Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File:                     DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier:          lvpxPNdtwNZTEtUqjd1cT2dwm7rud3MQnSACfcRif9A=
Subject key identifier:   66:1A:7B:9A:77:75:9B:2E:0B:94:8B:3A:98:82:26:6E:04:55:BE:E1
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer:       /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial:       0198D5F157A8B81F775D7F176E273095A15C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number:          05A4
Signing time:             Sat 23 Aug 2025 08:00:20 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:20 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:20 +0000
Files and hashes:         1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: a4cDZFvt7rI7Sc03kyjDe2uzlBvWweJ7U8f7mTWVSE4=)
                          2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:57:a8:b8:1f:77:5d:7f:17:6e:27:30:95:a1:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
        Validity
            Not Before: Aug 23 08:00:20 2025 GMT
            Not After : Aug 24 08:00:20 2025 GMT
        Subject: CN=661a7b9a77759b2e0b948b3a9882266e0455bee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:b2:e1:7e:99:e1:19:32:88:05:39:41:29:
                    b4:ec:d0:4d:ae:11:a3:a3:49:f1:c4:56:c8:1d:76:
                    92:90:df:56:1c:a2:df:76:5e:d4:c3:4a:f1:3b:aa:
                    5b:02:ff:48:0d:80:35:85:a4:22:c0:5b:74:63:38:
                    7e:de:98:ba:b6:3b:a8:dc:22:b9:ed:9c:6e:f5:a7:
                    35:b2:0a:7f:89:a0:4d:4b:59:45:7e:b3:ba:ee:cd:
                    4a:94:c3:ef:1d:af:fe:82:d5:e6:98:e4:78:95:7f:
                    dc:20:ff:a0:dc:dc:8a:d0:07:a9:c7:48:a1:c0:2f:
                    d1:51:6e:0b:2c:c4:26:45:12:c5:29:e3:65:70:13:
                    de:08:77:03:de:e2:fa:2b:2e:3a:2a:58:ed:e1:31:
                    54:b5:cd:1e:1c:3f:a1:86:f0:1d:46:3e:65:58:e6:
                    b6:d9:f6:c0:fd:9e:81:00:18:8c:66:7e:6e:db:9a:
                    89:8a:72:08:b2:93:8d:a4:7b:c8:44:ba:01:0f:07:
                    b8:a9:fe:80:ec:52:ef:1e:eb:ed:2e:04:ef:08:09:
                    4d:31:ca:15:c5:6c:f5:7e:9f:d0:a8:88:72:3b:da:
                    5b:ea:c9:de:d8:2f:94:90:3c:89:6e:29:4a:2f:66:
                    37:b1:d7:80:80:7f:14:49:d2:fd:bc:a7:5a:97:a2:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1A:7B:9A:77:75:9B:2E:0B:94:8B:3A:98:82:26:6E:04:55:BE:E1
            X509v3 Authority Key Identifier:
                keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:b7:01:00:96:62:df:0c:60:09:36:48:3e:6c:6a:88:3b:
         18:4c:40:d9:29:4e:4a:cc:f7:aa:83:2d:80:ad:e4:8f:7c:0a:
         e3:1e:52:7f:5f:f4:02:3a:a8:01:5d:f7:41:08:93:53:4d:4f:
         a8:86:44:bc:9d:de:ec:2c:37:c4:7d:13:15:18:5f:d1:57:7b:
         d0:fd:86:af:2c:82:c5:22:f2:7f:e5:c4:12:9e:e9:85:32:34:
         62:88:2b:ca:d4:f2:37:2d:37:f6:3d:b9:d9:4f:ca:1f:a7:6f:
         d4:b2:33:1a:51:d4:d1:ff:4d:56:6f:37:20:1c:97:10:90:3e:
         d2:f4:cd:96:49:b9:09:20:90:d5:47:b5:2a:84:33:47:fd:7f:
         f1:3c:40:e4:9a:f5:0d:ec:f8:5b:14:33:4c:5e:b1:67:2f:9e:
         4a:29:6c:d8:32:ac:1f:56:e4:2d:22:ee:e7:eb:d4:97:1f:78:
         88:d5:ca:1b:57:4b:04:3e:b1:d7:98:0f:96:7c:36:b3:36:0b:
         47:01:29:05:70:31:06:ad:b3:69:99:da:20:98:89:73:44:cd:
         d7:cf:b0:b6:cd:35:f1:c5:c7:70:ce:2a:95:65:d0:ce:a5:22:
         47:64:81:5e:85:be:70:2a:33:28:7a:cc:27:73:09:95:97:8c:
         09:7c:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:35:54 2025 by rpki-client