Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
File:                     bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft (raw, json)
Hash identifier:          Vx9c2tBjLpDrnY8Wy0i0HxiQwHN2Kehaz/AXnbIYh1U=
Subject key identifier:   24:78:A0:60:37:20:77:96:A6:BC:57:91:D1:1A:E4:C7:C3:4B:BC:62
Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50
Certificate issuer:       /CN=6dbc20a736ffc1319efde4db63137c8783c6b350
Certificate serial:       0199FD34140ECBE042732DAF816A73EBD74B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
Manifest number:          16E7
Signing time:             Sun 19 Oct 2025 16:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:12 +0000
Files and hashes:         1: YcO7jD5AOjhycshFGG-dIbqWcW4.roa (hash: BRqKFwkTw48defv1cFItIn/eg55FRfTYZOTRhHFmj2Q=)
                          2: bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl (hash: +TP2pBY1u0PbNKfcoD6BFgn7z+OBZtsR/qTaMmCEAj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:14:0e:cb:e0:42:73:2d:af:81:6a:73:eb:d7:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350
        Validity
            Not Before: Oct 19 16:01:12 2025 GMT
            Not After : Oct 20 16:01:12 2025 GMT
        Subject: CN=2478a06037207796a6bc5791d11ae4c7c34bbc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:d5:91:ef:2c:0c:3d:ed:6d:dc:d3:96:07:
                    fa:b4:68:27:84:95:07:d6:94:10:29:85:27:61:fc:
                    87:fb:7c:1d:14:5d:15:a3:7c:1a:52:e8:b2:f0:db:
                    d0:d6:9a:50:f7:d7:f4:50:42:b8:9e:a7:21:9a:bb:
                    50:82:ad:ae:c9:c6:16:06:70:06:9f:79:4e:45:23:
                    cd:65:19:12:fc:23:cd:f1:8b:f6:23:11:ed:12:90:
                    fe:68:e6:a5:f4:c0:30:a1:bc:d4:44:e6:d4:f2:2d:
                    05:0e:bd:f9:54:44:5f:f2:81:ae:af:28:6b:b8:15:
                    60:6d:8f:40:d4:4d:83:26:ca:df:7f:d3:02:ba:30:
                    8f:b6:07:d9:6e:19:92:59:69:f6:41:d8:82:49:21:
                    ed:d7:57:8f:30:6f:95:48:a1:45:c8:33:c7:4d:41:
                    b9:0d:97:b0:87:4d:f7:5b:cd:f8:41:05:e7:f4:f2:
                    d4:7b:02:28:fc:71:c5:9b:c3:33:d2:b6:a8:b3:22:
                    cb:c2:36:fc:d2:86:40:1d:af:47:12:25:f6:9d:97:
                    38:75:79:d8:a1:02:ff:38:1e:c4:07:67:fc:60:4e:
                    7a:d9:3b:c0:6d:9c:d9:e6:5b:ea:e7:9f:69:8c:1c:
                    98:13:0b:ec:73:51:2c:02:d2:19:4a:30:ba:48:c5:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:78:A0:60:37:20:77:96:A6:BC:57:91:D1:1A:E4:C7:C3:4B:BC:62
            X509v3 Authority Key Identifier:
                keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:94:55:c3:0e:95:3e:13:8b:dc:82:ab:2b:44:74:ce:36:cb:
         b8:0d:ab:5e:86:3c:e7:64:c1:04:a6:f5:3c:1b:2d:c5:90:1b:
         3f:e8:14:48:3f:8e:7d:bb:23:7a:ff:ff:65:62:da:85:72:5d:
         69:bc:ed:39:79:46:6c:95:05:26:8b:a6:b4:28:d5:ae:2d:44:
         59:f8:6c:a8:6c:b5:dc:01:83:34:2d:a6:bc:15:7e:b2:97:f4:
         11:7a:36:ac:ed:7f:f9:22:f6:43:4e:b9:2d:d6:25:ad:28:61:
         6a:52:72:21:a9:20:68:3a:a1:0a:7d:8b:ec:bb:c9:b9:49:ea:
         1f:c6:e9:6d:da:b9:ee:53:0d:cb:dc:f3:53:d1:19:42:ce:4a:
         bb:5c:fe:36:b7:d7:90:47:45:a1:4a:13:80:b9:27:f4:a2:a0:
         77:12:49:64:87:c7:28:18:6d:90:71:17:c2:8b:54:6f:05:75:
         50:e2:9d:72:e7:b7:5f:77:61:bc:86:2f:30:3c:b5:20:4f:29:
         1b:48:2e:fa:2a:8a:5f:7c:62:49:7d:76:e3:ad:7b:c0:17:d4:
         64:61:7f:e4:55:b5:24:da:6f:52:88:60:7e:47:17:d8:3c:84:
         35:79:d9:3d:fa:4c:78:d5:fd:d1:8e:8f:4c:86:61:d0:89:b6:
         82:57:e7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:38 2025 by rpki-client