Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File:                     BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier:          DVniHU8Irrhi7tLXLmZLko/XwYxhaEEQHSDyOp3AgwI=
Subject key identifier:   BB:8F:E4:2D:CE:6E:49:67:12:BA:B3:DF:EA:3E:7F:0B:13:7D:1E:F4
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer:       /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial:       019A5150DABC01AFDBFA8A277D5E1A25EACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number:          0206
Signing time:             Wed 05 Nov 2025 00:00:44 +0000
Manifest this update:     Wed 05 Nov 2025 00:00:44 +0000
Manifest next update:     Thu 06 Nov 2025 00:00:44 +0000
Files and hashes:         1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: nWzMgf6gBVvJRfikF33vni+Hb2YddEZfj0Aoc9Wdkvs=)
                          2: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=)
                          3: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=)
                          4: jmGzc4FW1R6PAQNH4WxlC9OKi34.roa (hash: q2c49YbHCp9droshhYthNjwqMciPkn/uk7InBbQTyJo=)
                          5: lf7VZmq2rsBXJedCujxEgR3JSRw.roa (hash: i4ihoqVdnAGdUVkmGd9SoSzj6rV5e9gZRKeKMlY+OMU=)
                          6: ru7w0W3lQckov7VLXi2IdFlGxc8.roa (hash: vKg9HC/GY7EtcTEA0K5g2y1Kwk8jYnfJyEo6IYPl+Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:50:da:bc:01:af:db:fa:8a:27:7d:5e:1a:25:ea:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
        Validity
            Not Before: Nov  5 00:00:44 2025 GMT
            Not After : Nov  6 00:00:44 2025 GMT
        Subject: CN=bb8fe42dce6e496712bab3dfea3e7f0b137d1ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:ee:db:12:98:a9:0e:98:33:64:29:20:86:
                    48:61:a5:be:13:46:ee:3a:4d:65:10:d6:46:d8:81:
                    f7:3b:74:e3:a7:d5:bf:47:24:85:46:32:03:24:18:
                    78:2f:7f:a1:b6:6d:a4:1f:00:d6:c9:c8:ae:15:9f:
                    16:b4:6e:73:6a:d4:42:59:9c:ed:9f:94:74:ca:61:
                    52:ce:82:3e:f7:2a:83:e7:e7:25:c9:13:73:83:73:
                    52:44:a5:d1:bc:e3:6a:cc:f5:d0:d5:2f:c2:73:5a:
                    15:35:af:7b:db:ab:fd:1a:e8:92:30:0c:83:7b:05:
                    5b:3b:45:83:6b:b3:58:71:5b:9d:ce:b5:10:14:e3:
                    ee:de:9b:be:e2:33:3c:5f:5c:5b:f9:7b:37:82:6d:
                    c5:7e:28:34:7d:1b:4e:6c:fe:5c:40:f7:cf:1e:ec:
                    d0:9e:e2:2c:de:86:bb:e2:11:70:d0:6d:63:91:c8:
                    19:9d:40:2f:9f:40:77:3b:81:25:d2:d7:9f:da:51:
                    0c:2b:b5:b6:86:01:12:a9:5a:c2:4c:30:78:76:56:
                    5c:43:98:39:3f:1f:ba:57:82:4a:c3:12:f5:d5:bf:
                    09:d8:ad:39:7b:18:fb:4a:c7:a5:1f:e0:a2:4d:6e:
                    bc:3c:5d:61:69:a3:e7:97:b6:86:a7:3c:ed:63:73:
                    8e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8F:E4:2D:CE:6E:49:67:12:BA:B3:DF:EA:3E:7F:0B:13:7D:1E:F4
            X509v3 Authority Key Identifier:
                keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:ab:da:9d:a0:f9:35:d1:6d:ee:e9:89:d1:cb:33:d1:dc:
         dc:5f:eb:4a:78:87:9c:a1:2a:c9:af:8a:27:1f:a7:6f:af:33:
         5f:68:d7:c6:25:1a:10:ee:86:9a:a8:fb:c3:61:98:c7:ff:7c:
         2f:9a:11:cb:6d:24:a2:03:2b:f2:60:17:77:0d:fa:f5:fc:3e:
         ff:ff:2f:26:94:8a:de:e5:4d:dc:8e:2d:39:9b:33:5f:b4:f0:
         b4:9d:f1:13:98:02:e3:7e:a9:80:47:c5:da:30:f8:b2:db:bc:
         77:17:ba:32:c8:02:27:67:bb:b2:ef:66:67:a7:d0:a4:61:74:
         f6:36:e4:f6:83:1c:a9:5a:fe:f7:42:05:7a:b1:20:fd:cb:bf:
         57:be:ab:86:44:b4:bc:3f:10:93:b1:ab:8a:ff:56:3b:f2:31:
         f9:42:c5:9c:35:36:10:5c:d3:89:6b:b1:b4:c2:ad:92:af:f6:
         4f:4c:a1:ee:59:d3:95:db:21:fc:cf:41:51:39:a3:20:5d:77:
         c2:da:12:81:43:89:94:04:d2:3e:bd:6c:6c:1f:86:a1:b9:2e:
         b6:bf:e2:c8:e7:bb:00:d7:3f:bf:fc:d4:7c:3f:f3:28:d4:9d:
         60:b2:20:aa:f0:62:60:2d:d2:9a:94:6f:d7:da:bc:e1:e7:30:
         c9:0e:bf:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:16:52 2025 by rpki-client