Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File:                     BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier:          KYCa9tieSZhp8Oj2CAIW2fLjlQi6Ahpq9vq0BUXOiXM=
Subject key identifier:   1C:DA:EC:A8:EC:C2:3E:C3:3B:F7:7E:FD:C1:11:6C:E5:8B:E3:7D:FA
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer:       /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial:       0199FCC622B785803D1CCAFB34835B0B0FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number:          154E
Signing time:             Sun 19 Oct 2025 14:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:07 +0000
Files and hashes:         1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: NT4I969olDtNPNvYO//DyDaUSXQlJq9DAcB7gobh7vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:22:b7:85:80:3d:1c:ca:fb:34:83:5b:0b:0f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
        Validity
            Not Before: Oct 19 14:01:07 2025 GMT
            Not After : Oct 20 14:01:07 2025 GMT
        Subject: CN=1cdaeca8ecc23ec33bf77efdc1116ce58be37dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b3:c8:d3:28:38:95:56:9c:9b:3b:f5:e0:0c:
                    cd:19:43:d0:65:ed:2d:01:c3:47:a7:62:95:3b:fa:
                    e6:12:04:e7:ae:aa:40:56:66:14:11:da:9e:fd:aa:
                    2f:8c:76:30:41:9e:29:6e:ee:a0:73:e2:eb:39:14:
                    e8:7f:c0:b4:11:d8:10:49:a5:60:26:9e:cb:8e:41:
                    dd:65:3a:54:4f:f8:c9:48:53:c5:eb:16:96:e0:71:
                    a8:e7:ac:dc:68:fe:b3:1e:67:72:6a:63:97:a4:ed:
                    49:a6:21:32:08:df:89:a3:52:af:3a:48:1c:c9:d0:
                    70:98:99:90:33:6f:95:b6:85:92:36:9b:38:a3:b4:
                    be:8a:9a:44:e9:b1:6d:f5:a3:6a:19:10:b0:3f:77:
                    af:1a:23:6c:f8:80:a0:e9:35:b8:71:88:28:ad:04:
                    eb:db:46:98:4b:b8:49:61:e5:5c:be:28:bb:e1:76:
                    96:46:96:73:d1:42:cc:b2:a3:08:53:f2:6c:93:c2:
                    7b:a7:bf:07:77:54:e5:31:c1:f4:66:7b:04:12:b7:
                    88:64:cb:c4:37:c0:16:8c:45:67:89:e8:4e:85:34:
                    d7:0a:d1:cf:55:b7:5b:a3:c5:4b:52:3b:dd:8e:c7:
                    58:97:be:3e:6c:de:13:89:6d:c7:1f:c7:aa:3e:bb:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:EC:A8:EC:C2:3E:C3:3B:F7:7E:FD:C1:11:6C:E5:8B:E3:7D:FA
            X509v3 Authority Key Identifier:
                keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:0a:92:b8:e4:6b:d2:e2:8f:38:26:59:00:2f:dd:bb:e7:
         e9:23:69:1e:af:7f:91:2f:25:f8:67:e5:b5:f3:57:a3:b5:01:
         be:0e:54:14:b5:ef:5e:7a:fd:51:37:05:83:ad:63:73:27:5a:
         cb:fd:c4:28:02:af:cd:d1:45:92:9c:f2:9c:d0:03:19:2b:fc:
         46:6b:28:14:33:bd:6e:51:43:13:75:60:bf:25:eb:03:94:0e:
         8d:89:09:4a:c2:d3:79:92:81:89:11:12:35:d0:99:90:ab:d1:
         2f:bb:15:dd:e0:13:47:f8:95:a1:05:43:81:97:02:24:0c:5f:
         7a:64:d6:30:ce:4b:7d:a3:1c:74:ff:c8:e1:aa:17:93:2a:bb:
         fa:0a:6d:37:ab:27:13:68:44:a3:53:d8:7a:9d:c3:e8:7b:22:
         63:22:4d:13:6c:fe:2e:67:44:87:3a:59:b0:28:44:fd:63:f5:
         e2:6b:ad:fc:04:25:19:d6:a7:42:5a:64:4a:d5:53:48:c4:7f:
         5e:4c:54:d3:ef:03:7d:29:bb:ed:e1:ef:f6:0f:e5:49:fc:67:
         8c:1b:b0:70:34:2c:43:02:2c:1c:b6:11:5b:3d:cc:81:e1:09:
         86:18:9a:07:a2:de:64:f0:cf:f0:e4:3d:07:61:9d:45:da:24:
         d1:e0:f0:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xiK3hYA9HMr7NINbCw+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzZlYzI4ZGIxMTRhODYyNzY0MjZkMWY0OGQyYjZhMzVk
NWZlNzMwHhcNMjUxMDE5MTQwMTA3WhcNMjUxMDIwMTQwMTA3WjAzMTEwLwYDVQQD
EygxY2RhZWNhOGVjYzIzZWMzM2JmNzdlZmRjMTExNmNlNThiZTM3ZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLPI0yg4lVacmzv14AzNGUPQZe0t
AcNHp2KVO/rmEgTnrqpAVmYUEdqe/aovjHYwQZ4pbu6gc+LrORTof8C0EdgQSaVg
Jp7LjkHdZTpUT/jJSFPF6xaW4HGo56zcaP6zHmdyamOXpO1JpiEyCN+Jo1KvOkgc
ydBwmJmQM2+VtoWSNps4o7S+ippE6bFt9aNqGRCwP3evGiNs+ICg6TW4cYgorQTr
20aYS7hJYeVcvii74XaWRpZz0ULMsqMIU/Jsk8J7p78Hd1TlMcH0ZnsEEreIZMvE
N8AWjEVniehOhTTXCtHPVbdbo8VLUjvdjsdYl74+bN4TiW3HH8eqPrt4MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBza7Kjswj7DO/d+/cERbOWL4336MB8GA1UdIwQY
MBaAFAbG7CjbEUqGJ2Qm0fSNK2o11f5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEt
Mzc2YmY5ZTYzMDU5LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEtMzc2YmY5ZTYzMDU5
LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKYKkrjk
a9LijzgmWQAv3bvn6SNpHq9/kS8l+GfltfNXo7UBvg5UFLXvXnr9UTcFg61jcyda
y/3EKAKvzdFFkpzynNADGSv8RmsoFDO9blFDE3VgvyXrA5QOjYkJSsLTeZKBiRES
NdCZkKvRL7sV3eATR/iVoQVDgZcCJAxfemTWMM5LfaMcdP/I4aoXkyq7+gptN6sn
E2hEo1PYep3D6HsiYyJNE2z+LmdEhzpZsChE/WP14mut/AQlGdanQlpkStVTSMR/
XkxU0+8DfSm77eHv9g/lSfxnjBuwcDQsQwIsHLYRWz3MgeEJhhiaB6LeZPDP8OQ9
B2GdRdok0eDw8g==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:38 2025 by rpki-client