Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          KUWZCdAyVFMEkivx7EChRxFgwLV6aGDvxQqt3yHyyhI=
Subject key identifier:   44:8D:FE:BA:B7:D4:D6:2F:6D:07:67:80:C6:41:25:6F:0B:18:88:FC
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       0199FEB539207897E2ACD7E842700E1C464B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          16F4
Signing time:             Sun 19 Oct 2025 23:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:53 +0000
Files and hashes:         1: AzqwEnHg1SyZac2xM8YrOrTBmKs.roa (hash: bWS77EdYPn213uSVuq+Rq1Onu0IbUZI9gFRwi3wlTog=)
                          2: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: U380Sd8wRT7JVgmbdZ9VXFjSF0RVsgSDFmyWe5aKUwA=)
                          3: EBKkLbAWIgUN_1ExAM_3PwhqLzk.roa (hash: sabysmysP8b4aNHHqq6eNU7v0c6260EktWAc+FuDTDI=)
                          4: EGHE8mHjGVObxzVhlLsbqxuIFaE.roa (hash: g8QL/OjyGBw2KnLbgHtF/B7984D0evEQPaL4gj/TGvY=)
                          5: RUBK6YgAvaDdWQcnoq_c2QP-xe4.roa (hash: Uqv+aEnH2dA3s4zAi+ZXrmM5vUYHFe7H5OkNDJW1qSI=)
                          6: lW6KevOszM5D-5TUsA8x1cxhIzM.roa (hash: DXJ77HAEhtTW/nPv0xeO4AWTtb6lD2Omn5LCPAFZFkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:39:20:78:97:e2:ac:d7:e8:42:70:0e:1c:46:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Oct 19 23:01:53 2025 GMT
            Not After : Oct 20 23:01:53 2025 GMT
        Subject: CN=448dfebab7d4d62f6d076780c641256f0b1888fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0a:57:b7:84:28:d7:a3:4a:05:41:c5:e0:f4:
                    05:fa:e9:ef:17:99:b9:47:cc:28:44:1a:9e:55:80:
                    4a:08:eb:d8:92:84:76:1b:d2:8d:6f:46:65:c3:95:
                    92:86:89:12:ea:25:55:c9:05:db:ce:99:cd:f3:12:
                    3c:d0:d8:34:4d:15:1c:98:09:6d:cd:9b:fe:66:6c:
                    54:a7:45:59:d5:80:0b:13:ab:07:52:0f:bd:62:07:
                    3d:e0:02:8b:ff:00:87:a9:6f:41:a6:f4:4d:3a:57:
                    f2:c0:a3:38:51:81:c7:4a:2a:4c:c5:cc:09:7d:7f:
                    ec:05:ae:79:cc:a7:ae:93:9b:13:81:63:06:6c:a6:
                    1a:23:35:54:10:5e:ef:cc:8c:7d:ba:32:dc:df:8e:
                    68:d3:1a:c9:33:4a:d2:b6:f7:bc:f1:72:47:b6:b6:
                    80:b4:61:61:86:05:22:e7:8d:f1:71:c8:07:2f:42:
                    85:4c:85:69:00:66:19:aa:f2:bf:4a:d8:48:38:30:
                    81:69:d0:a9:49:81:2d:ee:ab:83:eb:ad:b7:21:55:
                    1a:8e:d1:54:0b:f5:d1:8f:8c:ce:bc:30:81:ff:ff:
                    a1:08:6c:07:7e:11:b7:a3:81:24:c7:a5:cd:5f:64:
                    d0:e2:ff:83:5f:ac:f5:8e:a1:34:7e:e7:40:d2:e2:
                    4d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8D:FE:BA:B7:D4:D6:2F:6D:07:67:80:C6:41:25:6F:0B:18:88:FC
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:e3:8a:4e:d7:73:9e:83:df:58:24:d5:31:92:ea:57:37:5e:
         18:f4:86:db:72:41:f4:88:93:7a:39:22:da:6c:60:d6:4d:72:
         c6:b9:7b:12:60:4a:9c:ee:9c:9a:6b:07:af:ff:63:01:c4:b4:
         ad:55:44:3b:e9:80:f6:6d:e2:ec:b0:f4:03:d7:d0:79:9a:40:
         20:0b:b5:f0:b0:a2:fa:9d:a0:47:04:9d:62:9c:60:31:2d:e0:
         83:78:24:a8:e2:c3:0f:c6:1c:21:c2:fa:f6:c0:ef:77:75:ca:
         b6:13:da:ba:7a:f4:b7:fb:08:79:3a:d2:06:94:ea:3a:a9:7d:
         66:0b:0d:c1:1e:c8:e8:72:77:ac:8e:4f:76:9f:34:4d:b8:fb:
         47:95:11:77:be:93:87:25:96:fe:54:88:d0:6a:8a:d2:f2:0a:
         d7:74:83:87:bd:5a:82:f1:d5:b8:89:33:c9:62:5b:8c:23:a8:
         33:2c:d2:76:e7:30:a8:e0:5d:8e:5d:31:79:8d:4e:38:83:10:
         ba:c4:06:b6:7c:3d:ba:f9:57:c3:bc:83:17:d6:e0:1f:a4:7d:
         f0:0c:58:3e:f0:d0:b9:e6:a9:e8:75:24:80:03:e3:8e:f9:d9:
         34:10:ec:b8:27:ed:bb:25:0c:30:08:a2:93:1a:6f:41:d3:0e:
         74:e0:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:14 2025 by rpki-client