Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
File:                     BvkuaDHfHy681dXrDlmZxbBHXFE.mft (raw, json)
Hash identifier:          46wA7jx/7IXrDrmSotBwaLEgAkYK5VYwinieqe2EQCU=
Subject key identifier:   43:39:1A:A6:26:2D:39:E9:1F:3B:30:78:9A:04:9B:38:4C:AC:EE:E8
Authority key identifier: 06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51
Certificate issuer:       /CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
Certificate serial:       019A4F622059AC6A876F686127F9C15C3D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
Manifest number:          0D79
Signing time:             Tue 04 Nov 2025 15:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:22 +0000
Files and hashes:         1: ABHkV05s8th27UlOQfZqHpvCN9M.roa (hash: W21GRUIPND/bYNl8U/r+S01S2Z9vywL8FOAp0ejiALY=)
                          2: BvkuaDHfHy681dXrDlmZxbBHXFE.crl (hash: 9YgYE0Ug6NXnRg7BrE7G/RRa1LwFgNYkX5mOWi3Yf+U=)
                          3: GVZUC0rsnJQ_sIBtkI8ZsdyoWyk.roa (hash: X6+WjYU4u92P6QuF2cfdvTIGyt+YNPourgL+oCE8uTI=)
                          4: LLltM-NzTNKgxqwZ9NE7KyNLRfU.roa (hash: 62y8p/Y8rE/XeGWy9+O3o9ixoxKXX+jz7XcY73z+2J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:20:59:ac:6a:87:6f:68:61:27:f9:c1:5c:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06f92e6831df1f2ebcd5d5eb0e5999c5b0475c51
        Validity
            Not Before: Nov  4 15:00:22 2025 GMT
            Not After : Nov  5 15:00:22 2025 GMT
        Subject: CN=43391aa6262d39e91f3b30789a049b384caceee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:3e:cf:63:a1:d4:23:e6:42:87:15:4d:c7:
                    c9:7e:f7:eb:90:06:40:99:2f:82:8c:0f:d4:db:a6:
                    cb:35:31:a7:ca:bd:08:f0:71:8a:27:cc:7c:0e:30:
                    1e:15:e7:7b:46:f5:e1:a5:5a:c4:bc:2b:2d:5c:84:
                    9a:a8:36:ec:cf:68:c7:7d:86:66:ce:c1:05:5e:f4:
                    f9:d9:0c:73:43:52:28:c8:09:d2:c5:a2:46:3f:52:
                    cd:34:c2:a7:36:ce:31:07:0d:a7:18:ec:b1:5e:81:
                    ef:2d:ce:0d:2a:b4:9f:72:1e:16:7f:58:f7:ca:b8:
                    15:30:cf:80:df:8f:5e:2b:bb:73:b0:b2:a1:8a:a4:
                    f8:43:21:dc:4b:64:fa:17:af:80:ae:5a:b6:05:8b:
                    97:65:c6:f1:08:33:09:1a:29:e6:71:16:c1:48:86:
                    18:12:a5:89:ec:b7:d5:b6:14:85:ee:b7:15:21:93:
                    f7:23:cc:bc:bb:9a:a5:6e:f1:4e:c3:cb:7b:fa:b6:
                    0e:79:47:db:3d:ad:ce:5a:97:1f:96:76:59:e5:ef:
                    1d:a7:20:15:bb:c0:05:e0:f5:e3:c9:fa:a7:53:89:
                    a4:4d:ec:96:86:36:79:fa:37:50:5e:e6:53:58:45:
                    a5:3e:1d:c1:fd:bb:12:88:fa:82:23:12:6a:ee:8f:
                    f6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:39:1A:A6:26:2D:39:E9:1F:3B:30:78:9A:04:9B:38:4C:AC:EE:E8
            X509v3 Authority Key Identifier:
                keyid:06:F9:2E:68:31:DF:1F:2E:BC:D5:D5:EB:0E:59:99:C5:B0:47:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BvkuaDHfHy681dXrDlmZxbBHXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8d0bcf-6f35-4d79-884a-502b77ce92f8/1/BvkuaDHfHy681dXrDlmZxbBHXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e1:12:14:4b:9c:e0:38:03:94:74:04:94:9a:d3:03:f6:46:
         ab:b6:e0:cc:3a:21:7e:54:74:01:9d:6c:1d:a0:4e:f5:d7:f4:
         d0:35:7a:8d:a2:9e:e3:27:68:fc:cc:8c:2a:05:1c:23:cc:c6:
         ae:08:80:7e:b2:ab:63:56:c7:ba:ec:34:21:40:6f:bb:f4:80:
         a1:ee:0c:aa:59:21:b7:8e:0c:42:34:57:5f:1b:51:53:3a:29:
         72:72:85:f4:6d:98:8f:69:30:2a:2b:56:d1:1f:c8:07:43:7a:
         b5:48:d9:82:92:9e:93:3a:97:d1:16:73:66:01:16:51:ca:82:
         e2:4f:e2:5b:8e:28:a6:51:82:c5:53:82:74:71:3e:76:fe:35:
         bf:cd:fa:3f:8d:7d:f4:52:55:1d:ca:9c:92:b7:5d:f7:30:34:
         ed:3d:e4:a2:d7:0c:fb:ad:7d:4f:5f:16:a8:dd:c3:1d:f7:94:
         50:24:69:c0:1f:92:83:79:35:19:d6:98:46:10:0b:2b:87:4f:
         14:46:5a:1e:bd:fc:3e:dd:56:11:67:38:90:17:f3:62:1b:36:
         a9:2a:6d:46:5a:e5:1c:e5:e1:6e:21:20:d5:a0:7e:cf:04:7f:
         29:20:eb:48:bf:95:a5:36:c5:36:fe:ce:e9:c7:45:9f:8f:f8:
         c4:90:7b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:55 2025 by rpki-client