Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
File:                     B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json)
Hash identifier:          vNJXoxosADwv5jqKUqIl4aE55mIqlJQN/fC15P6/pLE=
Subject key identifier:   C1:08:6D:58:30:B0:C4:ED:50:A8:AF:0E:2A:BB:8D:CC:BA:96:F4:B2
Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28
Certificate issuer:       /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
Certificate serial:       0199FBEBCC91A6EDBFC96275E49562CF5928
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:02:38 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:38 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:38 +0000
Files and hashes:         1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: miTnHil22LtOQeDX7+6lkWvOsloREMx9qN1fBiq8LsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:cc:91:a6:ed:bf:c9:62:75:e4:95:62:cf:59:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028
        Validity
            Not Before: Oct 19 10:02:38 2025 GMT
            Not After : Oct 20 10:02:38 2025 GMT
        Subject: CN=c1086d5830b0c4ed50a8af0e2abb8dccba96f4b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e7:97:06:e4:bd:96:a3:4a:8f:9c:87:ec:8a:
                    f6:b1:e6:02:26:4d:6f:f6:f2:08:34:b8:f2:f4:69:
                    20:ac:73:1e:22:56:3e:03:01:07:bd:95:ed:f6:c6:
                    9d:1c:61:36:35:d0:62:ac:1e:36:3c:8b:c9:87:c1:
                    ad:26:30:dc:4f:6d:8a:e7:36:1c:6a:82:6a:3f:5c:
                    b8:ce:6e:d3:c0:0c:ad:b2:41:7c:4f:ed:5c:a6:9b:
                    41:b0:1a:bc:22:4f:60:24:da:cc:83:da:d7:bb:3c:
                    f7:56:56:a0:dc:79:07:96:c0:c5:c7:56:f8:ed:68:
                    78:7d:6b:45:0b:7a:4a:96:44:51:9d:72:07:6c:83:
                    59:f0:c4:da:8a:e1:5a:37:ee:06:a3:ca:ab:4e:9f:
                    ef:4e:58:67:13:47:71:a4:12:ff:6f:e2:80:ae:a7:
                    37:36:33:63:cf:df:dc:2c:ce:24:f9:03:06:ed:31:
                    45:fe:7c:89:c6:86:09:4e:51:8a:25:88:d8:1c:3d:
                    a5:00:8d:7c:fb:1e:bc:90:48:8e:f3:f5:1d:3e:dd:
                    7f:71:72:92:ac:51:ae:c2:76:05:5b:a4:ed:1e:1e:
                    aa:b2:9d:e5:8e:dd:04:39:2d:6e:a6:8f:c6:a5:c1:
                    5b:fa:77:4a:72:1c:dd:e2:06:9d:67:74:7d:97:04:
                    26:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:08:6D:58:30:B0:C4:ED:50:A8:AF:0E:2A:BB:8D:CC:BA:96:F4:B2
            X509v3 Authority Key Identifier:
                keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:96:06:9a:42:a5:ea:f0:ea:a8:01:ab:18:7c:5b:fd:13:54:
         a1:8d:8e:a4:bd:ae:bb:4b:2a:6c:ff:fa:d7:e0:6f:04:c0:aa:
         2e:5f:bf:17:5c:6b:26:71:c7:e8:04:96:4a:c9:ac:7b:67:b4:
         7a:cd:d6:f8:50:6f:99:a4:25:90:99:55:05:48:1f:5b:29:15:
         74:00:1d:01:92:ac:9f:8a:87:3d:ca:8c:4e:9c:92:af:1b:ab:
         fc:23:4f:93:44:f2:48:8a:7f:5e:e8:d2:fc:e6:42:3d:c6:89:
         0d:d0:8c:cb:e5:f9:6a:1a:0c:e6:0c:c7:2a:67:29:77:73:57:
         1c:10:43:76:c6:c1:b5:ec:9e:e9:15:52:7b:f9:86:2b:f9:23:
         7d:88:10:ab:5d:d1:e5:24:ed:92:d1:5d:84:bc:14:56:24:91:
         18:66:06:96:a3:df:9c:20:f5:92:58:d3:3e:39:c7:93:4a:4d:
         73:72:97:07:eb:a4:53:63:db:bd:a9:94:e5:2a:a8:12:ee:62:
         3a:52:8a:04:67:26:5a:7a:c2:18:8b:d0:cf:d2:dc:98:3c:04:
         c3:5d:46:fc:b8:e4:10:5d:9f:1e:a4:68:db:97:e7:68:87:00:
         49:f5:90:e8:28:eb:34:d2:59:2d:8d:f3:07:fc:c9:3a:8e:57:
         f7:5e:00:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768yRpu2/yWJ15JViz1koMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk
Y2YwMjgwHhcNMjUxMDE5MTAwMjM4WhcNMjUxMDIwMTAwMjM4WjAzMTEwLwYDVQQD
EyhjMTA4NmQ1ODMwYjBjNGVkNTBhOGFmMGUyYWJiOGRjY2JhOTZmNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOeXBuS9lqNKj5yH7Ir2seYCJk1v
9vIINLjy9GkgrHMeIlY+AwEHvZXt9sadHGE2NdBirB42PIvJh8GtJjDcT22K5zYc
aoJqP1y4zm7TwAytskF8T+1cpptBsBq8Ik9gJNrMg9rXuzz3Vlag3HkHlsDFx1b4
7Wh4fWtFC3pKlkRRnXIHbINZ8MTaiuFaN+4Go8qrTp/vTlhnE0dxpBL/b+KArqc3
NjNjz9/cLM4k+QMG7TFF/nyJxoYJTlGKJYjYHD2lAI18+x68kEiO8/UdPt1/cXKS
rFGuwnYFW6TtHh6qsp3ljt0EOS1upo/GpcFb+ndKchzd4gadZ3R9lwQm9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEIbVgwsMTtUKivDiq7jcy6lvSyMB8GA1UdIwQY
MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt
MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1
LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJYGmkKl
6vDqqAGrGHxb/RNUoY2OpL2uu0sqbP/61+BvBMCqLl+/F1xrJnHH6ASWSsmse2e0
es3W+FBvmaQlkJlVBUgfWykVdAAdAZKsn4qHPcqMTpySrxur/CNPk0TySIp/XujS
/OZCPcaJDdCMy+X5ahoM5gzHKmcpd3NXHBBDdsbBteye6RVSe/mGK/kjfYgQq13R
5STtktFdhLwUViSRGGYGlqPfnCD1kljTPjnHk0pNc3KXB+ukU2PbvamU5SqoEu5i
OlKKBGcmWnrCGIvQz9LcmDwEw11G/LjkEF2fHqRo25fnaIcASfWQ6CjrNNJZLY3z
B/zJOo5X914AyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:02 2025 by rpki-client