Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File:                     biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier:          ONjXGAWTkPB+D8Y9WkGJbkSR3x6TCdt2POL9iYUm/1I=
Subject key identifier:   0C:19:7F:DE:AE:09:59:A1:7B:6C:2E:25:34:FE:20:A6:C7:9A:6B:DE
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer:       /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial:       019A4E1917D774E8B200DC3560422F26485B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number:          08C6
Signing time:             Tue 04 Nov 2025 09:00:58 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:58 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:58 +0000
Files and hashes:         1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: PuLeLvkme9mRPG4P5TUHSMbA7YuFrwx53Db9trdtCzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:19:17:d7:74:e8:b2:00:dc:35:60:42:2f:26:48:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
        Validity
            Not Before: Nov  4 09:00:58 2025 GMT
            Not After : Nov  5 09:00:58 2025 GMT
        Subject: CN=0c197fdeae0959a17b6c2e2534fe20a6c79a6bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ed:7d:be:87:7c:23:00:94:e9:26:19:c7:70:
                    ab:fc:26:99:45:2f:b0:58:ff:1d:31:0a:8d:d2:bb:
                    70:2f:5f:15:b2:39:a0:81:68:49:86:04:c6:f9:81:
                    fb:49:28:b0:ac:8d:0e:6b:bc:ab:e8:dd:8a:50:16:
                    a7:99:eb:02:60:c6:ed:58:79:ab:be:b3:4b:25:bb:
                    a2:6b:aa:d7:77:7b:c7:a9:82:a5:59:e3:4d:63:ca:
                    83:83:8d:30:31:d3:e6:c1:2f:03:90:42:8c:1d:4f:
                    e4:c9:89:a9:2b:6c:30:a1:3a:1d:b7:67:2c:bd:21:
                    04:99:f7:89:65:0f:8c:f5:b9:1c:89:41:87:90:0f:
                    c7:a6:a4:20:b6:0f:2a:2e:11:16:d0:ab:74:83:53:
                    f5:c1:f6:66:e6:25:01:10:25:44:e1:c6:16:d9:e0:
                    b3:b2:0d:1a:e3:a1:69:9d:62:fe:af:ee:41:f4:33:
                    b4:f6:75:ec:2d:77:80:2f:ec:f1:36:c3:58:d2:49:
                    b0:bf:be:f9:93:e0:2e:ad:26:d0:01:73:6c:b4:05:
                    db:b6:5d:6d:79:e0:6d:7e:b2:a8:d1:28:e9:ea:7d:
                    91:07:de:dd:75:f5:9f:3a:2c:15:54:89:91:e1:1b:
                    24:60:02:93:9a:11:81:41:2e:9b:e3:a4:58:b9:a9:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:19:7F:DE:AE:09:59:A1:7B:6C:2E:25:34:FE:20:A6:C7:9A:6B:DE
            X509v3 Authority Key Identifier:
                keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:18:b7:5c:a5:bf:8f:7d:d0:ce:e6:d4:c7:11:38:1f:b1:be:
         01:95:60:3d:35:e8:4b:69:65:83:0f:9e:3c:7c:d9:a4:84:f0:
         09:02:33:b5:e0:aa:43:19:1b:7b:b7:14:e8:cd:08:af:03:e7:
         46:df:31:01:81:b5:53:dd:de:42:34:5c:96:06:76:c0:ef:94:
         e7:b1:1c:12:85:43:bb:1b:ee:6e:ef:fe:54:97:b5:a7:70:d0:
         ce:40:38:bc:bc:b6:96:bc:22:b3:21:7f:4f:17:62:4d:41:b3:
         8b:2c:1d:51:30:33:f2:07:f3:a1:cf:0c:3b:e9:bf:d1:00:87:
         52:9b:de:4d:e5:c0:40:e7:01:4e:96:92:32:98:12:1f:1a:3b:
         d9:62:c6:e5:cd:15:88:84:af:99:e8:70:5e:2b:7d:38:f8:e8:
         2b:9a:9b:54:96:6f:ad:ae:9d:bc:7f:c4:62:be:7c:5c:eb:48:
         9c:92:c5:04:db:f2:20:eb:9f:4e:02:a7:b0:d1:43:b3:d7:3c:
         bb:8e:1a:b2:c3:15:e1:c1:80:a7:ef:3d:b7:a3:79:64:32:09:
         e3:d8:11:68:e4:ec:cc:ed:fe:3d:c6:54:ca:21:7a:72:5b:76:
         f1:b7:68:5e:cd:0a:1d:5f:ff:26:37:61:a5:bf:59:63:ab:37:
         be:14:32:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGRfXdOiyANw1YEIvJkhbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMmMzZTFjZDNiODU0ZDY2ZWY0NmM1Njc3ZWY3MmQyYzVh
MzY2OTcwHhcNMjUxMTA0MDkwMDU4WhcNMjUxMTA1MDkwMDU4WjAzMTEwLwYDVQQD
EygwYzE5N2ZkZWFlMDk1OWExN2I2YzJlMjUzNGZlMjBhNmM3OWE2YmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+19vod8IwCU6SYZx3Cr/CaZRS+w
WP8dMQqN0rtwL18VsjmggWhJhgTG+YH7SSiwrI0Oa7yr6N2KUBanmesCYMbtWHmr
vrNLJbuia6rXd3vHqYKlWeNNY8qDg40wMdPmwS8DkEKMHU/kyYmpK2wwoTodt2cs
vSEEmfeJZQ+M9bkciUGHkA/HpqQgtg8qLhEW0Kt0g1P1wfZm5iUBECVE4cYW2eCz
sg0a46FpnWL+r+5B9DO09nXsLXeAL+zxNsNY0kmwv775k+AurSbQAXNstAXbtl1t
eeBtfrKo0Sjp6n2RB97ddfWfOiwVVImR4RskYAKTmhGBQS6b46RYuamiXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwZf96uCVmhe2wuJTT+IKbHmmveMB8GA1UdIwQY
MBaAFG4sPhzTuFTWbvRsVnfvctLFo2aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yNTkwZmItYjA1ZS00NDQxLWFkZDEt
ZjgzNTViNzhkYjI0LzEvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yNTkwZmItYjA1ZS00NDQxLWFkZDEtZjgzNTViNzhkYjI0
LzEvYml3LUhOTzRWTlp1OUd4V2QtOXkwc1dqWnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBi3XKW/
j33QzubUxxE4H7G+AZVgPTXoS2llgw+ePHzZpITwCQIzteCqQxkbe7cU6M0IrwPn
Rt8xAYG1U93eQjRclgZ2wO+U57EcEoVDuxvubu/+VJe1p3DQzkA4vLy2lrwisyF/
TxdiTUGziywdUTAz8gfzoc8MO+m/0QCHUpveTeXAQOcBTpaSMpgSHxo72WLG5c0V
iISvmehwXit9OPjoK5qbVJZvra6dvH/EYr58XOtInJLFBNvyIOufTgKnsNFDs9c8
u44assMV4cGAp+89t6N5ZDIJ49gRaOTszO3+PcZUyiF6clt28bdoXs0KHV//Jjdh
pb9ZY6s3vhQyBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:24 2025 by rpki-client