Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
File:                     Btocaxpl96PZf5vXXnysMTUkb6U.mft (raw, json)
Hash identifier:          VSNIJEhi7zHTi7XlZDl0x4jb8+l9EcofViB0yHkWLe4=
Subject key identifier:   F7:2D:99:DC:BE:46:9C:DA:BF:5B:12:F7:3F:C8:D0:6E:E0:CF:BA:FC
Authority key identifier: 06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5
Certificate issuer:       /CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
Certificate serial:       019A006C2996679AAAFEDBA9C00A1514DADB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
Manifest number:          16EE
Signing time:             Mon 20 Oct 2025 07:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:19 +0000
Files and hashes:         1: AMzNvjmZwk2houvOqkqFV0cvo5A.roa (hash: HTkAYw+c3eaFcRD2e31KCt/aUCDK4fI60P5ZxmtXtPo=)
                          2: B1Iex8uRRf8aok8aKmx-BCttbhY.roa (hash: CY4dRMbgt1Iq8US/eF21ip9+rYukOasx0o91wxBlE/A=)
                          3: Btocaxpl96PZf5vXXnysMTUkb6U.crl (hash: 6KgkPTTQTakj8/Ni++eKmHwgi4AlrE2u9Dx3oN2Bv7w=)
                          4: duD9YQ4jRA3telkah1i-OVhA3pE.roa (hash: i34mTgchsjKccKSOftsEFIiydrQaMy7yIQu1TGf6N/I=)
                          5: sRpgMS5rykA5fxygTnmzWxlNSfM.roa (hash: Ubkf69/8EGo039fbIMx4UoElCOwq3uf2Zv/l74NdEPQ=)
                          6: x525jdZJUsYoxHJwzP0o_5TQ2io.roa (hash: IRj2BJAlnspTo/r0lchgNs138Ds47a20I5Smpndeux8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:29:96:67:9a:aa:fe:db:a9:c0:0a:15:14:da:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da1c6b1a65f7a3d97f9bd75e7cac3135246fa5
        Validity
            Not Before: Oct 20 07:01:19 2025 GMT
            Not After : Oct 21 07:01:19 2025 GMT
        Subject: CN=f72d99dcbe469cdabf5b12f73fc8d06ee0cfbafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:a4:5d:be:7e:9d:d0:df:e1:3f:d0:b6:1f:
                    09:d6:11:8b:9d:8f:d0:e4:1b:57:bd:13:94:60:72:
                    60:47:54:7d:a0:65:c5:4e:d5:8b:b0:32:e9:44:26:
                    32:6e:ea:09:02:1f:dc:f1:fd:10:9f:de:fd:20:a8:
                    c1:e6:71:ac:2f:28:2c:8b:c2:5c:a6:39:92:9b:86:
                    20:67:ae:2f:ec:e5:78:c3:4a:6f:27:fd:d0:4b:8c:
                    f2:6b:69:c3:da:af:36:e9:d8:3b:57:30:7e:9a:3a:
                    a0:21:19:f7:7b:33:d8:ea:0b:25:33:a6:d8:7b:a2:
                    09:17:cf:49:46:1a:3f:5e:55:57:08:ea:67:04:ea:
                    50:fb:61:25:37:75:da:63:28:27:bb:65:e7:18:51:
                    06:2f:61:87:41:57:26:9d:8b:3e:65:8c:8a:11:b6:
                    36:61:00:20:9b:7a:d2:d6:6d:03:f5:e7:4d:49:2f:
                    ff:48:87:30:1a:c4:f4:2f:6e:49:69:11:83:96:3f:
                    be:11:65:40:b9:0d:39:fc:6b:e4:51:2b:73:87:8e:
                    73:ed:a8:1f:0e:66:90:15:48:59:1f:72:ab:e4:05:
                    7f:bc:7a:f4:88:08:92:40:31:c9:b7:94:d7:10:8c:
                    14:a2:97:fb:af:e5:37:2b:24:91:c2:a1:73:18:46:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:99:DC:BE:46:9C:DA:BF:5B:12:F7:3F:C8:D0:6E:E0:CF:BA:FC
            X509v3 Authority Key Identifier:
                keyid:06:DA:1C:6B:1A:65:F7:A3:D9:7F:9B:D7:5E:7C:AC:31:35:24:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Btocaxpl96PZf5vXXnysMTUkb6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/62a3b1-117d-4b17-9662-45eb738cb9c8/1/Btocaxpl96PZf5vXXnysMTUkb6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:83:ea:96:40:57:73:da:d8:7c:f2:0a:77:97:92:80:b5:db:
         ef:2f:05:b3:6b:df:b0:b8:57:a9:f6:4b:88:b8:71:0a:98:47:
         82:f7:8a:d5:9c:69:60:63:c2:9e:70:de:30:c6:42:43:19:21:
         0a:62:b2:c9:ed:a1:5a:60:66:e3:33:5c:16:fb:d0:a8:3c:6f:
         d2:a8:58:93:7f:55:05:22:4f:57:08:29:7d:0c:3f:91:47:8e:
         5a:bf:10:f4:5a:9b:f4:5f:5c:24:9a:61:f6:c9:f7:27:9e:3a:
         e4:e8:d1:00:14:9d:f2:76:27:e7:ff:93:7a:1b:57:4f:c2:3d:
         94:6c:f5:78:f3:a1:9f:b6:6f:02:ed:4f:c7:20:e4:d3:3c:d1:
         09:63:df:4b:df:d0:a9:6b:4b:5f:75:d4:2d:fd:c8:0f:24:a3:
         35:6c:c5:97:b8:09:40:6d:5a:14:6d:51:c3:7c:3e:75:15:b2:
         43:cf:14:39:9e:21:be:f0:83:6a:8c:73:cd:45:1c:20:f9:d1:
         2b:36:ff:9a:7b:4d:ba:3f:18:a5:1d:d0:16:3e:da:48:7c:bf:
         86:ed:50:a3:58:be:56:fa:27:a9:95:ad:a2:71:3e:26:b2:69:
         fd:27:b0:ea:5a:9e:5f:8a:5c:45:14:00:35:0c:9f:bb:c2:47:
         79:75:60:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:45:35 2025 by rpki-client