Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
File:                     pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft (raw, json)
Hash identifier:          cUXWLaYeAdUdFk1+K50SXubMj6JdbGfoKmJpxGd+tCs=
Subject key identifier:   BE:66:0D:AE:EF:35:1C:1A:D9:62:D5:8A:A6:F8:27:A9:E4:D0:4A:23
Authority key identifier: A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A
Certificate issuer:       /CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
Certificate serial:       0199FFC76ADABB39576A7C6CA6A4A85325A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 04:01:23 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:23 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:23 +0000
Files and hashes:         1: pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl (hash: /89z78/GZ08ciVjihluaeIS0dXQgmCEUgeFv4HeyzS4=)
                          2: t403LtXkOSW8w7w_vK-2ppXvWVA.roa (hash: kUS7ckaNEkh4qS4uYt0WI3yhqZiJYbt1KK2dO98adJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:6a:da:bb:39:57:6a:7c:6c:a6:a4:a8:53:25:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63075cbb7eb1693ee71bc90e5f73dadc225d91a
        Validity
            Not Before: Oct 20 04:01:23 2025 GMT
            Not After : Oct 21 04:01:23 2025 GMT
        Subject: CN=be660daeef351c1ad962d58aa6f827a9e4d04a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2f:61:8d:37:4c:b6:e8:6d:98:97:8a:92:10:
                    9e:36:c1:40:34:e1:63:13:28:20:11:ef:72:55:28:
                    0f:0a:40:70:a4:dc:d5:e6:22:95:1f:fb:b3:89:89:
                    e7:c5:4c:a5:d7:65:a4:2b:dc:44:8a:02:fb:88:fe:
                    47:85:04:db:14:25:7e:64:12:c0:bc:91:85:64:b8:
                    85:61:e8:ef:3b:cc:53:67:62:8a:5e:6a:13:01:85:
                    46:d4:b5:33:ce:c8:84:65:49:f8:52:55:13:15:ee:
                    45:95:52:18:c0:ad:4d:f0:de:d4:f5:bc:04:67:45:
                    dd:63:6a:f4:ed:9c:b4:9c:55:b2:3f:ca:76:04:a1:
                    ed:db:2e:45:32:f5:d8:07:6d:97:a7:7b:b8:eb:eb:
                    76:64:54:60:34:42:33:c3:bc:d0:71:52:fb:13:8d:
                    35:71:d3:1d:12:09:ad:7f:68:68:5a:f0:ec:0c:6a:
                    25:92:2d:53:4e:e9:78:4c:06:5f:24:44:6c:cd:ef:
                    3e:92:f2:54:49:35:78:8e:f3:0e:b4:da:15:91:18:
                    bd:ff:a0:9e:7d:03:a3:d8:c3:b5:4b:a4:ae:a3:0a:
                    1e:30:9f:4f:9f:77:58:31:32:ea:c9:fe:35:a9:90:
                    4a:c1:14:c8:8b:82:7a:20:d3:93:45:59:ff:38:fb:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:0D:AE:EF:35:1C:1A:D9:62:D5:8A:A6:F8:27:A9:E4:D0:4A:23
            X509v3 Authority Key Identifier:
                keyid:A6:30:75:CB:B7:EB:16:93:EE:71:BC:90:E5:F7:3D:AD:C2:25:D9:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjB1y7frFpPucbyQ5fc9rcIl2Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bbe9ff-2365-49c8-98d6-e71c317a3fa8/1/pjB1y7frFpPucbyQ5fc9rcIl2Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:39:3a:61:29:f8:8c:ff:e7:91:65:4d:8b:35:8d:3d:9f:1e:
         ec:79:95:e9:34:25:19:b1:b5:c1:00:b5:a4:3a:57:e8:0b:12:
         68:cf:ce:f0:ef:76:fc:6d:c8:9a:16:37:bd:78:33:f0:61:9b:
         52:f7:9c:97:f0:d6:6c:2e:1d:82:80:ac:86:98:00:78:c5:e2:
         02:35:6a:4e:47:0b:df:b7:86:79:bf:af:b3:88:b8:23:19:8c:
         3d:2e:87:f5:f6:70:bf:7a:b6:0c:0b:68:b6:2f:9a:15:4b:04:
         13:a4:a8:3f:b3:12:9b:1e:bc:e5:1e:8b:50:13:ef:4f:e4:2f:
         8b:52:42:b0:96:a4:77:ac:65:98:98:d7:0e:66:ac:4d:52:51:
         fe:f2:ce:2c:33:9a:8d:71:08:f3:05:80:37:c6:42:3a:f6:27:
         db:1b:83:67:5f:eb:94:47:2a:52:9a:b2:2e:49:89:58:3c:8a:
         76:84:91:a9:e1:fa:ec:f8:f1:3c:cb:b9:8b:77:7b:7f:bb:14:
         dd:d2:26:34:4a:8d:00:c4:38:5e:1f:14:72:7c:86:e5:87:e3:
         bc:2d:32:35:64:47:9c:33:4a:3e:10:17:c3:cd:97:60:0b:0a:
         e0:44:76:5c:9a:f3:30:94:6d:4e:35:ac:a6:5f:f3:61:51:ae:
         26:15:24:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:28 2025 by rpki-client