
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          +RwAcQkPWgSjXzFmRhdQIq6djkOHntOwtxFJz3n+N48=
Subject key identifier:   BA:AB:AC:37:65:7F:80:D3:9E:68:40:63:56:6A:67:7C:10:58:B2:6C
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019A4E18F31B0AA29AAE001B491DAB0D58E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          05EF
Signing time:             Tue 04 Nov 2025 09:00:49 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:49 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:49 +0000
Files and hashes:         1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: mde91rT+HnEZxYYSPGcbmPi2dewR+UTg5UJy9fR7RTc=)
                          3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=)
                          4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
                          5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
                          6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
                          7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:f3:1b:0a:a2:9a:ae:00:1b:49:1d:ab:0d:58:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Nov  4 09:00:49 2025 GMT
            Not After : Nov  5 09:00:49 2025 GMT
        Subject: CN=baabac37657f80d39e684063566a677c1058b26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cb:6d:ce:9d:c3:44:77:6f:7c:d5:9d:cf:29:
                    eb:a1:d0:f4:41:27:e0:93:68:eb:22:d9:60:9f:ba:
                    ac:45:24:8b:47:c2:f2:a9:4e:12:7a:78:01:c9:a4:
                    21:34:c6:92:49:ae:6b:1f:7a:8d:2a:a0:6b:68:59:
                    bc:3c:4e:6a:46:84:29:e7:71:dc:75:cc:12:aa:6e:
                    62:61:4a:fa:e7:0a:bc:68:06:13:0b:73:9f:b1:7e:
                    cf:9a:f6:40:4f:32:eb:8d:dc:70:3c:fe:15:01:de:
                    3f:1f:4d:66:9c:81:e2:4d:9e:3d:95:c1:44:76:b1:
                    46:bd:30:fd:fd:51:ad:22:ab:98:8f:ff:ec:c3:dc:
                    ea:44:fc:cd:96:9a:33:68:66:97:7c:27:90:b1:27:
                    09:5c:97:1b:8a:09:d5:1a:0e:7c:9b:5d:8a:b5:f7:
                    c5:e1:e1:59:cf:c8:3d:cc:46:b8:dc:f7:bd:c1:cb:
                    5a:e3:d9:8f:0a:20:c4:b8:39:c5:2a:c2:24:bb:9d:
                    f5:ea:e9:8c:d6:a2:53:55:18:8c:7e:6b:b2:af:3f:
                    5d:48:ef:63:7d:2b:23:85:f2:18:c6:21:b7:ab:b6:
                    2d:40:05:c0:a6:eb:5a:2a:bb:64:05:0e:30:7e:6a:
                    64:a2:fd:dd:d7:1e:63:d1:66:9d:8e:4b:f7:2c:16:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:AB:AC:37:65:7F:80:D3:9E:68:40:63:56:6A:67:7C:10:58:B2:6C
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         42:58:d6:d5:96:02:47:e7:fe:9f:c6:c4:36:bd:b5:1f:b5:c7:
         7e:f4:6c:2d:d1:6b:0e:00:88:58:ee:fc:12:c8:20:8c:42:94:
         f6:1b:86:f8:5f:d6:70:61:6e:ea:8c:a5:e0:21:1e:06:44:88:
         46:95:1b:2e:ce:a5:45:14:84:52:54:ee:7c:42:2a:3d:e3:f8:
         f8:b2:40:75:16:04:41:63:15:7e:32:2f:a4:80:cb:5d:e6:9f:
         7a:5a:b6:cd:91:fc:34:49:24:49:ae:78:fc:1d:cd:3d:db:93:
         c2:f7:56:a5:29:17:66:3e:2f:82:53:02:e5:8e:27:23:cc:47:
         16:36:c3:91:2b:6f:88:4a:bb:13:89:df:e5:5e:36:93:c6:aa:
         6a:66:7a:66:28:48:b2:df:34:42:70:84:d6:d6:3d:9e:89:2d:
         2c:4b:67:a0:a8:1e:2a:7a:81:22:18:bb:32:b3:20:a6:5f:ff:
         fe:0c:3c:3a:e3:60:b3:a0:b9:b7:a6:0b:fd:df:2b:f2:99:1f:
         68:d6:25:65:13:2b:00:37:c8:31:2d:9c:2a:ba:20:bd:3e:e8:
         02:8c:a0:b6:ea:c3:79:fa:b3:d4:cc:1f:60:0f:65:01:88:24:
         11:ec:9d:83:45:5c:d3:c7:06:4e:6d:67:72:00:ff:36:2d:06:
         af:8d:99:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGPMbCqKargAbSR2rDVjkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl
ODg3ZGMwHhcNMjUxMTA0MDkwMDQ5WhcNMjUxMTA1MDkwMDQ5WjAzMTEwLwYDVQQD
EyhiYWFiYWMzNzY1N2Y4MGQzOWU2ODQwNjM1NjZhNjc3YzEwNThiMjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18ttzp3DRHdvfNWdzynrodD0QSfg
k2jrItlgn7qsRSSLR8LyqU4SengByaQhNMaSSa5rH3qNKqBraFm8PE5qRoQp53Hc
dcwSqm5iYUr65wq8aAYTC3OfsX7PmvZATzLrjdxwPP4VAd4/H01mnIHiTZ49lcFE
drFGvTD9/VGtIquYj//sw9zqRPzNlpozaGaXfCeQsScJXJcbignVGg58m12KtffF
4eFZz8g9zEa43Pe9wcta49mPCiDEuDnFKsIku5316umM1qJTVRiMfmuyrz9dSO9j
fSsjhfIYxiG3q7YtQAXAputaKrtkBQ4wfmpkov3d1x5j0Wadjkv3LBaf6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLqrrDdlf4DTnmhAY1ZqZ3wQWLJsMB8GA1UdIwQY
MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt
YWFlMTQ0NzYwM2MwLzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw
LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQljW1ZYC
R+f+n8bENr21H7XHfvRsLdFrDgCIWO78EsggjEKU9huG+F/WcGFu6oyl4CEeBkSI
RpUbLs6lRRSEUlTufEIqPeP4+LJAdRYEQWMVfjIvpIDLXeafelq2zZH8NEkkSa54
/B3NPduTwvdWpSkXZj4vglMC5Y4nI8xHFjbDkStviEq7E4nf5V42k8aqamZ6ZihI
st80QnCE1tY9noktLEtnoKgeKnqBIhi7MrMgpl///gw8OuNgs6C5t6YL/d8r8pkf
aNYlZRMrADfIMS2cKrogvT7oAoygturDefqz1MwfYA9lAYgkEeydg0Vc08cGTm1n
cgD/Ni0Gr42ZRg==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:09 2025 by rpki-client