Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
File:                     cBxcPyilwHENvkgp0hbInpQu8Os.mft (raw, json)
Hash identifier:          0np2JyIOmtMBih3tBdOjCIcFJdyFL0yBXhlF5E3Zhag=
Subject key identifier:   6D:87:14:90:0B:45:36:CF:D0:6A:7E:02:27:A6:EE:67:B7:CA:7D:C0
Authority key identifier: 70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB
Certificate issuer:       /CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
Certificate serial:       0199FBEB4D3B40C49716F1CADDD5AB834A60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:02:05 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:05 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:05 +0000
Files and hashes:         1: Ke6BIcKr553RdNTHAAiP-pm7d4U.roa (hash: YC8hk6oKhl67AQI7JSOSYdAfbuzkCnLEvEUsrgjHG4c=)
                          2: cBxcPyilwHENvkgp0hbInpQu8Os.crl (hash: 2PkYfTx6CdsZl2AYTQ/5Yfzph/yBCECY4cJ6vdUpIKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:4d:3b:40:c4:97:16:f1:ca:dd:d5:ab:83:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701c5c3f28a5c0710dbe4829d216c89e942ef0eb
        Validity
            Not Before: Oct 19 10:02:05 2025 GMT
            Not After : Oct 20 10:02:05 2025 GMT
        Subject: CN=6d8714900b4536cfd06a7e0227a6ee67b7ca7dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d0:54:f3:54:7b:b6:92:fa:93:c5:fd:35:4f:
                    bd:59:70:4d:7a:ae:ab:39:21:0e:75:18:c9:09:6e:
                    16:0a:9f:07:97:e4:75:ad:1e:cd:f8:a5:ba:bf:3f:
                    e1:9f:fc:1e:3e:03:7d:f9:0b:a1:b4:6d:c6:fe:e5:
                    8c:25:43:fd:36:6c:8e:a0:fb:d8:0a:55:b4:10:f4:
                    30:2d:5f:1e:91:69:61:e9:6a:8d:7c:4d:4c:51:6b:
                    02:af:b3:47:f3:ee:cb:b8:ce:36:5a:11:2d:60:0d:
                    00:74:50:51:7b:dd:3e:52:84:df:e0:a5:95:11:c6:
                    db:43:18:19:b2:16:25:cb:e4:a0:ef:bc:fc:97:b9:
                    2d:a1:98:80:d3:b0:b4:64:84:86:85:08:ec:3d:1e:
                    66:25:e6:7d:78:da:45:e5:dc:d4:e4:ba:1b:69:48:
                    e2:9f:de:e3:40:de:e1:aa:9f:fe:82:95:ff:7e:14:
                    e9:d6:5d:95:4f:2e:a0:35:0c:43:2c:57:86:d2:5e:
                    ae:84:89:93:2d:3f:e2:b5:20:be:82:49:e1:bf:b7:
                    f5:cb:df:e4:b7:a9:df:c0:28:18:e8:d0:76:7c:77:
                    6a:31:8a:83:fd:5d:83:80:d5:01:6e:13:04:2c:45:
                    0d:6f:da:20:fa:34:4e:55:1c:88:eb:4c:68:cc:cf:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:87:14:90:0B:45:36:CF:D0:6A:7E:02:27:A6:EE:67:B7:CA:7D:C0
            X509v3 Authority Key Identifier:
                keyid:70:1C:5C:3F:28:A5:C0:71:0D:BE:48:29:D2:16:C8:9E:94:2E:F0:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBxcPyilwHENvkgp0hbInpQu8Os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/fac921-f552-4a8a-8b49-4fa98601ae8c/1/cBxcPyilwHENvkgp0hbInpQu8Os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:e2:8d:09:0e:99:e6:d8:34:b7:49:23:54:19:f6:2a:54:c5:
         b9:17:f8:65:f6:c7:bc:2f:c7:43:44:d0:dd:9c:c0:5c:34:ba:
         71:f0:17:66:7a:b7:29:bf:9d:24:b3:97:a8:42:ad:65:ed:a5:
         61:00:06:8b:0a:97:28:58:da:e3:e4:39:5c:f7:ff:af:01:8a:
         03:a0:31:be:a3:69:3b:79:a2:a0:93:6e:bb:d0:69:15:1d:46:
         da:87:f0:57:cd:1e:1c:d2:00:d2:9f:aa:44:9b:92:a7:85:4a:
         48:5e:3c:8a:21:0d:c8:8a:8a:05:f9:44:b1:74:32:fa:49:32:
         c1:3f:b4:42:6e:c7:3e:b7:2b:e7:e1:f4:3e:57:ad:03:36:00:
         d5:94:8a:0c:16:4f:0f:9d:24:c0:ef:6e:78:ae:05:42:9a:ac:
         13:08:25:8c:fa:d9:b1:b3:c7:38:da:df:0c:ca:48:e8:2e:25:
         1f:e5:aa:0b:44:0a:2c:47:21:08:f3:b3:2e:73:af:dc:8f:67:
         15:7b:3e:35:7b:e1:ea:2d:3a:55:c7:19:78:c3:22:13:eb:0a:
         8b:95:6f:af:90:0f:69:f0:3c:38:98:ed:32:eb:91:f6:29:18:
         c7:2f:83:5f:38:6c:b2:0a:fe:85:10:f8:97:36:c9:cd:66:07:
         81:83:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:05 2025 by rpki-client