Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File:                     BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier:          8o/SV0P9B5eBmYvx0XqIlVYWFgbW2r5rGnhQoI0hSpY=
Subject key identifier:   4A:C5:79:14:2D:5C:26:3C:49:36:4D:E1:FD:3B:7A:20:CE:1C:BB:E3
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer:       /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial:       019A006BDDB16475534F3862171725A1602B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 07:01:00 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:00 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:00 +0000
Files and hashes:         1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
                          2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: DXSS7iyVebM+lsiy1+YwGeHLyXgEd2HUxaJ0J2dlIhY=)
                          3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
                          4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6b:dd:b1:64:75:53:4f:38:62:17:17:25:a1:60:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
        Validity
            Not Before: Oct 20 07:01:00 2025 GMT
            Not After : Oct 21 07:01:00 2025 GMT
        Subject: CN=4ac579142d5c263c49364de1fd3b7a20ce1cbbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:56:0c:60:86:3e:48:e1:24:17:31:9b:a6:
                    09:d1:e0:c0:71:97:de:9a:6b:55:99:2c:5f:61:6b:
                    70:e7:81:f0:b9:da:83:47:5d:fc:cb:e8:51:ba:58:
                    d0:11:a1:f5:61:fe:f6:ff:10:aa:04:3b:bb:36:ab:
                    d5:22:7a:99:32:06:5c:46:4f:71:7f:07:33:f0:4d:
                    ef:07:57:a8:20:85:b8:8a:9a:a7:98:87:e1:98:a1:
                    cc:56:d6:6b:61:3a:7e:0e:b4:e5:e7:51:ae:a3:21:
                    fd:7f:78:6e:79:91:c1:4e:b6:74:2b:ca:03:35:d4:
                    a6:93:ea:ab:90:6e:fc:10:9a:24:63:53:90:e6:8c:
                    b6:b2:02:bd:b4:8b:5d:bb:66:4b:d9:2e:66:5a:8c:
                    8d:81:39:73:5b:ab:1e:65:82:28:d2:3d:46:43:47:
                    f8:74:71:83:fd:68:58:8b:79:6f:13:75:d7:17:04:
                    b8:71:71:90:49:50:6b:45:fd:8e:9b:e3:4c:9b:8e:
                    6f:a2:a7:29:e4:51:74:ce:7d:f8:4e:9e:01:53:7d:
                    19:ae:6e:24:dd:cd:fb:88:f2:da:3c:19:8f:cf:98:
                    da:6c:b3:88:f6:86:8a:30:72:c6:cf:95:31:6d:62:
                    42:56:3e:8c:c3:78:65:05:62:a8:d9:86:63:d7:2e:
                    c8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C5:79:14:2D:5C:26:3C:49:36:4D:E1:FD:3B:7A:20:CE:1C:BB:E3
            X509v3 Authority Key Identifier:
                keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:f8:77:e6:ba:f4:e2:ba:55:d5:34:95:48:8a:f7:d6:68:
         2f:d5:ce:39:6a:8a:86:ef:e9:1a:eb:dc:bd:f8:c3:ce:02:0a:
         d8:38:92:0a:ed:02:e0:8d:35:fb:1b:27:9e:ff:99:10:d7:0f:
         77:57:47:fe:27:28:4b:50:87:bd:6a:bb:20:8a:a5:d5:03:c1:
         3e:76:f5:60:49:dd:9a:21:2f:8d:97:ec:6a:98:74:f2:7c:b3:
         f1:ac:48:aa:b1:af:97:2c:1c:1e:0f:14:95:6d:51:e6:70:5b:
         fc:17:4d:ce:85:af:27:da:66:5e:77:5d:53:9e:18:aa:8c:e6:
         76:77:15:c9:75:f6:53:93:ef:bf:e4:a2:49:cf:c3:b1:95:0f:
         8d:f9:aa:56:71:ce:7b:71:1e:0f:2d:b3:02:32:af:85:f1:f1:
         15:1a:a0:e2:11:eb:fa:6c:6c:2a:56:d0:e9:a4:f0:ca:d8:45:
         84:01:bc:70:1a:15:e0:76:f0:2d:ac:09:19:c0:bd:7e:e9:d9:
         a9:e1:ce:dd:33:27:21:65:2e:8c:b4:d8:0c:29:08:1a:f8:b0:
         99:72:7d:cd:af:a3:dd:73:73:c3:0d:a6:d0:46:f0:0d:e0:16:
         db:d4:e3:97:9e:2e:84:f6:85:e0:3e:df:0e:75:80:9e:df:98:
         0f:ea:48:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:32:17 2025 by rpki-client