Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          wR9D2/Bg5O18WYDTUIbbqF7RDyGlAzfCFeEpxjT2XeU=
Subject key identifier:   FA:DE:23:83:00:DE:EF:24:4D:BE:BD:D2:64:56:87:DE:40:6D:7E:79
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       0199FC8FA9B5C1063BC1A61DBE51FED0EEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          0EAD
Signing time:             Sun 19 Oct 2025 13:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:37 +0000
Files and hashes:         1: NbaALD0q3dEG97u3Hxf4a1Hu0XU.roa (hash: I2cRj+89A0JU13KVmdh4JlmOsFRbyD7Lf9jI3qtGRKU=)
                          2: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: /lJNxVN92XvuSqAHL+1IMkKR3uE1RgnvIBT8cEb9UWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a9:b5:c1:06:3b:c1:a6:1d:be:51:fe:d0:ee:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Oct 19 13:01:37 2025 GMT
            Not After : Oct 20 13:01:37 2025 GMT
        Subject: CN=fade238300deef244dbebdd2645687de406d7e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:49:ec:ef:e8:a1:36:cd:88:5b:63:33:b4:
                    78:3b:a9:f7:6c:73:b0:c4:cc:65:6b:5f:bb:e8:ee:
                    02:e1:6d:ae:2a:da:be:aa:af:51:0f:f1:fe:31:3c:
                    0e:61:c9:16:cc:bb:e2:1b:1e:f7:56:89:43:ed:6d:
                    07:73:31:8d:dc:7e:8a:88:31:2f:ee:6a:95:a3:cc:
                    e7:27:b8:ab:51:48:49:b4:f6:4f:f3:eb:81:fe:04:
                    26:ab:ce:70:dc:07:c4:25:e4:37:32:25:91:9e:33:
                    39:3b:b5:8f:d7:c3:56:a2:d1:17:d5:35:98:d1:e4:
                    c1:27:60:2e:6c:0f:6c:57:f5:a7:f3:e6:07:cb:cf:
                    48:86:99:55:7f:14:6b:ce:f3:7b:76:e0:8b:55:24:
                    6b:4a:c8:fe:d4:3c:26:57:d1:5b:62:95:60:3f:d4:
                    34:c3:a4:40:fd:ed:d5:26:16:a2:24:89:f3:f6:27:
                    1f:e4:08:93:a7:79:10:c4:a1:4f:38:39:35:5e:23:
                    fc:0c:dd:78:36:1b:17:af:56:14:ca:9a:f6:49:c7:
                    7b:bf:8e:98:61:43:a4:09:58:2f:03:6f:e5:41:c1:
                    dc:69:2b:4d:ef:8f:40:51:c3:61:8c:25:97:8b:2c:
                    b9:34:4a:b7:31:66:a6:f0:e3:68:a8:25:74:c7:85:
                    3c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:23:83:00:DE:EF:24:4D:BE:BD:D2:64:56:87:DE:40:6D:7E:79
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f8:1c:00:62:b6:b6:4a:ab:9d:21:0a:ea:7c:d7:3c:1f:6b:
         ad:54:c7:6c:d4:f4:74:b1:bb:fb:cc:8e:6f:c8:52:5c:c1:9e:
         40:02:5a:f5:e5:e5:0a:62:27:2e:7c:b5:df:0c:cc:0b:0d:f6:
         8e:a6:a7:fe:2c:bf:85:26:be:c7:93:ad:d4:fb:a6:b2:33:f1:
         6d:e2:ef:33:63:2b:76:da:84:2e:21:86:a0:bf:45:5d:e0:cd:
         17:64:e2:70:07:8e:0f:b6:a1:3b:ae:c5:4f:fc:1d:ad:9e:ec:
         c1:7c:ff:56:ed:c2:2d:f7:a1:1d:f0:b9:a5:47:99:d5:51:60:
         57:bb:59:2d:35:4b:53:bb:a9:67:01:a6:b7:57:0b:51:7d:2f:
         ec:b7:f7:41:0a:22:ab:86:f0:6c:3c:e5:58:2d:1e:84:85:32:
         01:1d:08:f9:4a:d5:c7:57:e9:d0:f0:72:8d:93:55:07:ed:b5:
         37:6b:73:3f:d7:2e:c8:84:40:99:41:10:41:0e:1a:b3:81:46:
         20:5d:e7:3b:9f:6d:37:b9:81:de:de:47:b7:69:04:e6:89:af:
         c4:89:da:8a:21:9f:5c:38:39:65:a6:b1:89:1e:8c:b7:4c:68:
         c1:f1:72:6e:63:4b:b2:aa:5b:0f:9c:10:2c:5b:a0:f7:cb:36:
         6c:c0:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:44 2025 by rpki-client