Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
File:                     bosCjRgnTSGnMWrqPMzpFYtU9IE.mft (raw, json)
Hash identifier:          Ph8+VZ9Vg4YLIGuiLEVutpGtnLSJFhPNvs8wBMy2/5s=
Subject key identifier:   99:56:FC:72:F2:F0:D0:0A:A5:27:7A:60:27:4F:0D:3D:A1:92:B3:27
Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81
Certificate issuer:       /CN=6e8b028d18274d21a7316aea3ccce9158b54f481
Certificate serial:       0199FCFD6707BAE76163AB8F6EFFDF6B8828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 15:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:29 +0000
Files and hashes:         1: WmIdnk_9nH4b99INea_I2KNfOsk.roa (hash: M5AL1LDO4kJuImuQDNFPsC6NQYMR6AeQGyLWZ0QYZSI=)
                          2: bosCjRgnTSGnMWrqPMzpFYtU9IE.crl (hash: F3DgrEn/PrOz+6e3PKO/1N/Xq8uzNCT1mkPK2jE3Vqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:67:07:ba:e7:61:63:ab:8f:6e:ff:df:6b:88:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481
        Validity
            Not Before: Oct 19 15:01:29 2025 GMT
            Not After : Oct 20 15:01:29 2025 GMT
        Subject: CN=9956fc72f2f0d00aa5277a60274f0d3da192b327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:97:3a:7c:86:02:13:5b:5c:e9:44:ee:d6:
                    85:27:3a:58:70:6d:9c:92:a2:73:3a:92:3a:18:a5:
                    64:63:00:77:02:54:65:ec:52:0b:11:bb:f9:7a:59:
                    7d:d7:a9:99:d3:94:75:4b:d7:ba:d4:8f:65:b2:a0:
                    54:af:0b:40:e4:43:60:2e:e8:31:c1:95:fb:19:b4:
                    64:fb:8b:b7:82:cf:4b:61:60:40:14:aa:c0:c5:da:
                    13:0f:a7:4c:ee:a1:15:c0:c6:2e:d8:47:7d:d2:db:
                    54:16:f4:64:92:a2:bf:52:47:94:d1:a3:ec:00:9f:
                    9c:b4:2c:72:55:27:93:54:ff:d4:7a:aa:63:67:a5:
                    02:ad:f9:7c:f1:95:d7:fd:2d:2e:16:f6:18:e5:8b:
                    f5:5c:52:4a:01:81:d4:a6:e1:ea:26:bb:c5:46:94:
                    fb:3d:fd:bb:65:7c:05:d1:d5:76:8c:a0:76:05:98:
                    69:f7:62:39:a2:47:6b:36:3a:c1:4a:c7:87:8a:da:
                    61:70:03:c3:c4:05:87:ce:f5:18:40:02:a8:72:1d:
                    18:89:6e:8c:2a:fc:98:e0:54:80:ef:16:9f:19:41:
                    31:e9:cb:43:9f:8e:1d:5f:d5:85:fc:b1:d5:2f:c3:
                    d4:ed:de:54:c1:5f:2a:cc:05:8e:23:31:96:bc:2e:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:56:FC:72:F2:F0:D0:0A:A5:27:7A:60:27:4F:0D:3D:A1:92:B3:27
            X509v3 Authority Key Identifier:
                keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:4e:c4:63:fa:18:87:d8:5b:e0:6a:97:5c:a5:60:13:bb:
         58:00:dd:30:3e:dc:71:76:b3:a2:5e:22:26:86:43:22:45:cf:
         6a:cc:b9:52:4f:ad:1f:35:d7:0c:47:19:7d:5e:c5:db:17:92:
         6c:50:39:30:de:97:2e:a0:08:d5:7f:52:43:0f:25:3b:af:3a:
         d0:aa:ac:6b:2a:d0:e2:82:60:77:7b:94:91:cf:ae:16:4f:19:
         90:fb:f7:65:98:d2:8a:15:90:4d:fb:dd:46:ef:fa:ff:f2:45:
         00:85:20:b6:a4:c4:4b:89:3e:65:d6:30:b0:70:f3:e5:0b:b1:
         2f:59:19:eb:e3:82:82:91:a7:93:f2:21:ec:82:94:13:e2:b2:
         28:e9:90:51:c1:52:9c:21:90:ff:ca:be:4d:5c:b0:f7:3e:da:
         bc:68:a9:b7:a9:60:be:ae:cc:e0:f4:99:97:63:60:d9:1d:8f:
         27:bc:c7:3c:fc:d2:71:c0:11:8a:a6:d4:a7:f3:22:eb:50:65:
         dc:20:19:ab:02:a2:11:ad:8f:b4:b4:ea:1c:ee:0b:cf:09:d6:
         09:3f:2d:92:99:c2:86:be:1e:63:33:d8:fc:4e:65:d7:76:b0:
         c2:37:ce:2d:21:56:73:52:fc:50:2a:e5:ff:47:ec:af:04:fe:
         30:40:38:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:24 2025 by rpki-client