Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          1cYtiNVfKSFZNhpeik3ckm47awXitYgC76FF4opVQLA=
Subject key identifier:   19:EE:01:C4:44:AF:1F:13:47:57:35:FF:F6:9C:55:1F:11:BC:63:5E
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       019A51197DD6B9A197FFDA76E620C8A29BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          1143
Signing time:             Tue 04 Nov 2025 23:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 23:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 23:00:16 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: BRjI3rntp8kNVUoqdcX1gVcsa3s.roa (hash: 9K9z/V0wnUu7Q7Yzvu1Tua+t84AA3XUIBJefCQfKeAU=)
                          3: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: 8W4Asy0hL9Utgsl+AdVUgAp9BEVdTOtJXiWyxalHmUM=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:19:7d:d6:b9:a1:97:ff:da:76:e6:20:c8:a2:9b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Nov  4 23:00:16 2025 GMT
            Not After : Nov  5 23:00:16 2025 GMT
        Subject: CN=19ee01c444af1f13475735fff69c551f11bc635e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8a:59:aa:3e:0d:99:4c:20:e6:5e:4e:b2:80:
                    78:e4:fb:c6:ab:41:a1:de:48:fd:41:24:fa:93:7a:
                    4f:0f:7b:e6:b8:55:64:ee:40:ed:83:2e:56:f4:8f:
                    58:d6:a8:00:2e:a8:e9:7c:1f:8c:ec:91:94:e5:57:
                    86:16:9c:14:fa:ee:c9:4f:16:8c:95:43:4a:07:0c:
                    78:3b:19:8e:e2:c2:e5:ca:a5:9d:92:85:02:0d:25:
                    c3:ba:5c:bd:d8:cb:d3:b1:e8:a7:94:40:e2:1c:19:
                    47:ed:26:f0:af:16:61:2a:0d:3c:2e:b0:bf:72:56:
                    48:a4:fb:d9:97:c9:71:0a:fe:59:7e:70:28:84:ea:
                    23:b3:99:31:43:a7:ce:36:4b:7c:e8:bf:ac:88:6a:
                    c4:23:62:bc:ec:18:6d:66:0f:6b:98:b2:ac:80:63:
                    e4:11:d8:92:86:69:29:ac:15:c3:d6:89:52:e9:2f:
                    fe:78:cf:95:94:94:4e:3c:d6:c3:bd:43:0b:d1:50:
                    f6:82:f7:3a:4e:02:cd:30:08:30:cc:2d:f3:58:01:
                    c7:2d:a0:9c:6e:94:a5:96:08:cb:2d:eb:3e:da:22:
                    11:d7:bd:21:00:0b:b0:dc:1a:76:b0:24:95:49:ee:
                    53:7c:61:24:de:02:e6:c6:24:7e:ad:1f:59:12:00:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EE:01:C4:44:AF:1F:13:47:57:35:FF:F6:9C:55:1F:11:BC:63:5E
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:0e:ed:4a:cf:0e:34:29:41:9d:fa:5d:49:72:51:5e:f8:
         b1:53:55:a2:59:f3:cc:26:a8:40:1e:8e:4a:6c:7f:43:12:b0:
         89:f5:7f:f2:ea:26:48:07:78:d2:9a:9b:c3:07:3d:1e:1c:c2:
         9b:22:73:f0:ad:f7:05:78:4d:7f:98:27:b5:b2:1e:72:a6:6a:
         b9:b8:eb:bb:15:c8:f3:b6:41:09:83:2c:c4:49:86:5b:bf:3c:
         49:4a:2e:53:da:cc:d4:e0:3c:e8:08:6f:e9:d3:8b:dd:c1:b1:
         6d:c4:93:a0:a9:01:7c:e6:11:64:b3:3d:86:c7:e7:6b:e0:91:
         d0:53:83:e8:66:23:2b:e2:98:a7:39:89:76:ae:7e:eb:33:eb:
         54:b2:d1:30:d2:0a:63:d3:1a:dc:a5:5a:0c:43:dd:47:50:c6:
         d0:01:19:79:49:28:90:6b:09:02:f3:97:d9:d5:7c:57:49:49:
         e1:cc:e9:26:fb:88:35:19:17:d7:9d:c1:e4:9a:b7:27:57:a9:
         48:78:15:5f:9a:c1:9b:85:8e:14:22:50:4c:32:4a:41:08:d3:
         41:91:82:ce:48:65:ef:2b:96:f6:de:5a:e0:fd:fe:a6:26:ac:
         4c:ed:78:e2:3b:ca:0e:d7:4e:84:4a:9a:8e:3b:59:1c:e4:7f:
         58:82:d8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:38 2025 by rpki-client