Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
File:                     BNPF3p_zzOExyL_NzOMzlH2SY14.mft (raw, json)
Hash identifier:          PH023TSrmHTrY2cyfAoli2BcB9SOFBKzrDJr/5ezyrQ=
Subject key identifier:   55:66:5D:90:69:A1:8D:0C:C9:63:00:A3:AE:59:73:40:C9:7D:27:18
Authority key identifier: 04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E
Certificate issuer:       /CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
Certificate serial:       019A53081D447C49489DD25AFD6A64713192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
Manifest number:          0560
Signing time:             Wed 05 Nov 2025 08:00:31 +0000
Manifest this update:     Wed 05 Nov 2025 08:00:31 +0000
Manifest next update:     Thu 06 Nov 2025 08:00:31 +0000
Files and hashes:         1: 6vJ_I4Qsur9Ih45q8_GeDahWN0c.roa (hash: dFh6X6qgHNkFlYjksVHkI3rW+fe7dVzePztX5khTuoo=)
                          2: BNPF3p_zzOExyL_NzOMzlH2SY14.crl (hash: ttmLGAgmtB01yE5TF20MD90dDTPwv+w3culr4EIuunA=)
                          3: zXuMw5yQJF8hXAAuz5MdQ8rQoCM.roa (hash: rcm6PIZVaxPM8C0GOLUpEptbl1B+V7MuA42ka2YFqQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:53:08:1d:44:7c:49:48:9d:d2:5a:fd:6a:64:71:31:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d3c5de9ff3cce131c8bfcdcce333947d92635e
        Validity
            Not Before: Nov  5 08:00:31 2025 GMT
            Not After : Nov  6 08:00:31 2025 GMT
        Subject: CN=55665d9069a18d0cc96300a3ae597340c97d2718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:f2:a0:24:37:f8:3d:ae:63:2a:d8:4f:44:
                    50:4a:4e:61:bb:d0:e3:35:ca:b7:74:57:3f:e1:5a:
                    52:f7:1f:8d:2d:a0:7a:df:43:36:9f:94:dc:7f:2f:
                    05:dc:8c:6a:1f:fa:47:b3:c2:d1:48:a2:e3:61:de:
                    63:12:9a:b0:cd:41:98:a2:59:41:4d:ec:4c:6d:3f:
                    e4:3f:26:28:b1:4c:57:54:7c:ef:a5:0a:2b:e3:73:
                    24:a0:e1:fc:b8:71:42:b1:8f:95:39:39:42:5b:3b:
                    91:0c:7b:20:d9:a8:f3:ff:88:2d:10:72:c1:05:ec:
                    53:06:7f:6d:e2:e1:5c:96:eb:de:f1:20:8c:4b:a3:
                    b3:74:48:e2:3f:ec:cf:66:6a:4e:b3:3e:b6:2f:f1:
                    cc:78:2c:ad:7c:4e:a8:f0:bd:b1:bb:74:59:9f:16:
                    32:26:54:bb:4a:21:d9:78:72:1a:60:75:00:fd:80:
                    85:29:dd:28:67:bb:94:41:97:89:eb:08:62:0d:c1:
                    09:84:64:bd:9a:82:7e:ab:42:f1:01:20:5f:ca:60:
                    67:00:1d:f0:f9:84:b3:fb:74:bd:1e:4a:53:9b:27:
                    d0:27:f0:22:f7:3a:39:e8:ce:f3:06:5e:52:f6:24:
                    bc:52:fb:5e:be:4d:3c:fc:53:2b:83:99:f1:57:16:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:5D:90:69:A1:8D:0C:C9:63:00:A3:AE:59:73:40:C9:7D:27:18
            X509v3 Authority Key Identifier:
                keyid:04:D3:C5:DE:9F:F3:CC:E1:31:C8:BF:CD:CC:E3:33:94:7D:92:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNPF3p_zzOExyL_NzOMzlH2SY14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2607fb-6b84-456e-aa09-9d8bc8115f68/1/BNPF3p_zzOExyL_NzOMzlH2SY14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:a1:f1:db:04:4e:10:31:38:07:f1:5e:fa:5d:94:db:9b:11:
         7a:26:2b:c8:6a:49:ad:74:7a:1b:86:3a:c7:b1:a7:bc:16:a2:
         14:fa:cd:32:c2:dc:0f:70:38:ab:7f:ff:c5:13:6d:f4:e3:bd:
         f0:24:27:b5:1e:80:6a:48:c2:ca:87:35:ad:fd:b9:d8:59:bd:
         b2:ff:e6:30:ec:c4:27:7b:c1:75:6c:f0:5e:bb:3c:0a:8b:ce:
         f8:d2:be:ac:91:74:c1:c8:5f:8a:57:3a:b4:ad:b6:e4:09:5f:
         43:0c:68:c8:c4:a4:c4:cc:58:d0:91:76:d0:d9:8d:cc:97:8f:
         75:4f:f7:5f:ee:1e:f0:ab:5e:10:cd:ef:54:d6:f8:59:7a:21:
         3e:5a:a3:39:49:29:8c:85:3e:b0:94:b2:68:73:81:d6:ca:6f:
         65:6a:d0:f8:31:65:76:dd:c7:83:bb:3c:5d:25:67:2d:f0:b6:
         33:b6:30:95:ab:03:00:2d:3b:12:46:06:6a:e9:3b:d6:2e:77:
         97:a1:e7:3b:b1:03:ca:85:41:4b:75:04:6d:df:7e:09:19:30:
         d0:ac:6f:01:5c:6e:31:60:d1:da:dd:1a:92:58:9e:44:4b:a0:
         da:21:5f:34:3d:5b:83:1d:8b:c6:c2:5d:5d:46:f2:f2:10:62:
         cf:8e:eb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:08:14 2025 by rpki-client