
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          VqkbLzcpPzgC4TnQYZXi0kY6nZ7nhv1vsXMlthmUTa8=
Subject key identifier:   83:A6:2E:83:89:A5:2B:58:AD:1E:0F:30:9E:8F:E0:66:FE:23:21:11
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       019A4E4F3A7BAE592E9A94A6F20175AAFE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0F21
Signing time:             Tue 04 Nov 2025 10:00:06 +0000
Manifest this update:     Tue 04 Nov 2025 10:00:06 +0000
Manifest next update:     Wed 05 Nov 2025 10:00:06 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: C85AD8Sk09ISFqcjYCOr+cbqpnvOlvIknSemDZqgJ+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:4f:3a:7b:ae:59:2e:9a:94:a6:f2:01:75:aa:fe:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Nov  4 10:00:06 2025 GMT
            Not After : Nov  5 10:00:06 2025 GMT
        Subject: CN=83a62e8389a52b58ad1e0f309e8fe066fe232111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cf:d7:16:19:84:dd:89:ad:83:4b:e7:45:87:
                    91:51:0f:ef:8b:6c:6a:9c:d6:d7:a5:6b:ef:04:2f:
                    35:85:66:fb:76:f2:5a:18:0d:b1:7a:71:3a:38:83:
                    5c:c1:ce:db:9f:c7:f2:10:a8:84:0b:3c:5a:eb:dd:
                    0c:a0:ba:46:f8:6a:53:8c:c7:26:3d:a6:70:ff:2d:
                    d7:bd:86:0c:f4:23:c1:e0:1c:86:0f:5b:13:ec:74:
                    f2:29:13:ef:1d:79:e4:2d:63:f5:35:5f:aa:f9:c6:
                    97:8b:2d:32:bf:5a:3b:b6:0b:fa:4f:10:95:0c:a1:
                    16:4c:48:36:8c:4d:d0:87:31:38:a3:4b:93:df:25:
                    62:8b:4f:3e:80:94:d6:61:4b:34:d0:7b:e2:f7:47:
                    85:02:cb:c7:d2:ab:4d:77:bc:77:1e:49:41:94:6b:
                    e9:c5:b6:e0:85:92:87:78:d9:b1:25:87:18:a4:98:
                    0a:ea:ca:5e:45:3a:b0:cd:61:05:a3:57:f1:ad:4d:
                    64:e7:7c:d4:95:97:66:c2:23:e7:90:2f:d6:df:ba:
                    ee:ff:cd:78:77:a4:35:08:e1:5d:3c:de:a8:b1:b9:
                    69:e0:a9:3b:5b:fc:e8:24:3d:ff:d9:34:b9:65:92:
                    a4:05:2c:8a:65:b4:a0:89:9d:9b:87:e5:e3:04:59:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A6:2E:83:89:A5:2B:58:AD:1E:0F:30:9E:8F:E0:66:FE:23:21:11
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         47:93:17:6a:c8:9b:66:51:e0:6c:3e:03:1d:28:72:61:df:cb:
         e2:39:77:e0:0b:19:db:4d:28:05:b0:1d:8f:33:7b:f6:31:1f:
         9c:8d:22:5c:b2:aa:f8:35:56:ae:50:b9:cd:b7:38:61:d1:14:
         c4:b4:a2:cd:a2:47:48:25:ba:7d:1c:b2:96:b0:36:c1:fa:36:
         f9:f1:a5:c0:78:eb:16:15:ae:70:de:e5:c4:cf:14:24:e7:9a:
         aa:fe:02:41:47:51:4c:46:8b:c0:5f:b7:24:9e:30:4a:38:66:
         ab:7c:f8:e6:ff:d2:a1:d3:86:ec:ec:85:b4:b1:88:43:52:42:
         c8:02:b0:c8:b3:83:2a:75:ea:fe:82:61:5f:90:7f:1d:cb:f4:
         06:f3:9b:ba:f4:03:2e:2e:7e:b3:59:07:e3:5c:04:15:8a:4f:
         d9:a9:d6:98:33:b9:19:52:b7:e6:cb:37:6d:e3:d3:98:06:66:
         de:5c:a8:a3:c3:40:42:84:71:8f:a6:da:4a:7e:56:a9:68:cb:
         1f:4e:ba:9d:42:d4:be:c9:74:e0:d5:f1:32:89:bd:f7:d5:78:
         9a:79:bc:98:fd:47:61:eb:83:74:73:d6:cf:78:de:9c:4f:d2:
         7c:70:3e:42:d8:69:42:f7:d1:b3:59:66:5d:37:b3:9c:a1:a5:
         2b:ce:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:23:32 2025 by rpki-client