Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
File:                     BamRrNeyJz2eGGWvonVeb15nLlU.mft (raw, json)
Hash identifier:          AlfNa2EZA/bAnKmTWl+l4JTZfKIMN+po9HYslZNVty0=
Subject key identifier:   10:A5:E8:0B:82:BD:EE:9E:13:D4:1B:F9:FE:17:52:D2:1F:5C:E9:26
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       0199FBEB56FC307F726E9AC350FBCBB8C115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
Manifest number:          0B25
Signing time:             Sun 19 Oct 2025 10:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:08 +0000
Files and hashes:         1: BamRrNeyJz2eGGWvonVeb15nLlU.crl (hash: TQ7GRJMcst05KnbK6q1i1wMvRdYOVQqrXkoNY9BMiek=)
                          2: Bu48zWFxDyJn3-akty1oLQtgV8E.roa (hash: FVRZ2ohOc+cHt3W4qA7rMsRi0xv5228mt/NvOFwJ/Cg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:56:fc:30:7f:72:6e:9a:c3:50:fb:cb:b8:c1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Oct 19 10:02:08 2025 GMT
            Not After : Oct 20 10:02:08 2025 GMT
        Subject: CN=10a5e80b82bdee9e13d41bf9fe1752d21f5ce926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:07:5e:fb:8b:5c:02:48:17:c7:00:68:02:ca:
                    fe:e8:67:3d:9f:95:0a:1b:f7:a4:08:48:93:75:0c:
                    83:2a:68:aa:90:5c:cb:48:36:b6:e6:5b:55:a4:3c:
                    da:3f:dd:f2:bb:81:85:5b:7e:a9:69:79:96:d9:67:
                    fd:0b:a4:70:e1:92:ce:cc:d0:ff:70:7d:96:d8:e3:
                    a5:a8:73:49:ae:b7:d7:ca:7d:0c:82:db:fd:37:f9:
                    e8:3e:fc:21:0a:3a:4a:03:92:8b:24:89:64:3e:c3:
                    db:06:97:ec:e2:3d:11:c2:15:d8:c2:0f:e5:41:bc:
                    dd:69:b2:2d:a2:42:eb:c4:2c:49:39:e6:7d:c5:1b:
                    5c:d9:cd:d5:e7:6f:3a:b3:a8:ac:1d:ef:7e:6a:6a:
                    77:2f:cd:2c:d2:5f:40:7c:23:e5:3e:47:11:98:8f:
                    c9:fa:79:95:7e:0f:3e:f6:a2:8e:8c:63:9a:eb:12:
                    06:2b:a6:8c:09:52:23:4f:8a:24:82:c7:8b:cd:c7:
                    0e:b8:4b:da:19:d6:bc:7b:16:f4:92:e4:88:11:35:
                    88:1b:02:bf:a5:fe:5f:18:22:08:31:4d:04:8f:88:
                    97:da:03:34:ac:f1:c1:be:63:ed:84:a8:2d:05:0a:
                    c6:53:43:00:ad:31:67:f0:63:9b:c8:b1:19:6f:6f:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:A5:E8:0B:82:BD:EE:9E:13:D4:1B:F9:FE:17:52:D2:1F:5C:E9:26
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f2:08:49:d1:93:53:8b:f6:7d:f8:22:9a:c9:96:1d:a1:8e:
         cd:01:d5:c4:00:82:f0:d4:b5:c3:0b:d0:12:06:5f:17:74:4e:
         3f:ac:f7:d8:e7:76:0a:05:2a:ba:f7:57:09:14:fb:8f:0c:40:
         35:7e:e3:f8:c6:e1:da:9a:f2:02:88:13:ed:67:59:f3:cd:6f:
         05:87:a2:6a:f5:7e:cf:e4:73:4d:52:5a:79:af:88:cf:db:17:
         20:36:75:8f:73:bf:fe:54:c4:d0:1f:3f:d7:4f:ac:d3:da:9d:
         7b:84:f5:79:7f:90:e2:97:bc:ab:49:f7:27:0a:9d:ba:00:16:
         36:d1:99:ec:b2:43:f5:03:8f:a8:4b:c3:6d:29:6d:0d:7a:53:
         e7:20:89:cd:33:8e:71:74:9d:d2:83:49:f5:16:ca:09:8c:29:
         6c:4b:32:39:e4:9a:1a:59:38:8d:f0:06:79:b6:96:cf:47:ed:
         e4:2b:3b:03:88:63:02:80:88:34:7e:01:ad:50:9b:fd:49:95:
         dc:68:0c:2e:31:fc:8f:53:83:69:fd:d2:d4:9a:69:ee:19:19:
         c1:8f:f9:60:63:e2:06:4d:e7:df:e2:21:15:cf:79:25:be:0d:
         08:2c:60:fe:2b:eb:38:25:e8:1d:d3:dc:b0:d7:36:2a:d4:71:
         4b:e8:f9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:31 2025 by rpki-client