Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
File:                     BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json)
Hash identifier:          O4fH7xTKeVB12dNnTPYjRwDBdMv/1699YchaGJms3xk=
Subject key identifier:   10:7C:22:93:E3:BF:F6:30:F3:FD:11:1E:01:A7:B0:49:D0:CF:4C:79
Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39
Certificate issuer:       /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
Certificate serial:       0199FCC6CDCCCF140399A0D8DCA8C596D257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:51 +0000
Files and hashes:         1: 0pJ-rwxVG5S_Uu-XF3E61P1dlA8.roa (hash: dUKNac33kPa6HT3Uru5uUtqJz9KxFM++FuLr8tWIwQw=)
                          2: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: AOOYbBIIQ5qH21MOeQBbjNxh5Cr0JAoNZEDHUXpPx20=)
                          3: C2WcH6V5QRtF4bDdl9T3ZJI2sbg.roa (hash: py0bRoLaWPaWD7mBA8fr/sS/KCotH7gRuFvSUFDN9Vk=)
                          4: H0pXo5dsrJce4F8oF2aIhMCPMVs.roa (hash: ZGDB62uG+S6SJD7pxCgAYxf3KDMdMuMZc4Ygah4Ns68=)
                          5: NUPQRS0ooRsar2f147MR7z_4vbA.roa (hash: CmMZuOujUXhdqhz27/qbC9mkinQYp7izfWsg278vT1s=)
                          6: SY-0R9mhRAOxVSEqgVexZv7lI7M.roa (hash: 6QqgZClw2wSt67aU88jN6fAOVu+vkIOWukLNHCc1CkI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:cd:cc:cf:14:03:99:a0:d8:dc:a8:c5:96:d2:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39
        Validity
            Not Before: Oct 19 14:01:51 2025 GMT
            Not After : Oct 20 14:01:51 2025 GMT
        Subject: CN=107c2293e3bff630f3fd111e01a7b049d0cf4c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fd:8b:b8:71:db:54:e1:d1:d6:bf:e5:96:1c:
                    e7:b5:cd:b3:9e:73:0e:57:83:54:4f:63:a9:12:08:
                    29:38:15:30:b9:aa:32:a1:f9:40:7a:45:31:7f:61:
                    54:d5:0c:de:a2:08:a1:1c:8a:13:2f:ab:6d:49:1c:
                    56:a3:c0:fd:b7:f6:35:3e:ec:f6:01:69:78:0a:c2:
                    3b:22:c1:e5:8e:d4:5f:79:cc:e7:e5:e4:52:43:04:
                    d5:5f:7e:a4:cd:d6:8a:f4:7e:bc:26:46:89:6c:63:
                    fc:90:f7:56:e3:24:a9:0b:4c:c9:0e:98:2a:8f:ee:
                    ec:90:b8:5c:dd:33:e1:0a:41:60:43:83:c5:47:d2:
                    b1:ef:c1:dd:a1:df:17:c5:a7:c8:be:3f:ae:b8:09:
                    ee:64:bd:c1:6f:21:f3:cd:51:a5:63:60:b2:81:27:
                    8b:98:73:17:21:e3:a3:d3:d0:e6:fc:b4:ca:3a:8d:
                    f9:5e:fa:4d:0a:d2:6d:f2:24:44:b2:e1:f5:6e:d4:
                    4b:38:ea:12:16:ce:1b:9e:28:6f:24:3c:7b:78:ce:
                    2c:bc:19:5d:0e:8c:a4:a2:5f:76:cb:00:df:1a:0a:
                    2a:e5:69:b9:cf:19:c5:ad:9f:b3:df:7a:a8:e0:6a:
                    9f:20:75:1c:f3:7a:e3:e7:6f:db:6e:91:d1:f2:13:
                    5c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7C:22:93:E3:BF:F6:30:F3:FD:11:1E:01:A7:B0:49:D0:CF:4C:79
            X509v3 Authority Key Identifier:
                keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:f6:f3:ff:92:4e:36:fb:d6:ef:d7:67:bc:ab:c9:5f:6c:
         34:de:2f:10:8d:fe:e8:71:9d:44:c5:e7:c7:e1:7a:42:cc:b5:
         23:89:33:0c:92:96:30:d7:c6:98:82:84:9c:d1:ae:34:a7:2a:
         16:c1:54:95:24:cb:7b:a2:9a:13:5d:38:ff:8a:cf:65:5a:87:
         cd:4f:ac:1e:ae:f3:53:de:a2:06:3c:94:9e:44:50:75:39:eb:
         67:37:c6:9f:c2:2e:73:f1:88:55:c7:47:c1:a6:fa:e7:cf:0d:
         07:3a:a4:36:ee:6c:f7:20:af:2f:9b:87:4f:5f:c2:1c:6c:07:
         da:83:9f:24:89:b5:6f:6c:a6:67:0b:7d:cb:3c:a4:3d:ee:9c:
         f0:c8:e3:21:87:00:3b:c0:ef:f1:eb:ac:37:7d:da:5c:f7:0d:
         1a:55:b8:23:e0:07:1f:42:ec:9a:3b:d4:a1:d3:b3:00:26:e6:
         c1:1f:59:e7:2a:63:44:64:c4:e1:c9:c3:be:fc:01:48:80:cc:
         4a:88:f8:7e:22:3a:bb:7b:df:c6:cc:ed:60:db:d4:cc:49:be:
         47:45:7b:d6:99:21:66:88:7b:7c:75:ab:03:cb:c5:f3:38:8d:
         0e:46:10:06:8d:7d:e2:05:e3:75:56:1f:bc:b2:9a:51:cd:41:
         f3:cb:54:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:58 2025 by rpki-client