Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          6wi0xsHdIiQoqhTQ1o42vE/wjhysq5hXNjYMcuGc4J0=
Subject key identifier:   79:6E:94:03:E9:15:A7:F5:10:EA:2B:DB:FB:2E:F6:0D:BE:CB:B6:93
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       019A51195E1DDA152981ECF3E0DF17DA3295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          1723
Signing time:             Tue 04 Nov 2025 23:00:08 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:08 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:08 +0000
Files and hashes:         1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
                          2: TtsJ_9irph6KMpr-0Unxq5mv0Pk.roa (hash: KdfI5XrAnT/kZVbthzfs9Tp5F0pVhQnXMy58T6F38qY=)
                          3: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: WN8CpzWCYyq1wf+B3dpybvH4CCw8EOFB3lPlU9viFQA=)
                          4: cVraBUUra2Aou2ZqOsBWw8nPl8I.roa (hash: 642iWL4+wWJYBDGiG624LzZO3fZuvIsSU+MyXY6PqjM=)
                          5: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:5e:1d:da:15:29:81:ec:f3:e0:df:17:da:32:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Nov  4 23:00:08 2025 GMT
            Not After : Nov  5 23:00:08 2025 GMT
        Subject: CN=796e9403e915a7f510ea2bdbfb2ef60dbecbb693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:68:3c:1f:c7:40:76:b3:34:34:3e:cb:53:2e:
                    c7:71:55:b3:b7:4d:16:f1:f8:15:0c:33:f8:68:5d:
                    50:9b:4f:d5:98:87:6b:87:d5:69:19:38:92:5a:25:
                    84:22:8b:d4:67:8f:fa:d8:36:a1:96:6e:43:72:3b:
                    d4:58:a7:a8:2f:9d:25:2f:71:a1:04:dd:2c:3d:86:
                    22:ce:96:fd:ec:52:ca:d5:74:3a:ce:31:f2:04:db:
                    b5:d6:f6:82:99:83:57:33:eb:ae:98:56:2b:73:39:
                    f5:fa:5d:71:50:9e:b9:28:fc:2c:f6:92:6b:d7:9c:
                    c9:15:fb:27:6b:ee:b2:cb:5c:a3:f2:4b:47:77:84:
                    09:93:22:c0:d2:eb:2d:d7:77:5b:3d:09:3f:76:71:
                    be:f8:33:76:33:f5:3c:fe:3a:40:ad:77:7e:fc:1f:
                    3f:2f:c9:c0:e9:1c:fa:cf:eb:fd:69:54:a7:0a:2d:
                    5c:2a:a0:98:93:71:a9:82:25:53:86:26:e6:cc:91:
                    8a:ea:87:92:4d:e9:b8:1c:3d:41:58:82:a2:a2:68:
                    8d:4f:db:fa:dd:03:ba:73:99:fa:8f:ae:22:81:46:
                    da:3e:02:ca:0b:dc:26:29:92:2f:dd:72:81:9b:f0:
                    ba:a7:35:25:12:5c:8c:d9:e7:80:a0:0e:f5:e0:95:
                    af:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:94:03:E9:15:A7:F5:10:EA:2B:DB:FB:2E:F6:0D:BE:CB:B6:93
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:0e:c0:d8:8b:e7:fa:ef:87:b7:8d:d5:e4:c0:08:ff:19:33:
         8e:d6:a8:32:cf:ce:f4:bf:9f:ff:d7:13:31:26:ab:3c:cf:01:
         47:9e:fb:93:85:7e:54:5f:ab:79:60:e0:4e:83:97:0e:06:20:
         87:0c:5a:17:ec:89:3a:40:e2:ec:3a:38:5c:ec:52:43:ac:7f:
         ec:2c:56:a8:04:80:f2:17:00:bc:a8:ee:eb:6c:a3:b5:e2:de:
         35:a9:ee:5c:ab:c2:cd:f4:37:a1:cd:3b:15:e0:75:cf:32:a0:
         b7:2b:bd:ab:39:68:2f:47:ee:b9:dc:cf:2e:42:4b:53:6a:d6:
         e8:d2:dc:c7:4c:08:fa:83:cc:b5:81:31:6c:2b:7e:5d:f6:15:
         fb:14:b2:ab:0e:a9:ca:04:07:c4:83:97:ba:a3:f3:1c:99:14:
         d1:b7:92:80:53:9a:f5:cb:eb:a6:b3:e5:4b:02:2a:19:6e:8d:
         c3:62:ae:d5:0e:12:28:ac:c1:81:78:53:56:62:2d:cb:2d:4f:
         af:20:2d:eb:b6:19:28:a7:09:fb:8d:84:16:ae:5f:21:61:ab:
         5c:d7:8b:4e:8b:b6:85:8d:bc:5d:0b:ef:ad:0e:e6:bd:92:f3:
         0a:55:8e:57:c8:e6:e6:58:35:82:5b:51:37:71:ca:fe:33:6f:
         75:d3:96:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:35:32 2025 by rpki-client