Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          uYxT2EWKnOFR9UyPGFsmbE8n8eSHU2otucPNelP78eM=
Subject key identifier:   31:34:7B:BC:C5:7D:A7:C8:5A:C4:56:C0:F4:4E:A7:C2:55:9C:19:C2
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       0198917E4E54D7CFAC208C504991DF367FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          08E5
Signing time:             Sun 10 Aug 2025 01:00:30 +0000
Manifest this update:     Sun 10 Aug 2025 01:00:30 +0000
Manifest next update:     Mon 11 Aug 2025 01:00:30 +0000
Files and hashes:         1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: kF56alT0Iih2NjlBKgVNxIgp2PZX4cwkGKB22Gwuk0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 23:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:91:7e:4e:54:d7:cf:ac:20:8c:50:49:91:df:36:7f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Aug 10 01:00:30 2025 GMT
            Not After : Aug 11 01:00:30 2025 GMT
        Subject: CN=31347bbcc57da7c85ac456c0f44ea7c2559c19c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:cd:3f:24:d9:50:04:cd:de:6f:86:ec:62:
                    9c:3a:0a:f3:e9:90:00:cc:a7:09:91:e6:fc:5d:af:
                    e9:42:a3:30:47:18:da:28:cc:be:05:13:bb:bb:1d:
                    e2:52:b4:42:6b:63:c0:47:e9:ae:cc:61:be:f1:4d:
                    51:5f:c8:ac:f1:1a:e7:b4:95:16:ff:5a:a4:a6:87:
                    e2:bf:ad:af:8a:1b:84:f7:7f:7e:e1:1a:2e:dc:5d:
                    d2:fc:8e:03:98:02:02:91:e6:7a:c3:7c:93:2e:7f:
                    e4:31:c3:30:73:71:5a:9f:92:66:26:b1:a4:0f:ef:
                    27:c6:43:18:21:b9:e0:09:d5:78:45:88:fc:f3:0a:
                    db:ea:73:53:24:3e:a8:54:4f:2b:f6:f8:b4:94:29:
                    94:2c:b6:17:97:d2:2b:a8:30:56:5d:7b:3b:6a:8b:
                    46:59:c5:90:7e:e1:03:da:db:c1:a6:ee:6e:37:e6:
                    c6:33:c7:53:bd:71:0b:82:bc:9c:ae:ed:1b:dd:dc:
                    bb:36:c1:00:67:e5:dd:c8:a8:75:9b:7a:f7:f2:fe:
                    ca:d2:ee:ce:3c:6b:93:92:43:3d:d4:5a:45:b2:6a:
                    97:32:74:29:18:bb:7c:94:cc:dd:c0:24:4b:80:0d:
                    fd:d0:fd:1b:ab:a3:33:a0:f6:da:bc:c8:6e:85:d7:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:34:7B:BC:C5:7D:A7:C8:5A:C4:56:C0:F4:4E:A7:C2:55:9C:19:C2
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:64:87:f6:2a:99:b8:65:46:7c:90:4a:41:6d:8e:37:44:12:
         b4:b7:fb:38:55:d6:a9:96:01:e8:b1:be:df:ff:f8:6a:41:19:
         64:de:d4:11:a0:49:04:58:dd:74:ed:27:89:fe:63:b2:0c:c7:
         8d:05:ef:4d:66:a5:de:bb:94:fb:df:68:e8:b7:fb:0a:88:89:
         1e:cb:3b:e4:97:62:9a:21:36:6c:aa:e4:20:24:5c:31:c0:ab:
         cd:0a:16:d4:1a:f8:31:31:2e:e1:87:88:f2:23:11:41:47:f7:
         73:a2:34:dc:99:ae:b2:cc:b9:d7:99:35:8a:13:bc:23:a2:73:
         5a:51:df:c0:d7:b2:08:f1:e0:eb:ef:5d:b6:26:ef:e0:9f:44:
         a2:a4:8b:75:1e:39:38:f3:6a:b8:ca:91:85:20:c0:74:d4:10:
         70:42:61:19:f0:e3:45:cd:ed:48:c4:a2:8d:e8:cf:e9:ed:f8:
         99:e3:dd:8d:5a:4a:fd:a9:9e:8a:a5:30:f3:0e:a4:93:94:3d:
         c4:3b:dd:8c:36:af:9f:3b:0d:19:5b:8b:b1:c6:80:f5:43:73:
         fe:45:44:e3:9a:f6:e5:44:7a:5f:44:fd:61:c6:a5:31:bd:e6:
         b4:21:6b:d8:67:fa:2f:41:0b:37:b3:bb:41:b0:e0:24:0f:3e:
         b6:ce:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:00:13 2025 by rpki-client