Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
File:                     DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft (raw, json)
Hash identifier:          yjzuuXJb/qtZ86mqx1hbxj3kmFPW8v4nlaixJwG4xnY=
Subject key identifier:   2E:3E:0E:E1:F9:79:4C:D1:42:C8:AE:E6:0D:75:53:D6:D6:FC:A6:2B
Authority key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Certificate issuer:       /CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Certificate serial:       019A0147B618615852AD1922BE90C5360027
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
Manifest number:          063F
Signing time:             Mon 20 Oct 2025 11:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:08 +0000
Files and hashes:         1: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl (hash: yVg8ebw7mBcTlytEV1yexgfaMpc+Y6K1k6XAwlgiGCI=)
                          2: lPK8fmOBXjRw9-w6K-x4RRsdXag.roa (hash: xkt3YoVHRxkDkdpPayFqDFqLd1JlrYwaOS9KFpJXY3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:b6:18:61:58:52:ad:19:22:be:90:c5:36:00:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
        Validity
            Not Before: Oct 20 11:01:08 2025 GMT
            Not After : Oct 21 11:01:08 2025 GMT
        Subject: CN=2e3e0ee1f9794cd142c8aee60d7553d6d6fca62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:29:65:2d:42:24:b1:a8:df:9b:e4:50:ac:
                    58:98:31:76:9a:67:fc:76:14:d7:6a:1a:aa:f8:39:
                    18:58:2e:1b:8d:fe:1f:1b:0c:4a:53:09:1a:49:f8:
                    b1:c4:b7:a8:8b:06:32:e3:06:e6:49:29:10:cc:70:
                    83:c2:5e:9b:f7:3e:e8:a7:fb:79:0d:a7:26:aa:5f:
                    c1:e3:23:e7:ff:ee:34:76:85:ee:94:f2:6b:7c:6e:
                    0d:17:e2:54:a0:65:a2:aa:46:77:e5:de:43:44:02:
                    7b:ea:f5:69:d7:e7:a5:9e:22:cb:22:5a:01:8a:d8:
                    09:7e:0a:c5:fd:38:c0:6a:1c:55:29:8a:77:49:cf:
                    0b:f9:57:9c:64:9d:8d:71:d9:7e:d5:5f:1b:db:56:
                    32:3e:7e:d3:a4:19:f9:ea:b3:9e:d5:81:bf:53:37:
                    75:d6:84:da:be:db:04:6f:a0:b7:0d:d1:d0:78:c5:
                    eb:1a:f4:f0:82:34:fe:24:ad:ad:e1:e1:8a:55:c2:
                    21:5f:bd:a0:6d:19:9b:f3:5a:0a:82:14:96:ab:d7:
                    8c:e1:38:32:5d:43:b9:8b:55:51:bc:78:cb:db:56:
                    ec:7a:88:8a:34:de:b0:3d:40:e1:19:31:71:48:34:
                    a4:04:9c:8b:27:6f:98:b8:52:fc:b0:3f:57:bd:9e:
                    a9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:3E:0E:E1:F9:79:4C:D1:42:C8:AE:E6:0D:75:53:D6:D6:FC:A6:2B
            X509v3 Authority Key Identifier:
                keyid:0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f6:97:af:ac:ad:6b:c0:48:ae:76:1a:54:c8:87:4e:fd:fe:
         67:6a:9e:49:a7:54:f5:4e:fa:2a:9e:b3:da:1f:5e:2b:6e:d2:
         63:e7:25:82:3e:93:df:6e:ab:5e:86:e0:36:b8:9e:9a:2f:b3:
         a6:b8:90:bb:75:61:c5:6a:1b:d7:12:ca:f9:2c:dc:e4:b5:c0:
         34:46:32:78:4e:21:0a:9e:71:5a:8d:28:ed:70:0b:1d:a3:86:
         d6:43:fd:4c:41:50:e9:2a:34:c4:48:2b:1c:f8:d0:2a:47:46:
         0d:c1:3b:1a:df:3d:f1:01:a9:00:2e:c6:c3:49:f3:79:ac:0e:
         a6:08:fe:d1:0f:95:3d:17:0b:1f:45:67:b9:1b:c7:1d:12:55:
         9f:4a:9b:36:26:26:a1:51:c1:84:38:30:e6:69:7c:8f:6e:f5:
         92:85:63:2c:c0:ee:81:54:e1:de:59:70:7b:c2:e6:78:24:0b:
         e3:91:fc:06:19:76:cd:7c:7c:06:0b:a2:d8:90:3d:43:74:2d:
         6c:2c:76:a7:86:95:93:c4:91:e1:13:85:71:fc:0c:9a:42:e5:
         f3:5d:2b:50:0d:79:6a:12:59:9a:24:c6:52:50:1d:6d:ca:66:
         3d:ac:50:25:68:33:60:50:6c:aa:52:f9:58:c0:b6:7b:c2:b9:
         2f:14:cc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:06 2025 by rpki-client