Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          SMcEETfz4CJ4kt812D12mS2ZUeEyYkHQa0BJhxpuuUw=
Subject key identifier:   44:B1:27:EE:54:19:0C:75:13:3E:54:AC:36:33:58:13:1E:5C:6C:89
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       0199FFC873A4B958F8799C332BFF6B453DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 04:02:30 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:30 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:30 +0000
Files and hashes:         1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
                          2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: stAnidzH+ScxcX3AvtbwIzLj31DYepVs+ahDujESk8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:73:a4:b9:58:f8:79:9c:33:2b:ff:6b:45:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Oct 20 04:02:30 2025 GMT
            Not After : Oct 21 04:02:30 2025 GMT
        Subject: CN=44b127ee54190c75133e54ac363358131e5c6c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:54:a4:f7:d5:b5:e1:a3:11:8e:ec:07:07:
                    df:10:ab:74:c2:40:f9:db:b9:42:6b:b4:ea:45:ce:
                    40:af:de:87:76:8e:57:b0:2a:d3:62:f2:a8:55:02:
                    76:ed:91:48:b0:e3:f4:cc:1a:67:e3:33:f5:5d:42:
                    e5:bb:4a:68:46:5a:c7:38:3d:24:87:cf:3a:1c:72:
                    2a:a7:21:84:39:b2:37:5b:49:8d:ee:59:80:ac:6a:
                    8d:fc:5c:21:ff:3e:e4:13:b9:92:8a:30:53:3c:03:
                    32:0f:71:9b:0a:9a:d1:3e:7d:71:07:dc:5f:2c:d7:
                    54:ea:4f:87:16:1a:8b:ce:59:62:a5:07:54:14:dc:
                    39:3d:f6:4a:c2:25:12:95:4c:af:46:48:82:37:6f:
                    46:4c:b1:cc:34:32:eb:fa:58:c7:86:3e:91:cc:3f:
                    80:ed:7e:f4:8a:55:f0:45:6f:eb:cc:d1:b7:06:5d:
                    c1:59:5e:c9:a9:27:d7:b9:7b:4c:83:6d:ea:2f:fa:
                    61:c0:bc:ee:90:13:4e:ec:2c:ee:bb:51:92:08:22:
                    0d:38:e8:e9:3d:ae:cc:77:35:69:12:b3:93:9f:ac:
                    3d:87:78:a1:a1:f4:97:3b:97:cd:a5:36:f8:74:37:
                    66:04:96:91:3a:9f:fd:bb:c9:1a:9b:f7:7d:bd:75:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B1:27:EE:54:19:0C:75:13:3E:54:AC:36:33:58:13:1E:5C:6C:89
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:19:45:37:61:a9:bf:ba:5f:de:0f:cf:91:ea:79:b4:77:e9:
         07:2e:ca:98:f2:89:77:13:c1:0f:5a:2e:00:69:66:70:7f:01:
         7b:b5:72:3b:e5:9f:36:e3:91:53:25:42:c1:62:27:df:5a:e7:
         0b:75:d4:3c:24:74:71:4d:56:94:d4:4e:bf:b4:4f:19:06:e4:
         43:f7:2e:c4:6d:22:17:87:20:1a:d7:21:d8:13:ad:3a:ea:2e:
         04:c1:88:c7:b1:a6:ce:3e:dd:e3:06:27:e2:54:35:44:f5:9a:
         cb:6b:b0:9d:d7:0e:11:96:7f:a4:c9:f6:7e:f2:b6:7f:a4:d0:
         17:88:c6:b1:3e:95:98:72:15:83:da:fb:5f:63:9a:06:36:c6:
         84:52:87:98:72:18:b2:88:d3:be:21:29:4e:8d:1d:36:fc:9c:
         99:1f:f0:d2:df:36:89:ca:b5:56:7e:05:e8:00:a6:cf:85:6a:
         67:56:d3:16:48:76:b0:be:6f:85:59:ce:ac:c1:1a:6e:1b:3a:
         a4:dd:03:b7:be:27:e9:0c:d6:92:40:72:27:8e:36:12:99:91:
         57:a4:4e:91:9e:e3:e6:ea:52:31:96:c1:6e:15:22:ee:88:af:
         32:a1:13:83:06:9b:18:39:5d:2e:c0:36:4c:23:cf:40:1a:d1:
         f4:86:5b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:25:03 2025 by rpki-client