aa:22:
                    fc:0f:17:0d:13:19:7e:2a:b0:ae:17:ff:8f:7a:4d:
                    8a:7c:bf:1d:08:56:69:c7:5c:9c:f9:67:23:77:ed:
                    39:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DC:4E:E7:03:F3:E7:C3:02:BF:22:63:B6:F0:41:BA:C2:3C:C8:DA
            X509v3 Authority Key Identifier:
                keyid:07:03:3A:91:0F:CF:2C:1B:15:97:7A:18:AC:E7:D8:57:BA:58:B9:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwM6kQ_PLBsVl3oYrOfYV7pYuao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/5eda7c-7c92-4386-8d82-66915139d89a/1/BwM6kQ_PLBsVl3oYrOfYV7pYuao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:0a:cc:81:98:ff:66:27:f2:a3:85:e0:a7:6e:62:89:e4:82:
         18:e8:34:2f:63:be:78:89:6e:58:79:a2:90:d1:c0:b6:29:77:
         1a:70:a5:e7:5b:c9:6a:3a:0e:9e:cc:df:c8:0d:82:eb:9c:74:
         ad:f1:5c:1e:ec:0f:a6:0a:a9:e0:0f:6f:6f:ba:08:0f:8f:cc:
         e0:24:71:d7:2a:2f:b1:26:a9:e6:94:75:d4:08:3c:8f:b6:81:
         ae:bf:56:2b:0e:09:92:95:62:27:00:b3:62:5b:6f:f1:be:82:
         51:5c:e9:7e:1f:83:b3:09:db:93:f2:a5:9f:0a:18:ab:7d:a3:
         2d:6b:69:f0:cc:d6:64:36:4c:f0:d2:9d:26:c6:19:d4:79:43:
         af:4b:5a:db:14:39:1f:d8:95:66:0d:e8:1c:0e:ac:08:f9:32:
         23:a0:f8:a0:5e:f9:ad:b1:94:dc:65:32:db:9d:92:f2:61:cc:
         c3:fd:aa:4b:62:32:64:df:f3:66:0d:cd:74:ee:76:46:85:eb:
         a4:4d:d9:d5:34:d0:73:7c:db:27:1b:4b:4e:cf:f9:22:09:4e:
         8c:68:a0:f9:5b:d8:8d:7d:b2:90:93:f5:22:5e:56:d7:bf:c2:
         31:e7:2e:24:f9:17:ba:f7:de:94:b2:de:97:9d:61:ee:62:78:
         33:a5:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:13 2025 by rpki-client