Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
File:                     BgecQppxRvH5qgSb20LKlRRLdNo.mft (raw, json)
Hash identifier:          gw0b3PoKoBt9MO+D5WB04WTD83XWJX6U1lsE6ZzCBoM=
Subject key identifier:   22:E6:3D:ED:76:4D:17:59:77:FD:D2:AA:25:D1:5B:FF:DC:4C:EB:BE
Authority key identifier: 06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA
Certificate issuer:       /CN=06079c429a7146f1f9aa049bdb42ca95144b74da
Certificate serial:       0199FC585F98E6EF2842B3D1E5AB22A589F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
Manifest number:          16EC
Signing time:             Sun 19 Oct 2025 12:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:13 +0000
Files and hashes:         1: BgecQppxRvH5qgSb20LKlRRLdNo.crl (hash: DdSG/Zhdd+vFeRwYf/Ja10HGxtAoGVkuIzj0gYNO9eo=)
                          2: LrxwZvPINeksQvETDOEipmKUBtE.roa (hash: mTC/swC0iM7xlEfSlqCGI1ogIVmyM2L2H3WafcUtAOE=)
                          3: vQy6a6NTEAZwwzZEgqZ7s7CD2Sw.roa (hash: eCRwk/+JF3YykOACMbGT9h5ea0SspdLqSge077r4Iz0=)
                          4: vYyERfzMQqwkNDEj2uOXG_S6t8w.roa (hash: WXsRMU1133zUyQTKxrB9Bygige89E8eXSL5nflVhMAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:5f:98:e6:ef:28:42:b3:d1:e5:ab:22:a5:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06079c429a7146f1f9aa049bdb42ca95144b74da
        Validity
            Not Before: Oct 19 12:01:13 2025 GMT
            Not After : Oct 20 12:01:13 2025 GMT
        Subject: CN=22e63ded764d175977fdd2aa25d15bffdc4cebbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:76:31:a1:d2:33:c1:0e:28:21:30:79:27:45:
                    ee:f3:d3:f8:2e:61:da:4b:db:f3:85:43:8a:3e:b5:
                    0a:36:fa:07:e6:5f:18:09:9d:9a:17:b0:95:1d:76:
                    cf:c5:04:19:22:23:66:60:5a:c9:27:89:90:69:1c:
                    10:23:0d:87:f6:da:8b:dd:3b:72:6c:d7:40:b1:ce:
                    87:66:bb:1d:a2:06:81:e2:51:63:fb:57:a5:9b:43:
                    c9:e7:1a:e3:d2:4f:ad:7e:c5:77:fb:8c:98:66:8d:
                    ff:6f:6b:94:50:90:cb:08:35:a7:91:e2:22:d7:6a:
                    04:12:da:e3:79:8a:ba:97:b3:8e:8e:14:6f:c8:70:
                    84:a7:eb:0a:25:b9:23:49:09:a3:7f:c6:1e:16:df:
                    70:57:49:ab:47:07:2f:d7:5a:e4:80:fe:2f:d3:bd:
                    f3:c4:5b:83:28:94:3e:45:86:bf:17:8c:70:dc:f9:
                    d3:8d:60:a7:35:12:6b:21:9a:00:68:dd:39:54:6c:
                    e1:e9:5b:97:4b:25:d6:6d:5e:3b:83:d0:6b:38:fb:
                    46:35:2b:77:61:d1:9c:5c:c8:d6:04:e5:29:52:f2:
                    24:c9:1b:49:96:a8:bc:39:48:36:99:69:e0:cc:7c:
                    c8:d4:c6:be:81:45:e7:99:29:8c:1b:41:7e:21:73:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E6:3D:ED:76:4D:17:59:77:FD:D2:AA:25:D1:5B:FF:DC:4C:EB:BE
            X509v3 Authority Key Identifier:
                keyid:06:07:9C:42:9A:71:46:F1:F9:AA:04:9B:DB:42:CA:95:14:4B:74:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgecQppxRvH5qgSb20LKlRRLdNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/740589-85cd-497a-90c1-a2f9a8a51bb0/1/BgecQppxRvH5qgSb20LKlRRLdNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:3e:28:89:e4:d6:10:88:1d:fb:6d:73:cf:36:63:35:23:
         19:70:48:b4:b5:45:c2:2b:5b:9f:1c:6c:f4:b8:06:ba:52:55:
         d3:d4:b2:09:d3:91:4b:86:11:17:a7:41:4c:c2:50:8e:e3:08:
         99:0f:11:3a:82:03:e3:c0:43:da:c8:4a:af:07:31:76:1d:54:
         4a:8c:ab:5a:4d:b9:84:63:6b:1a:2b:70:1b:b0:a4:ed:d7:7a:
         4a:cc:ff:ef:84:dc:a0:b9:30:20:f4:f5:42:53:fc:8f:32:64:
         ac:e7:be:90:a4:f3:99:2f:a0:81:71:3c:5d:f2:dc:73:89:fc:
         0a:ad:f7:ee:e1:b2:25:b7:2f:3c:fd:5b:8a:a4:6c:5f:3b:5b:
         df:87:14:74:46:51:fb:94:fd:e1:6e:0b:f0:00:70:59:11:89:
         99:84:c0:90:ec:e4:46:01:e7:e0:3a:1f:70:ff:13:43:f4:27:
         b5:03:a3:02:e3:b1:ed:5f:13:10:34:a6:e8:eb:a7:4b:12:39:
         35:0d:d7:d9:e0:03:11:c5:da:be:d8:57:a3:4d:4d:61:6e:7d:
         99:64:5f:6f:d4:cf:31:79:be:c5:e3:3d:67:b4:48:40:9b:d6:
         21:34:4c:d3:27:9a:ae:71:98:41:e4:b2:83:87:10:19:9e:9c:
         9e:53:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:47 2025 by rpki-client