Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File:                     bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier:          1BYltNDTcRPjM8lTYjGPN2P5nePElupD6O/YO8ksudA=
Subject key identifier:   4F:19:18:88:64:1F:76:ED:B1:70:93:4C:89:38:46:AB:7A:8F:3C:22
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer:       /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial:       019A50E3F0A10D95F5436CE36B8ACCF3812E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number:          0DA7
Signing time:             Tue 04 Nov 2025 22:01:46 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:46 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:46 +0000
Files and hashes:         1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
                          2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: vYHKK+bweOnmQwOi+MP/6uX7aIZioazYsV9O4FXRhDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:f0:a1:0d:95:f5:43:6c:e3:6b:8a:cc:f3:81:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
        Validity
            Not Before: Nov  4 22:01:46 2025 GMT
            Not After : Nov  5 22:01:46 2025 GMT
        Subject: CN=4f191888641f76edb170934c893846ab7a8f3c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0c:42:d5:f6:62:0f:3c:ad:5c:96:fb:3c:3d:
                    92:f4:35:6a:e6:d6:e7:fa:0f:fd:71:ee:d4:26:89:
                    f7:6f:9c:62:8b:bc:4e:35:3b:2f:b3:f5:d0:7e:cf:
                    bb:f7:26:9f:5a:08:c3:99:03:4e:c7:b5:59:45:cd:
                    5a:b5:f7:2e:1b:12:38:63:54:34:4e:6c:ee:f2:ca:
                    5a:26:8a:96:9c:66:64:21:1b:29:52:92:63:3e:3f:
                    f2:99:7c:2b:60:47:76:21:d9:29:d0:60:c5:f3:d6:
                    8f:69:0e:00:47:d5:24:2a:d5:3d:b5:02:c0:02:8f:
                    80:32:3f:a8:5a:c4:4d:cd:08:f5:fb:53:c2:23:a8:
                    b0:1c:72:ef:2b:76:b6:9f:f1:08:43:57:45:99:c8:
                    57:5a:42:40:dd:40:f0:1e:fd:18:b0:12:7a:36:30:
                    23:4f:24:ba:5b:52:61:f3:4a:7b:3f:7d:33:f3:3c:
                    58:b0:e2:c3:08:76:a2:cb:df:7a:7b:b7:11:e0:7f:
                    89:eb:44:39:01:9a:ee:5a:a7:76:22:2a:11:54:e1:
                    5d:2a:5d:de:c0:f4:03:5a:a4:1c:b9:a1:0b:0b:41:
                    c9:03:58:4b:bc:8b:94:b2:65:39:94:33:24:58:57:
                    fe:08:7e:53:46:44:cf:f4:0c:c1:31:3e:f3:56:19:
                    cc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:19:18:88:64:1F:76:ED:B1:70:93:4C:89:38:46:AB:7A:8F:3C:22
            X509v3 Authority Key Identifier:
                keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:26:84:68:ee:ca:f2:8e:0f:6b:4f:28:5f:92:67:72:3f:25:
         c9:1e:a9:30:37:7e:0a:1b:07:87:45:0e:6a:83:e9:27:6f:60:
         73:ca:fc:b9:28:11:3a:6d:c0:b9:24:39:ba:03:30:41:48:77:
         44:b4:56:af:da:47:bc:0f:03:91:30:f8:4e:a8:0d:92:77:cc:
         f8:7f:ba:ba:7f:7e:0e:e0:b4:3a:38:7d:85:78:09:f1:0b:98:
         9c:49:68:ab:da:83:37:b9:f3:74:de:15:cd:35:dc:71:01:1e:
         56:2f:d4:cd:f7:7b:23:2b:33:5c:98:36:81:7f:de:bd:95:2a:
         0b:b9:c5:30:4f:42:7f:48:c8:b7:f6:e3:90:7b:b7:99:cc:ac:
         6e:93:5a:67:82:06:cf:a7:24:c3:aa:33:4d:b1:ba:20:4d:59:
         88:f0:85:73:18:a2:83:f8:b2:50:72:83:3c:1a:d6:dc:87:63:
         25:71:ce:96:72:9c:c5:4d:b2:e1:3c:66:5f:28:36:3d:8d:ef:
         88:0a:74:16:28:a1:14:4e:b8:c9:74:24:fd:37:56:ca:af:94:
         bf:6a:59:2c:e0:d0:b8:ae:b7:83:42:3a:e5:b9:32:8f:a5:18:
         d6:d6:14:c3:aa:c5:c9:04:bb:e3:a6:52:3d:4b:a6:f8:09:31:
         d2:38:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:31:22 2025 by rpki-client