Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          sWKNWvq3cOao/+rB0sO7i7lsbINv4h90KyTKqqDdlrE=
Subject key identifier:   CF:87:97:6D:AE:24:87:4C:45:FA:8F:BA:45:62:4C:76:85:0E:16:19
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       0199FCC66B59354D473E15F2E019A40AB823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          125F
Signing time:             Sun 19 Oct 2025 14:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:25 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: vHwhx9DDT8uWj5UZ/u2ROhYlkKHTK86F8DGO1MjyX60=)
                          2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:6b:59:35:4d:47:3e:15:f2:e0:19:a4:0a:b8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Oct 19 14:01:25 2025 GMT
            Not After : Oct 20 14:01:25 2025 GMT
        Subject: CN=cf87976dae24874c45fa8fba45624c76850e1619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:be:47:d5:30:fe:8f:49:cb:2a:4d:f8:44:
                    d5:27:ce:2c:8e:5f:9f:4c:77:dc:b8:eb:03:08:2e:
                    3f:a8:6c:34:5f:21:77:d6:c6:29:75:ba:0d:51:85:
                    88:0d:ba:7c:ac:b1:4a:24:99:5f:36:1e:29:53:04:
                    65:48:e1:17:38:c8:54:2b:59:1d:51:45:2e:98:2f:
                    3c:2d:e9:0a:f7:93:f0:f7:da:88:e8:1c:1c:92:27:
                    39:7e:c5:a8:75:12:d4:7b:a1:73:f3:69:60:02:ab:
                    ea:c9:66:a5:a0:70:e3:95:df:dc:a0:49:20:23:64:
                    73:45:99:bd:a3:b0:ef:5b:97:b9:a5:55:46:d1:62:
                    a0:b5:b7:10:86:2e:d2:66:d7:07:fa:b6:b0:88:b2:
                    a6:03:4e:1d:22:f2:e1:5f:f1:d1:68:26:73:61:c2:
                    f8:93:e1:2e:97:53:dd:df:5b:89:03:d2:43:91:71:
                    02:56:09:b8:4b:dc:b4:65:76:ab:e6:78:89:5b:0b:
                    14:ec:a0:3a:0d:17:fe:0e:9d:ff:de:63:09:01:bb:
                    80:e3:2e:7f:b6:98:fc:0a:1e:85:db:48:50:68:6b:
                    9c:0e:55:56:6e:f1:d9:d7:90:e9:9e:49:6b:a1:09:
                    d7:33:ea:a2:71:d4:2c:79:89:de:c7:0d:2b:0b:af:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:97:6D:AE:24:87:4C:45:FA:8F:BA:45:62:4C:76:85:0E:16:19
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:ed:51:e6:1e:1d:8f:17:14:66:ea:81:2e:96:47:a5:70:54:
         f1:65:23:59:fe:72:15:30:22:67:d2:05:8d:05:3a:83:66:0e:
         63:ba:f1:2a:9e:71:18:34:c5:7c:be:31:2c:f9:49:59:2c:4e:
         c9:96:b9:e8:c6:71:ca:4c:e5:00:cd:96:b6:32:cd:33:91:4e:
         72:de:01:de:f4:55:58:c9:24:e9:85:a2:c3:1e:31:da:af:02:
         7e:db:0b:8a:ad:f7:26:84:55:bb:89:bf:31:46:2d:1f:3b:c6:
         a0:48:73:3a:ef:33:c8:c4:2c:84:b9:7a:6f:d0:86:10:9e:71:
         a3:85:35:68:c4:c3:1d:b0:25:f0:74:25:a8:d8:ca:02:40:c5:
         1c:7e:33:f1:0f:d5:ff:2e:e0:7c:35:c6:70:df:7b:00:05:a7:
         0a:68:98:9d:9b:40:2d:46:d0:1c:0a:44:e6:09:1f:01:28:5c:
         03:6a:0c:fc:39:0d:96:1f:5a:cd:25:f1:78:e3:ba:89:ab:3f:
         4d:5c:dc:ae:3d:bb:6f:b9:94:5d:31:a2:56:ae:27:80:36:dc:
         41:c3:0a:82:d5:71:1a:c7:cb:34:22:77:5a:62:93:bf:51:fd:
         2b:77:09:1b:08:9c:22:2a:cd:e6:6c:08:bd:9e:39:38:d4:67:
         29:04:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:47 2025 by rpki-client