Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
File:                     BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json)
Hash identifier:          MSWq8wqTPZ43G6f3rX9fFXcLJtIIRMGQXNygCJMRRiQ=
Subject key identifier:   C3:E3:95:3C:FA:CB:A4:0E:01:99:E1:93:A7:79:46:E5:95:98:81:87
Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0
Certificate issuer:       /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
Certificate serial:       019A02912BF36192335B693069BA09408F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
Manifest number:          0B9C
Signing time:             Mon 20 Oct 2025 17:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 17:00:59 +0000
Manifest next update:     Tue 21 Oct 2025 17:00:59 +0000
Files and hashes:         1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: AO8pqa7kHrLIoYV5XSpYq4LeKACrnqQ9GTkv7BOgJbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:91:2b:f3:61:92:33:5b:69:30:69:ba:09:40:8f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0
        Validity
            Not Before: Oct 20 17:00:59 2025 GMT
            Not After : Oct 21 17:00:59 2025 GMT
        Subject: CN=c3e3953cfacba40e0199e193a77946e595988187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c8:5a:91:72:c1:3a:56:d3:66:7f:d4:af:b4:
                    84:af:ca:64:93:65:a1:d0:ae:9b:82:82:34:93:98:
                    1f:de:20:24:40:30:5f:e5:c1:f8:40:2e:de:79:b2:
                    81:a8:ec:89:69:d2:9e:87:fc:67:03:9f:2e:07:be:
                    ba:53:a7:2c:bd:24:e8:07:0d:fd:12:52:27:5d:38:
                    94:0f:ec:7c:de:08:ae:0b:d1:fc:c7:a3:af:d2:61:
                    94:ca:39:01:6c:b7:40:f0:0e:0e:c1:a9:86:9b:77:
                    b2:cf:63:ff:3c:1e:ad:a6:80:b2:ec:83:16:d3:7b:
                    6e:bd:07:37:f7:3b:05:f1:91:62:08:13:04:59:af:
                    27:17:57:c4:fb:1a:0b:2b:a0:5a:1f:64:8b:bf:54:
                    ae:04:3e:7e:2f:fe:95:97:3c:f8:7e:49:a2:d9:e3:
                    5a:91:c2:b4:5f:0b:6a:9c:c6:b9:f8:d9:6d:b2:ab:
                    07:51:15:d3:a4:70:fa:15:7e:93:1e:a7:8d:73:aa:
                    e3:36:a8:e0:70:1c:ba:a5:96:c3:03:a5:53:66:69:
                    2b:d1:e7:b8:dd:b7:39:2c:32:2e:91:a8:b1:59:a3:
                    20:19:92:3a:5b:66:d4:94:3a:a7:0a:47:a7:c5:8d:
                    b2:c8:75:03:d2:ae:fc:7a:f3:3f:16:38:6d:47:ac:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:95:3C:FA:CB:A4:0E:01:99:E1:93:A7:79:46:E5:95:98:81:87
            X509v3 Authority Key Identifier:
                keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:34:de:ec:83:df:3b:37:a4:8e:38:e4:1a:08:80:e5:71:
         d6:cb:80:28:cb:0d:b4:27:8e:43:c4:0e:c1:5a:9f:f6:3b:75:
         2f:40:3e:d7:0c:e7:7b:ba:9b:57:55:4d:db:63:87:b2:46:ae:
         5b:26:6d:99:46:ab:d5:36:45:90:b2:35:38:06:f8:45:2d:7f:
         09:6c:f3:02:3e:31:d8:7a:ce:fe:19:a6:aa:ee:ea:26:09:1c:
         0d:24:3b:2b:ab:15:af:33:65:db:99:5c:23:2e:48:04:49:e4:
         0c:14:5b:57:18:c2:b3:83:11:a7:86:da:c5:e4:9f:33:80:a0:
         1c:12:90:c4:73:a7:48:e4:80:f8:13:64:07:dd:cf:a8:c7:49:
         cf:59:61:b2:04:cd:d6:c3:3f:e7:b7:76:fe:61:f3:9d:1b:d5:
         89:1b:8e:ff:ed:26:71:86:93:3e:1e:57:fe:18:ca:57:ab:29:
         eb:a9:ba:4c:3b:1e:59:4d:3f:2a:fe:3e:e4:b6:e4:d6:e8:4d:
         bd:e1:61:11:9f:57:50:a5:f1:9c:a2:26:a5:05:78:92:19:5f:
         e9:84:c9:b4:43:d1:11:f0:51:f2:4b:bf:6d:6f:28:99:2b:5b:
         27:b0:62:1e:97:8a:b4:ca:a2:ae:29:22:f9:8c:6f:2f:b2:10:
         12:f0:8e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:22 2025 by rpki-client