Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File:                     bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier:          jKNy2bQs5o/TA6AhfimXR/aWkly7220i8PC3t+NgAeA=
Subject key identifier:   E0:A4:4E:70:6E:18:74:2F:D3:8F:6E:D1:CA:85:2E:BF:33:21:05:DA
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer:       /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial:       0199FCC6CA76C77957F74F356BC960EE97C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 14:01:50 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:50 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:50 +0000
Files and hashes:         1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: vHtBt7EpR2MKB5Hp15GAonIx0+XIZHm2YCGDI3RLBQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:ca:76:c7:79:57:f7:4f:35:6b:c9:60:ee:97:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
        Validity
            Not Before: Oct 19 14:01:50 2025 GMT
            Not After : Oct 20 14:01:50 2025 GMT
        Subject: CN=e0a44e706e18742fd38f6ed1ca852ebf332105da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:1a:bc:7c:6d:66:c1:8b:de:d0:6f:ad:e1:
                    fd:6e:cd:1c:a4:bf:6b:55:52:9a:fe:c2:1c:ee:47:
                    87:9b:90:11:c5:a0:17:91:5e:fd:1c:51:b5:b5:3f:
                    c6:29:67:a3:5d:63:3d:15:f7:48:1a:9c:88:48:19:
                    f7:e5:18:92:99:ec:b9:e6:be:f4:65:96:67:74:21:
                    aa:f7:f7:a9:a7:c5:5c:49:08:4a:e3:17:4a:31:a5:
                    db:42:f2:16:21:88:44:83:5b:36:7c:5b:a9:57:6a:
                    a3:77:10:9c:72:08:fc:76:58:f1:a4:5e:87:02:a3:
                    e0:bc:a9:cd:ca:8a:cb:2e:02:9e:62:29:87:da:15:
                    75:62:07:02:00:66:12:f9:fd:c6:2b:5b:6d:cb:80:
                    18:3a:ce:95:1c:8f:e0:8f:1d:03:f8:2c:cc:fd:63:
                    7a:6c:27:4a:55:ca:4e:04:c8:6e:7e:13:ef:7a:13:
                    38:74:7d:29:36:16:22:bc:d4:13:46:7f:71:15:79:
                    f8:6c:a1:4f:0d:c3:b0:46:88:ec:60:8d:7f:15:ec:
                    cd:1a:b9:df:2b:a9:2d:43:af:5f:8d:04:25:cd:4a:
                    7e:92:57:e7:1b:c4:de:f0:25:12:0c:0e:62:91:3a:
                    2b:69:d8:16:3d:17:e1:99:7d:dc:80:80:a2:4a:8d:
                    c3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A4:4E:70:6E:18:74:2F:D3:8F:6E:D1:CA:85:2E:BF:33:21:05:DA
            X509v3 Authority Key Identifier:
                keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:5f:19:90:60:88:96:95:a3:80:b1:49:19:6a:ba:91:12:fd:
         83:95:6e:4f:0f:42:b8:e4:d4:72:71:7b:46:1d:29:ba:f8:fd:
         c5:22:69:fb:bf:34:77:83:43:a4:0c:6b:ac:52:aa:87:d0:b9:
         97:10:b0:14:f5:e3:5a:10:44:6e:c4:3a:8b:0f:44:a8:f1:78:
         da:16:56:1b:07:0a:ab:6e:d8:ba:e5:11:69:75:71:59:cd:61:
         47:a6:94:42:aa:0b:93:28:08:c7:dc:3a:73:fa:22:b4:e4:95:
         61:ac:a6:e8:f5:8b:9f:10:9d:ec:85:6e:e7:d7:d3:0d:58:02:
         08:3a:fa:82:df:96:07:83:dc:2d:98:79:9a:14:2a:76:74:8e:
         89:fd:70:e6:20:cf:ce:8e:9a:0e:76:9d:5c:57:dd:c2:62:72:
         d1:2b:c1:7e:63:8d:1f:e4:80:23:97:ef:fe:55:11:11:54:35:
         1e:fa:07:0d:70:e2:7e:5b:db:36:b3:75:b5:26:a2:ae:b7:27:
         7d:04:6a:8f:bc:2c:9b:db:37:4e:f4:5d:be:dd:64:9c:c1:17:
         1a:95:c6:94:f4:4a:42:87:6a:68:86:95:cf:57:94:0b:d5:9e:
         4d:ff:34:8a:04:ee:f9:aa:82:2f:7b:23:53:31:70:ff:1c:d2:
         16:f3:d8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:31 2025 by rpki-client