Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
File:                     B67xkPRL_B2wxQ8ac_3wFwga_hY.mft (raw, json)
Hash identifier:          uLAIIol4AkX5ZS/xkp8niuVa89wb3MxrAtNiGh57tDg=
Subject key identifier:   4D:D7:D3:1E:FF:7C:99:D8:90:69:ED:01:80:D7:9F:74:DA:8F:1D:8C
Authority key identifier: 07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16
Certificate issuer:       /CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
Certificate serial:       0199FA69D4C5D116DA3DFC2E56BFA01FBD8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
Manifest number:          0C3A
Signing time:             Sun 19 Oct 2025 03:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:03 +0000
Files and hashes:         1: B67xkPRL_B2wxQ8ac_3wFwga_hY.crl (hash: DxWtmgTeiCw99PgwXhG8KuhQS5EnlEjz2I8yLiAVwR8=)
                          2: o0m8fWeQnLg_XbqIRRPxINGkNnk.roa (hash: hFBwillrrnPw4RwjJ9B6leCvzXkiINuH8WcY9jtsCtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:d4:c5:d1:16:da:3d:fc:2e:56:bf:a0:1f:bd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07aef190f44bfc1db0c50f1a73fdf017081afe16
        Validity
            Not Before: Oct 19 03:01:03 2025 GMT
            Not After : Oct 20 03:01:03 2025 GMT
        Subject: CN=4dd7d31eff7c99d89069ed0180d79f74da8f1d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:e3:25:68:3d:65:0b:e9:f6:6c:50:e6:54:
                    20:24:f7:91:75:cd:1e:95:f7:ab:e3:83:b6:e0:5a:
                    19:b3:21:7d:49:31:8f:8e:51:63:9c:36:40:fa:32:
                    a6:21:5c:3c:6c:5b:e2:6b:0f:a2:bb:40:9b:7b:98:
                    39:09:97:11:65:68:21:28:1c:35:2a:24:1c:2b:cd:
                    6e:51:82:05:eb:a2:24:b8:a7:61:45:8f:cb:8a:81:
                    6b:fd:0a:6c:4b:b9:79:dd:95:bc:46:a2:34:84:20:
                    39:64:11:20:e4:91:01:cf:a8:82:60:23:a2:a8:79:
                    30:d0:15:f9:20:ff:a4:20:1a:c2:77:97:62:90:19:
                    20:2e:85:2d:3b:c2:29:6c:3e:05:20:eb:a3:8a:96:
                    d5:94:22:0d:3d:03:bd:3a:f8:e0:ec:db:1a:b8:8d:
                    5d:56:13:a8:16:7c:8f:31:13:06:b9:ea:18:db:a9:
                    16:8f:c5:02:f2:9b:e4:a1:97:84:39:04:98:1f:a3:
                    6d:2e:4c:e5:71:5b:5c:46:96:ee:29:f8:ba:d2:a9:
                    5e:3b:d4:15:42:88:70:3f:09:95:23:fa:04:b5:32:
                    1e:ef:ac:99:e9:36:7b:19:73:8a:82:5c:f1:46:a2:
                    c6:bd:06:8e:f6:dd:9c:ea:02:44:c3:7f:e9:23:05:
                    75:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D7:D3:1E:FF:7C:99:D8:90:69:ED:01:80:D7:9F:74:DA:8F:1D:8C
            X509v3 Authority Key Identifier:
                keyid:07:AE:F1:90:F4:4B:FC:1D:B0:C5:0F:1A:73:FD:F0:17:08:1A:FE:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B67xkPRL_B2wxQ8ac_3wFwga_hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d69525-7cfb-47c8-9c4f-ef4458ea20cd/1/B67xkPRL_B2wxQ8ac_3wFwga_hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ec:ca:0c:67:a4:63:90:d6:26:08:0e:89:b0:58:42:fd:a7:
         e9:67:59:d8:05:4c:bb:18:e4:d3:1e:47:87:3d:c4:5f:39:d9:
         ac:6f:75:e5:cb:66:ef:57:35:f8:98:41:ac:72:91:a2:91:f7:
         40:06:c6:6e:4e:2f:98:cc:d1:b2:f0:ae:fc:89:39:25:52:3d:
         f2:82:29:5a:c2:48:6e:65:b6:69:6c:18:b5:e3:2a:62:e3:06:
         c2:0a:c0:e3:81:d9:d5:55:1d:4f:c6:e0:b5:0b:20:aa:60:7f:
         68:4f:c9:eb:cb:4a:2e:d5:4f:31:ee:77:89:17:a8:a6:40:86:
         87:12:01:3f:af:c7:1d:c0:46:8d:30:c0:9b:e7:9f:48:c6:ea:
         3b:8f:21:9e:74:39:89:1f:39:b8:ae:67:58:e2:0c:f0:26:c6:
         cb:bd:6d:ba:4f:8d:33:d5:c0:37:93:40:96:e0:c3:2a:98:9e:
         81:33:80:13:92:4d:e4:76:54:a1:c4:16:f2:82:9d:fc:35:bf:
         eb:76:d5:21:86:a9:4d:1a:59:bb:7b:b8:b4:07:84:3b:4f:c9:
         b3:0f:34:a2:d6:01:1b:53:f5:eb:4a:c0:e3:a7:8c:a4:05:1c:
         eb:75:18:b3:a6:6d:b3:ea:18:56:74:ec:26:d7:01:17:0c:b8:
         bd:73:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:15 2025 by rpki-client