
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
File:                     BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft (raw, json)
Hash identifier:          1aDPOGfHnl/pL2S5O1zNllV4d6lVd39ywtKasGxsO+I=
Subject key identifier:   4E:84:99:9D:E9:EB:9E:9E:32:9C:D7:37:F6:B1:C8:31:A4:C3:3E:10
Authority key identifier: 05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
Certificate issuer:       /CN=0533048d6ff424bf19215771cf257bc15b67ee15
Certificate serial:       019A4E18E0ED840968EB491F1C6E48761F0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
Manifest number:          0A2F
Signing time:             Tue 04 Nov 2025 09:00:44 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:44 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:44 +0000
Files and hashes:         1: BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl (hash: mf6ypWM86sETPgg7qoAJMirTDLKtPfjAtODkWg5O5t8=)
                          2: oSc9TDaxZAgpBUL0U_QOqXe1iIQ.roa (hash: eRGT3we8piuEWhQIjqoI4A2ShRxv7LWNOl9KqCnYlOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:e0:ed:84:09:68:eb:49:1f:1c:6e:48:76:1f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0533048d6ff424bf19215771cf257bc15b67ee15
        Validity
            Not Before: Nov  4 09:00:44 2025 GMT
            Not After : Nov  5 09:00:44 2025 GMT
        Subject: CN=4e84999de9eb9e9e329cd737f6b1c831a4c33e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a9:cf:cb:66:78:e5:c1:f1:8c:6c:95:53:86:
                    b1:a1:4e:81:08:34:45:9b:12:ab:96:71:89:59:90:
                    99:62:41:63:f0:68:35:64:0a:43:5d:aa:3f:a6:0f:
                    e8:a1:35:24:fb:56:3f:c5:74:1f:7d:21:63:91:6b:
                    03:1f:d6:d9:7a:b2:7b:ec:8c:87:36:68:75:94:ee:
                    e2:7a:ad:b9:41:b4:23:bc:b4:81:34:21:e7:ff:d6:
                    95:6e:ef:ab:55:54:3f:82:49:01:4f:fc:14:42:c6:
                    c3:70:b5:a2:06:c9:4f:12:36:93:3f:27:0f:c2:ef:
                    ce:69:1d:ef:ab:fb:84:19:1c:19:a5:a3:50:94:dd:
                    46:7a:33:e4:0c:c0:8e:0d:e5:33:17:1d:db:47:a6:
                    fc:1c:a7:6c:87:62:9e:4d:25:18:60:9f:a1:e2:0d:
                    30:89:3d:00:18:a0:bf:6e:ee:84:53:76:f2:f9:61:
                    be:e4:5f:d2:b5:60:19:97:9f:af:d0:01:97:b4:ff:
                    2e:05:0c:df:04:c9:c7:32:09:ac:b1:18:3c:e1:18:
                    18:e6:4a:85:28:ad:63:62:9e:96:21:6c:e4:98:63:
                    da:d7:b9:a8:76:ac:8e:51:8f:1f:c1:86:c1:39:22:
                    ca:0f:1c:f0:90:f8:1f:40:a7:85:16:d2:d6:66:f1:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:84:99:9D:E9:EB:9E:9E:32:9C:D7:37:F6:B1:C8:31:A4:C3:3E:10
            X509v3 Authority Key Identifier:
                keyid:05:33:04:8D:6F:F4:24:BF:19:21:57:71:CF:25:7B:C1:5B:67:EE:15
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3e4899-aacc-4efd-93df-a61a98359c4a/1/BTMEjW_0JL8ZIVdxzyV7wVtn7hU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         2b:ae:2a:7d:2f:81:9f:f0:61:4b:33:e4:3e:90:78:37:f0:e8:
         e6:b5:ef:cd:b3:66:73:c8:4c:90:cd:51:db:33:c9:6c:a7:2f:
         45:85:6f:3b:66:e3:c8:e6:9a:95:31:0c:e1:80:e1:c7:e3:45:
         02:35:34:15:f5:77:9b:0f:f1:63:98:bd:f0:20:b7:ff:e9:50:
         11:c2:bf:55:a2:fd:a2:16:8f:ee:20:80:a1:cd:9d:da:ce:58:
         ce:08:ca:30:77:f0:27:60:64:62:38:e8:17:14:d3:1b:29:58:
         98:b3:1f:d4:35:49:da:77:2a:49:7d:be:9c:f3:80:06:45:fd:
         50:a4:94:c0:e8:14:49:a4:30:ce:5f:30:95:6e:aa:d7:f5:1d:
         e4:c4:40:de:92:8b:88:f8:af:f1:81:6b:f0:25:8e:0d:16:8d:
         6a:aa:ef:d5:5a:8d:bd:ed:83:75:c3:88:64:29:45:27:d3:01:
         3a:cb:b2:46:32:fc:bf:05:d1:94:4a:ae:93:2a:a7:c3:e6:8a:
         b7:b4:50:cf:9a:de:48:b8:77:c3:9b:81:9c:d7:17:c2:21:26:
         1e:df:15:46:1e:fb:1e:41:7d:11:c8:09:ad:e8:34:6b:21:cd:
         22:a4:a9:91:91:21:c5:a3:7a:07:10:9a:fb:60:cd:62:cc:6e:
         99:13:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:46:30 2025 by rpki-client