Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          15I/FTZEh8n3OBZHK49pmYWJ4MQkI6wqDer6cWYdXeo=
Subject key identifier:   B1:A0:FA:94:E8:DC:7B:1E:DE:5D:69:EC:3E:45:B1:CF:13:5B:4F:E1
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       0199FE46E8EBC61DA1425FCA06B65E53256A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0B1A
Signing time:             Sun 19 Oct 2025 21:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:23 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: z2ZhLEjC8QE8Xb6a+D9H0/Itz6USnqb4UQhhj0jVsOo=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:e8:eb:c6:1d:a1:42:5f:ca:06:b6:5e:53:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Oct 19 21:01:23 2025 GMT
            Not After : Oct 20 21:01:23 2025 GMT
        Subject: CN=b1a0fa94e8dc7b1ede5d69ec3e45b1cf135b4fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:fe:1f:3a:2c:a8:a9:1c:ca:9e:0e:2a:e4:
                    b4:c5:cc:d2:cb:7b:df:84:8a:a6:2e:c6:4b:03:5f:
                    5f:4c:68:b8:a0:13:11:2d:3b:66:77:a3:71:97:6e:
                    2e:cd:95:ba:90:a9:31:f7:79:75:e3:9c:ec:8a:23:
                    44:d9:51:9a:c0:2a:1c:c5:a0:00:0f:22:83:2d:de:
                    87:5d:1f:da:5b:7a:7b:2a:f4:15:72:cb:0a:7d:9c:
                    dc:a9:6b:3a:78:b8:13:e9:c0:8c:03:3f:91:eb:15:
                    39:f0:90:9a:76:ea:d4:2a:2b:18:1c:3d:43:97:e8:
                    22:26:d9:68:d3:97:0d:a8:3b:7c:55:63:cc:3c:f9:
                    6e:2b:cc:b1:86:6d:93:6b:2b:ef:49:a8:f2:18:c9:
                    51:62:7c:30:26:9c:ba:a5:ec:b7:e0:e1:af:83:40:
                    32:00:4f:35:84:71:a3:a5:14:37:40:fa:d2:9d:a6:
                    19:64:da:56:81:1b:d2:25:20:47:d8:87:f1:82:0a:
                    49:a4:06:f1:58:83:7d:7b:c7:f5:93:13:61:8c:77:
                    a7:84:94:33:51:4f:9e:c7:1f:de:03:9f:90:e4:25:
                    ab:84:ca:2a:63:0e:91:9f:b3:83:5c:be:98:7f:e8:
                    f8:f7:2d:26:b7:07:ae:18:68:8d:63:a4:93:94:b2:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:FA:94:E8:DC:7B:1E:DE:5D:69:EC:3E:45:B1:CF:13:5B:4F:E1
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:eb:a5:fb:db:5a:4f:48:9d:9a:01:8e:73:35:74:d7:b6:5f:
         c9:55:41:65:56:6d:0d:77:c7:ca:6d:b9:00:c7:2d:4f:d2:0e:
         92:ec:31:50:70:0e:1e:b9:2d:0e:1b:61:30:09:c0:e5:6e:4f:
         80:4a:d9:7f:86:82:02:60:fd:78:e8:81:cc:de:bb:77:5f:3c:
         5d:92:db:53:e5:ca:8f:d1:5b:67:06:15:83:dd:e4:6f:0b:cd:
         95:8a:36:69:65:be:4e:12:09:a7:e6:84:bd:5a:03:f8:82:19:
         97:d9:c2:ef:9d:5f:ff:47:74:a1:c6:02:45:56:33:06:8b:6c:
         38:ed:27:31:72:a8:01:46:a6:b5:91:e2:af:ed:b7:c8:2c:19:
         f5:10:82:10:02:f3:08:e9:6c:93:9e:5a:3b:7b:84:2a:37:90:
         83:fb:8b:08:d0:a2:c8:2f:69:d2:55:20:44:e4:f3:80:fe:41:
         ad:da:c1:1e:0e:ae:1a:c3:fb:e4:58:3d:3d:10:8a:12:28:f0:
         5d:b4:d0:76:f2:54:5c:36:e2:00:29:9f:64:12:3c:a4:ea:b2:
         5d:dd:1c:20:7b:50:41:a9:5a:94:1e:c0:c8:b5:aa:75:13:22:
         25:6e:11:86:02:51:af:fd:21:6e:0d:90:fb:43:8f:39:6e:73:
         7c:12:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:19 2025 by rpki-client