Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
File:                     BZ-mprHseubqi0STTPfD1PpQjvI.mft (raw, json)
Hash identifier:          X5TK4An3FiqH7idMYd3MCOzgEatdUNcMFJUeyB3K/VA=
Subject key identifier:   5B:FB:09:57:42:4C:47:70:EB:D4:F4:66:77:86:D4:11:3F:38:EC:36
Authority key identifier: 05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2
Certificate issuer:       /CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
Certificate serial:       0199FBEB6807D42691B9F01FEFE7264CB1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:12 +0000
Files and hashes:         1: BZ-mprHseubqi0STTPfD1PpQjvI.crl (hash: HSr852Nof9aWFYaU+u7x3l9rXJadJqFtL9Fttt+Uv1E=)
                          2: cnEEcGLvR_2Aq8VpuBpZTx9kU6E.roa (hash: 881SyJrTyGqfbqUTNOmejK/mEUBUWzl98I4Gk2XXIK8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:68:07:d4:26:91:b9:f0:1f:ef:e7:26:4c:b1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059fa6a6b1ec7ae6ea8b44934cf7c3d4fa508ef2
        Validity
            Not Before: Oct 19 10:02:12 2025 GMT
            Not After : Oct 20 10:02:12 2025 GMT
        Subject: CN=5bfb0957424c4770ebd4f4667786d4113f38ec36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bd:b4:d7:1f:ab:25:d1:fa:c9:3c:5a:05:f0:
                    d8:15:da:47:33:a1:47:c8:a9:87:8c:f6:22:94:d3:
                    75:16:d9:58:61:ff:12:25:e6:3e:b8:60:6d:80:9e:
                    26:22:9a:03:40:80:f2:87:55:8a:04:ab:99:cb:2e:
                    80:98:4c:3f:ce:62:32:c0:a5:18:3b:b0:0c:61:b1:
                    69:07:02:9e:a1:b1:f3:71:d8:4e:3f:42:15:ab:35:
                    a3:ed:d2:50:62:d7:2c:08:9d:4e:9b:91:53:3f:ac:
                    f5:0d:0b:cd:2b:d8:52:da:7f:32:82:41:4b:6f:2b:
                    6f:ca:da:aa:31:3a:42:30:3c:9c:43:11:09:fa:03:
                    79:fc:70:2a:b5:40:0a:1e:78:81:45:09:48:44:de:
                    6c:a3:88:66:60:2a:27:78:a4:1e:6b:2a:12:8b:8e:
                    ad:fb:37:2f:d4:1d:27:bc:f7:35:52:de:30:14:0e:
                    f8:32:e1:44:d8:8f:ed:c4:37:4c:22:dd:77:21:1e:
                    51:d9:be:93:f0:a2:21:cd:99:fb:9d:76:bd:8c:9b:
                    e7:f8:70:80:86:cd:e1:ee:1a:3d:55:07:98:c1:02:
                    60:72:10:5d:c1:9e:9b:c7:0c:69:e1:25:bd:9c:d3:
                    2b:aa:13:a4:31:f2:15:89:08:13:9e:49:fa:6e:98:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FB:09:57:42:4C:47:70:EB:D4:F4:66:77:86:D4:11:3F:38:EC:36
            X509v3 Authority Key Identifier:
                keyid:05:9F:A6:A6:B1:EC:7A:E6:EA:8B:44:93:4C:F7:C3:D4:FA:50:8E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ-mprHseubqi0STTPfD1PpQjvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9200ca-a680-44d9-92f9-8d64df01c0c4/1/BZ-mprHseubqi0STTPfD1PpQjvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:10:e1:9f:ce:01:7b:80:40:de:de:73:47:d9:9c:51:9a:54:
         ba:a0:91:02:26:91:89:23:26:1a:3c:d8:e7:62:85:a0:36:30:
         9a:12:19:8e:61:57:6f:7c:3a:1b:88:bd:37:63:b9:93:45:4c:
         ee:4c:76:10:66:1b:63:c6:d3:f4:60:b8:92:20:19:e9:15:15:
         43:30:19:14:e6:8f:d9:d4:bb:1f:3b:d7:17:32:69:c0:f8:26:
         fd:4a:77:d2:69:6a:b8:3d:ed:e4:93:cf:37:98:22:e9:c9:b7:
         a6:51:e6:a7:ff:9c:9e:1c:24:34:d9:3f:9a:1e:c9:dd:81:89:
         82:a1:05:ef:26:1b:28:fc:25:e5:c5:fd:86:ea:78:31:44:f5:
         05:cb:b3:a1:6c:f2:61:8e:dc:ba:e8:1a:87:a3:5f:d8:90:53:
         96:7b:b5:95:5e:3f:3a:af:ff:7f:c2:83:90:28:f5:3a:9d:ac:
         dd:19:14:87:1b:ad:84:98:30:54:e0:a6:7f:4f:d8:5b:9c:22:
         ae:a0:8e:1f:27:e0:cc:c1:2b:af:6e:e1:a6:8f:dc:70:9c:b9:
         1b:60:ff:76:4d:64:9a:db:7d:71:c6:e6:dc:0b:42:96:c2:5d:
         f8:63:fd:93:63:f6:4d:e4:b9:51:48:12:62:82:83:bb:43:a4:
         7b:ab:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:58 2025 by rpki-client