Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
File:                     BWRw2Bso3FKOXyjbC7X20pRhGmU.mft (raw, json)
Hash identifier:          RkfoHAkdsl/D+Zl7oiw4A/7Ew1qEmPZ9W3HnrCUjRbY=
Subject key identifier:   FC:C9:4E:E3:18:78:04:EB:AA:27:2F:DA:43:0F:E4:B6:58:ED:8C:A1
Authority key identifier: 05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65
Certificate issuer:       /CN=056470d81b28dc528e5f28db0bb5f6d294611a65
Certificate serial:       0199FC8F7951945CB1676AFAC169B7A1250D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
Manifest number:          13FB
Signing time:             Sun 19 Oct 2025 13:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:25 +0000
Files and hashes:         1: BWRw2Bso3FKOXyjbC7X20pRhGmU.crl (hash: 0svm9yrJLPceG/2epnVS7/m4VuTgH0l+Jn95QFhaNCA=)
                          2: kqmUwVdGk1LkjvL-upU9QhBrTk8.roa (hash: ljaTHQhywA3lYtK1TIsMdme1hiJbfaCWwfGaCBoPJAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:79:51:94:5c:b1:67:6a:fa:c1:69:b7:a1:25:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056470d81b28dc528e5f28db0bb5f6d294611a65
        Validity
            Not Before: Oct 19 13:01:25 2025 GMT
            Not After : Oct 20 13:01:25 2025 GMT
        Subject: CN=fcc94ee3187804ebaa272fda430fe4b658ed8ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:da:42:89:3a:2e:e8:38:cf:cd:fd:81:74:
                    55:21:03:a8:e0:63:ea:6c:d2:37:54:1c:16:1a:6b:
                    e7:36:08:03:bf:d5:86:77:14:25:1a:f3:96:b3:98:
                    12:2b:f7:cf:ad:ef:0c:8d:1b:10:e7:dc:a8:d7:eb:
                    99:be:8f:e4:b8:40:6a:c1:8b:d9:b4:03:22:f8:fa:
                    fb:07:ab:7f:75:ad:d5:9c:b2:f1:30:96:49:82:90:
                    09:78:07:08:ce:89:ea:1d:79:f6:b7:66:fa:d0:fe:
                    22:a3:74:13:0f:01:76:7f:79:c5:90:ac:76:8f:23:
                    61:7b:26:64:25:78:92:20:bd:cb:12:d2:04:08:16:
                    a4:71:b4:5e:31:b1:97:43:e8:6e:ef:03:a9:0d:e4:
                    42:42:ef:0e:a6:e7:2f:5e:47:36:e5:90:56:12:95:
                    f5:03:56:91:fa:79:55:f5:a3:d6:fc:4e:d3:68:b9:
                    18:38:51:46:ff:fb:8d:d7:9d:e6:c3:79:30:d4:71:
                    49:f5:17:dd:78:10:54:59:82:37:b6:70:dd:3d:56:
                    63:f9:48:64:7e:26:c7:af:20:70:b1:a8:1b:af:32:
                    ed:a5:c6:cf:1e:c8:8b:82:25:99:c5:a8:a7:ad:87:
                    94:b4:8a:ac:13:67:23:45:f1:ca:43:ae:ac:fd:49:
                    b7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C9:4E:E3:18:78:04:EB:AA:27:2F:DA:43:0F:E4:B6:58:ED:8C:A1
            X509v3 Authority Key Identifier:
                keyid:05:64:70:D8:1B:28:DC:52:8E:5F:28:DB:0B:B5:F6:D2:94:61:1A:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWRw2Bso3FKOXyjbC7X20pRhGmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1916e1-ad9c-4b40-a9b0-93a88221def2/1/BWRw2Bso3FKOXyjbC7X20pRhGmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:ef:32:a0:14:fc:25:7b:67:c7:be:77:89:88:cd:e8:71:
         b3:ab:d4:30:fe:09:1f:88:e4:02:a5:3a:f7:ba:53:81:60:86:
         c6:45:ca:3f:f1:91:60:6c:32:74:7a:55:73:2a:80:5b:87:75:
         e4:13:10:79:79:2f:81:57:73:22:96:81:e9:70:75:d4:ff:41:
         b0:9a:de:94:6a:13:87:2d:d8:44:6c:bd:f0:7c:a7:e5:d7:ce:
         2e:4b:74:5c:f9:17:e5:5b:ba:c5:76:6a:80:e3:56:72:e3:b6:
         1e:dd:8f:0a:bc:08:e3:a7:88:4b:e0:73:45:75:ee:ca:04:f9:
         0d:62:ab:d8:36:c2:97:cd:7a:4a:df:95:37:28:eb:e0:95:1f:
         42:25:57:e3:3a:9a:6e:18:b9:18:1c:0a:5a:9c:87:dc:f7:bd:
         2c:1a:54:6f:5a:43:1e:11:85:fb:8e:4e:79:3c:6c:3c:86:26:
         7b:a8:e7:91:ac:a4:5a:f1:91:5a:71:ba:0f:77:77:dc:ae:04:
         06:33:12:09:36:83:61:4e:ce:ce:be:d9:d5:4d:aa:7e:3c:47:
         29:b3:f3:b0:8e:ad:f9:82:ad:1b:d6:74:2a:37:b4:57:be:47:
         27:58:38:b7:8f:7a:9b:e2:2f:d4:27:b5:48:a6:32:97:a5:cb:
         9d:86:9c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:28 2025 by rpki-client