Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
File:                     spIJTWkd9KfDjxa3VVfpwm1KxpI.mft (raw, json)
Hash identifier:          8WDr2TZhmQTQlhp4UyOYaP2+H4hKuEuxdgOfnviCFS8=
Subject key identifier:   65:10:F2:AA:5C:6E:AE:B1:31:EF:C0:5F:D8:F8:35:54:44:47:FE:B0
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Certificate issuer:       /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial:       0199FBEB730BDC49C99B27BAEB032D5A60F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
Manifest number:          15E7
Signing time:             Sun 19 Oct 2025 10:02:15 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:15 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:15 +0000
Files and hashes:         1: OmeM_n0y_6-zOQ1ggpf3SAaIYGM.roa (hash: nPLGIcarXsWhg9mWE06KhP99Y61Hg7uEiGrRbDzptwU=)
                          2: spIJTWkd9KfDjxa3VVfpwm1KxpI.crl (hash: O6aXmQU6T4sHMK67oeH4X3EBU3N07I9QUWRBdxKf/48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:73:0b:dc:49:c9:9b:27:ba:eb:03:2d:5a:60:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
        Validity
            Not Before: Oct 19 10:02:15 2025 GMT
            Not After : Oct 20 10:02:15 2025 GMT
        Subject: CN=6510f2aa5c6eaeb131efc05fd8f835544447feb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c0:25:f0:f5:72:c0:1d:9b:c7:0e:93:39:63:
                    c5:c6:ac:1f:25:d0:2b:a8:65:59:09:3d:bb:bd:03:
                    6f:6c:23:14:57:68:f0:67:fa:90:eb:79:64:1d:95:
                    d3:72:91:31:8d:02:03:c7:15:51:29:80:21:ad:8c:
                    93:61:7c:c5:2d:23:d0:2b:45:cc:38:04:33:18:d9:
                    76:52:02:08:a5:47:d7:c0:95:b0:7a:60:95:0d:33:
                    d5:a3:fd:94:f5:04:4b:7a:fb:35:04:e1:29:25:0c:
                    6d:a0:03:a8:e9:49:15:2a:83:7c:0a:f3:e9:c0:7a:
                    93:0b:f3:65:63:58:57:7e:f8:fc:62:56:a2:53:78:
                    6a:61:3d:e7:75:21:d5:5f:b3:f7:15:26:07:79:45:
                    68:0d:7f:06:87:b1:78:99:cb:92:b6:b2:aa:35:5c:
                    b2:84:a2:56:3e:2a:5e:8d:62:40:29:22:29:b9:9a:
                    9b:2d:12:66:3f:c3:b6:4b:0b:23:b0:2c:e8:7b:b3:
                    7d:52:20:fa:05:98:5c:06:ce:86:4e:42:a9:7d:df:
                    bc:0c:f0:a2:0e:19:81:cf:bf:3e:4c:66:60:50:ac:
                    7b:6a:ad:33:e5:8e:c1:28:b7:70:f2:50:e4:f0:c2:
                    40:fd:4e:02:99:80:81:9a:1d:37:c7:35:a8:3d:b1:
                    1d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:F2:AA:5C:6E:AE:B1:31:EF:C0:5F:D8:F8:35:54:44:47:FE:B0
            X509v3 Authority Key Identifier:
                keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:32:89:f8:2e:af:fd:d9:1f:7f:5b:f7:48:e5:20:6a:44:e9:
         08:eb:47:cf:a0:e5:5e:12:83:d6:72:14:d1:50:87:57:51:80:
         39:69:28:6d:60:83:97:71:a5:35:bc:59:7d:12:14:ee:45:8f:
         f4:91:eb:0b:35:69:d6:41:a5:3f:33:6b:6e:64:1d:e5:52:47:
         02:86:3a:cc:09:b1:78:b6:07:fd:25:81:14:55:ef:79:18:96:
         23:08:8b:8c:0d:b7:94:bb:db:23:ca:a6:b8:c1:e5:72:99:48:
         38:3d:57:e6:0f:85:79:07:1e:7a:1e:b4:7f:94:9b:6c:e0:9b:
         33:94:25:c3:b9:0e:1d:16:a7:69:15:2a:bc:7b:72:0c:ea:ea:
         fd:c7:aa:73:d6:31:00:99:2f:73:65:02:eb:d7:23:de:78:ae:
         69:2f:61:78:b4:a3:9a:0e:e0:35:a9:04:2b:9c:17:eb:f8:ed:
         00:1c:bc:02:23:34:4f:4d:2c:80:d9:56:05:de:53:c7:71:9b:
         e8:47:f2:3b:0e:59:9c:8a:40:d4:d0:5c:2a:ac:18:40:2d:04:
         d5:4f:c5:23:2d:24:34:11:5a:81:d2:0e:e7:36:e2:d0:82:03:
         5c:75:29:18:1f:e5:97:f6:fb:1e:c2:24:af:5f:fb:e7:ea:f9:
         1e:c5:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:54 2025 by rpki-client