Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
File:                     BGLgBWSpNA_0c505USFsRqjvxk8.mft (raw, json)
Hash identifier:          O0y1U5tPt8WKufkcAclkAtcvLc5IhHN9tDUYbJOT4bs=
Subject key identifier:   20:20:AE:64:7D:B2:C0:B7:03:38:10:4F:DA:94:02:5C:09:72:12:D9
Authority key identifier: 04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F
Certificate issuer:       /CN=0462e00564a9340ff4739d3951216c46a8efc64f
Certificate serial:       019A04487AD5C49EB3F6316964307FE190E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
Manifest number:          16EC
Signing time:             Tue 21 Oct 2025 01:00:50 +0000
Manifest this update:     Tue 21 Oct 2025 01:00:50 +0000
Manifest next update:     Wed 22 Oct 2025 01:00:50 +0000
Files and hashes:         1: 73llHz_xwf_Kz0Ge7BqH9XmgDiA.roa (hash: FvCEfaxgWr3NTmhty3i7+MvXKehuHhI0xzvJoL1ljPo=)
                          2: BGLgBWSpNA_0c505USFsRqjvxk8.crl (hash: n2G4lqFZc0P4H2c3tAYGe2FJsxdUpTU9mAM6EOymSYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:48:7a:d5:c4:9e:b3:f6:31:69:64:30:7f:e1:90:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0462e00564a9340ff4739d3951216c46a8efc64f
        Validity
            Not Before: Oct 21 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=2020ae647db2c0b70338104fda94025c097212d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:79:b9:e3:56:2d:46:77:38:9f:b1:a3:7d:03:
                    5e:de:ca:3e:e5:21:25:be:e8:25:f3:51:74:e4:42:
                    a1:38:5e:49:57:8e:5a:ae:59:6b:b7:b5:f4:15:fe:
                    38:08:f2:8c:35:3a:8f:62:a9:91:db:0e:51:ea:1d:
                    c7:4d:7a:da:69:83:40:d2:76:53:87:3c:bf:85:01:
                    64:b3:71:1b:ca:08:e8:ac:67:5b:b5:8a:74:73:c8:
                    d0:ec:8c:f0:e1:69:a1:8a:ce:b5:30:db:40:63:21:
                    47:44:2a:77:5f:67:8a:82:a0:5d:68:03:ce:0c:f8:
                    ae:de:02:a4:f2:b2:e6:f1:8b:fe:7d:e5:a9:4a:c6:
                    01:32:69:ba:06:0d:18:b2:7f:a0:6e:4d:3a:54:23:
                    de:a3:34:4f:18:64:6f:07:c4:35:31:61:75:dd:c8:
                    08:35:50:8a:50:20:6f:1e:b6:2f:da:21:da:bf:98:
                    7c:c3:fa:04:31:f8:1b:bd:f6:13:e4:55:69:1a:be:
                    8e:66:ea:51:b8:30:62:e4:e9:0e:60:f6:21:d9:77:
                    31:5a:d7:6e:5b:8e:e2:1a:b9:95:bd:c0:3d:f6:6b:
                    ff:42:e1:44:0e:15:1b:b5:1f:8c:15:ad:36:f9:5b:
                    b5:07:24:df:17:c2:5a:54:f1:04:00:41:8d:1a:7b:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:AE:64:7D:B2:C0:B7:03:38:10:4F:DA:94:02:5C:09:72:12:D9
            X509v3 Authority Key Identifier:
                keyid:04:62:E0:05:64:A9:34:0F:F4:73:9D:39:51:21:6C:46:A8:EF:C6:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGLgBWSpNA_0c505USFsRqjvxk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/8c9aa8-c10a-4e2d-9b64-227302d59572/1/BGLgBWSpNA_0c505USFsRqjvxk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:2d:8c:64:46:ae:49:19:a2:62:ac:68:5e:7a:3d:ea:88:
         f3:3e:5c:09:69:05:cf:20:55:f4:c2:99:29:06:c9:bf:65:a0:
         9f:28:14:16:3b:d8:38:a8:4f:ef:6b:5d:09:11:4b:0e:b7:64:
         8c:02:8b:69:9c:a6:f9:02:68:60:8c:ab:e1:6d:d3:6d:5c:24:
         6c:46:18:d5:71:47:c6:f1:36:b2:f7:a8:44:60:54:40:c8:06:
         51:35:e6:5e:4d:5b:4d:c2:51:d9:cd:cd:cd:4b:d9:3c:4a:b6:
         36:e3:ae:cc:63:d1:7a:62:76:81:ac:cc:8a:eb:08:05:e3:f5:
         06:3f:d5:0a:aa:cf:d1:f7:e1:de:d7:dd:f8:50:0e:58:c1:98:
         13:ea:0d:45:10:e3:c2:32:ec:1f:b6:91:c5:29:b4:b9:07:83:
         59:49:e5:c4:8a:2c:7d:10:c3:44:4a:7f:3b:2d:5e:db:62:08:
         cd:62:a3:27:ed:78:97:55:18:1f:2c:f5:f0:97:ed:5f:53:d6:
         04:67:c7:9c:98:38:44:32:92:76:ce:30:f3:44:0a:26:36:28:
         f5:04:10:4d:41:4c:92:e6:4d:17:1d:a1:06:f7:e0:c4:0a:b6:
         b7:00:14:bd:13:59:95:35:fd:a3:24:84:9e:34:ee:43:c8:6b:
         e2:04:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:27:56 2025 by rpki-client