Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
File:                     BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft (raw, json)
Hash identifier:          eNESwBBCyH2saZiG85Ggq3HyMncB4G56UUewrNCuPV8=
Subject key identifier:   9B:AB:54:C9:8D:DA:91:95:F4:CA:61:CD:C5:5D:F3:99:76:18:DC:AB
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Certificate issuer:       /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial:       0199FEB4FB3555F0AFFA133802C33B8AC646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
Manifest number:          087F
Signing time:             Sun 19 Oct 2025 23:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:37 +0000
Files and hashes:         1: BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl (hash: TcC9IsSSd3nj/YbgCV4cgBnlqhwQCJWr0CrXmcoasUY=)
                          2: FU5ckiwSRF9khD7WupXiavmIPzs.roa (hash: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:fb:35:55:f0:af:fa:13:38:02:c3:3b:8a:c6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
        Validity
            Not Before: Oct 19 23:01:37 2025 GMT
            Not After : Oct 20 23:01:37 2025 GMT
        Subject: CN=9bab54c98dda9195f4ca61cdc55df3997618dcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:d0:1b:f1:51:99:2a:56:65:68:f7:a2:67:
                    f4:1d:ec:d7:2c:f3:39:d2:e7:17:13:ff:01:a5:34:
                    e7:52:46:62:93:12:fb:cf:e4:a6:bf:98:3f:af:f8:
                    82:01:58:f3:6b:3a:cd:e0:3b:df:d9:b8:84:5d:f8:
                    79:9e:da:d5:bb:f1:de:6e:20:15:54:a9:01:8b:02:
                    a8:2e:f6:f5:e7:f7:da:fe:d3:07:f1:5f:b7:d5:35:
                    0c:3c:41:2c:64:02:1e:8d:e0:af:f9:89:67:5f:91:
                    09:03:fa:d9:52:07:f4:08:67:9c:66:64:8b:c0:2b:
                    ce:45:3b:25:94:50:e1:22:e8:10:93:f2:a7:3e:d5:
                    e7:1d:2a:05:cc:d0:a6:24:77:89:7e:f9:c9:ab:84:
                    53:89:17:92:16:c1:4d:ea:74:5a:63:4b:28:f4:8e:
                    28:41:4a:28:07:e7:c9:c9:17:3f:be:77:90:3e:6a:
                    c3:62:f7:e9:32:ac:41:5c:2b:20:d8:db:3f:20:19:
                    9c:30:ba:13:3a:b8:e1:39:fb:1a:2e:6f:63:89:44:
                    ae:13:cd:ad:1f:cf:5a:61:9b:0c:53:2f:f8:c6:fe:
                    6b:a6:16:28:47:38:2f:67:89:d5:5c:c6:6a:80:fb:
                    4d:e1:68:e9:b3:22:bf:6c:8e:34:69:9e:03:92:0d:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:54:C9:8D:DA:91:95:F4:CA:61:CD:C5:5D:F3:99:76:18:DC:AB
            X509v3 Authority Key Identifier:
                keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:14:d4:78:e0:d3:82:7c:bf:90:c9:ae:fa:1c:a9:fc:16:
         16:8e:81:8d:b4:09:73:bf:da:38:e1:34:6c:04:07:51:d1:cc:
         7c:3f:af:65:07:41:83:80:c5:9c:c3:7b:6a:d9:8a:bd:9c:9a:
         72:ac:fd:b2:6e:66:9e:56:06:71:30:14:59:e3:c0:38:67:57:
         67:f4:26:c7:62:f8:2d:6b:ff:b1:2b:c1:4d:16:3e:07:01:7c:
         08:27:60:a6:c9:8c:ea:76:f8:ff:93:02:53:ab:c0:52:10:5f:
         82:89:0f:23:74:d8:cc:da:e9:13:83:1a:9d:35:61:bd:d1:51:
         0d:24:6f:85:37:f1:33:c6:f5:3e:50:ad:22:6e:da:58:6b:19:
         ed:e0:76:ba:11:37:3c:18:b9:23:34:ec:fc:42:64:84:87:9d:
         74:53:e0:65:ef:30:63:29:23:b5:1e:ce:53:f3:28:91:18:80:
         59:64:aa:52:2d:f6:79:1f:51:d8:29:23:a5:2c:3e:80:05:62:
         01:87:65:19:80:ff:af:de:f4:09:dc:5c:aa:74:40:0f:68:6c:
         0c:b7:cf:6b:c3:9b:cb:84:e9:e4:c0:4a:d2:d1:d0:da:2c:b5:
         11:b6:db:7f:83:ed:59:be:29:06:f3:15:2d:97:eb:13:9e:e1:
         2e:d8:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:20 2025 by rpki-client