Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          706Dnj7ZLHUaLJDjn2Ndz2u0qgjXVZFibiz15Di5wBM=
Subject key identifier:   B8:3C:A6:E2:6C:49:E5:23:4A:FF:71:FC:EC:78:C8:A0:62:9F:3D:F5
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       0199FFC8BF8B4234E1B049EE6974647BB3E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          03D6
Signing time:             Mon 20 Oct 2025 04:02:50 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:50 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:50 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: PxftL0ui2jZxJdGNdcbRaK+YUCNW0EvdsKRvImrnNa0=)
                          2: x9qgtwMUU_-nMY5SDajHYEXNiCY.roa (hash: 6NC1NBKuG21Mjttmx4hIVvV+xQmoan4Z9cfB+7hjW1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:bf:8b:42:34:e1:b0:49:ee:69:74:64:7b:b3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: Oct 20 04:02:50 2025 GMT
            Not After : Oct 21 04:02:50 2025 GMT
        Subject: CN=b83ca6e26c49e5234aff71fcec78c8a0629f3df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fd:d3:8d:bd:f3:c5:3e:9c:61:b5:12:8d:39:
                    0e:2b:60:a7:e6:1d:86:18:54:3a:6b:3b:21:b3:db:
                    ea:e3:5a:98:bd:ff:a3:48:de:d0:0c:ce:51:56:3b:
                    24:95:8a:c7:9a:05:b6:19:42:33:79:28:66:92:f9:
                    53:72:bb:32:31:3d:bf:4f:78:4b:55:d6:89:a4:13:
                    9e:76:0f:1e:4e:0a:36:81:86:92:1c:f5:bc:65:58:
                    f9:3e:26:cd:9f:a7:42:19:ef:79:c4:f0:7e:5f:22:
                    c8:b5:2a:9c:99:b7:a4:dd:06:6e:33:8c:74:97:d0:
                    41:59:2d:1b:31:28:fd:d7:6a:bd:26:23:90:a4:8a:
                    72:04:17:ab:c8:b3:cf:6f:49:38:c7:d7:71:e5:b2:
                    f6:3b:8d:2d:58:ff:60:5e:19:7c:39:f0:08:22:d0:
                    5f:86:03:39:49:7f:c8:0a:e3:27:4a:d8:2b:ac:ab:
                    4f:8d:d7:73:aa:51:9a:a9:8f:35:b2:50:b5:ba:67:
                    c2:21:c4:89:68:67:ff:65:67:3a:00:b7:fb:da:b3:
                    a0:f0:fa:8f:de:24:13:8e:6e:c3:61:b2:ce:1e:c7:
                    0a:00:b2:c8:e1:8a:c1:88:fd:7a:5d:9e:9c:72:f9:
                    0b:7a:8a:bb:dd:a6:1b:99:fe:3c:90:01:3d:80:e2:
                    7c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3C:A6:E2:6C:49:E5:23:4A:FF:71:FC:EC:78:C8:A0:62:9F:3D:F5
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:e9:1e:f1:2d:be:23:15:30:7c:f3:45:0f:95:de:58:14:
         1c:11:76:58:db:13:b2:65:86:bc:54:d4:bb:64:be:5c:dc:ca:
         42:2f:f9:21:27:31:fb:31:e2:eb:0b:17:5c:78:af:1b:af:cd:
         20:b0:d3:08:a5:a3:0f:48:c6:68:8e:f6:e0:3c:d0:81:b2:8f:
         ad:8b:70:27:f8:0e:41:85:30:99:68:e2:7d:0b:52:bc:41:ae:
         8a:dc:a0:9d:af:66:81:46:b0:b7:48:74:73:3c:1d:1d:75:1a:
         9e:e6:7a:1d:e8:f3:73:2d:90:c5:12:b4:d0:03:29:b9:71:02:
         8e:1a:d3:d1:27:1d:11:9e:31:76:01:8e:12:ca:c4:52:61:f0:
         9a:d8:9d:31:ce:fd:5e:c3:2b:b7:aa:3f:58:05:0c:4e:f4:4d:
         c3:a3:92:28:7f:47:cb:42:7d:bd:94:cf:82:ac:4c:de:44:5d:
         98:5e:5d:c7:22:9f:02:92:80:2f:11:8e:6b:b5:ef:67:9e:f1:
         57:69:63:89:87:05:24:05:d1:df:3f:98:70:c8:70:ff:c3:b2:
         4f:63:6d:74:72:3d:e1:ef:51:2d:d1:f3:4a:6f:5d:b5:05:da:
         bc:e4:cb:d6:df:68:79:2f:3b:c2:55:a3:ed:23:d9:ab:ef:5f:
         c6:c9:81:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:12 2025 by rpki-client