Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File:                     b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier:          5ZwSq7S6gxmdk7RDZ/FB7m3POenGDYcVo1DtY56B7Bo=
Subject key identifier:   B8:1D:DF:20:01:A7:7F:47:15:D8:1D:1B:52:E0:76:D3:85:AF:94:0A
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer:       /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial:       0199FBEB66376381AD53F096B937373885E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:02:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:12 +0000
Files and hashes:         1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: 4h6fkAqyJtAga8vQw4WHb4qbskB8YjQfzc7oRP0mbpw=)
                          2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:66:37:63:81:ad:53:f0:96:b9:37:37:38:85:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
        Validity
            Not Before: Oct 19 10:02:12 2025 GMT
            Not After : Oct 20 10:02:12 2025 GMT
        Subject: CN=b81ddf2001a77f4715d81d1b52e076d385af940a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0b:87:99:87:12:04:9e:d7:e9:b2:29:10:1b:
                    ef:7b:62:4d:d5:88:6d:41:2d:f3:61:c7:9a:ab:4d:
                    ec:25:25:b5:bd:aa:99:bb:03:48:4a:98:e7:e8:dd:
                    89:ae:bc:02:df:67:bc:22:ce:c9:55:8a:a7:23:43:
                    14:85:48:2c:b6:74:8c:53:56:7b:4d:bc:02:b4:79:
                    71:0a:00:1d:ba:d9:b3:e5:49:35:1e:ae:b3:ff:62:
                    ff:be:70:05:1d:97:5b:df:8f:41:e5:2b:71:11:ae:
                    67:ee:a3:90:64:61:3a:72:bf:ef:69:c8:b8:69:ff:
                    b5:32:be:a9:95:dc:56:78:94:3b:e2:a6:ca:32:f6:
                    14:24:5b:25:89:06:ee:c0:50:d5:b3:50:c9:a8:4c:
                    99:07:eb:9c:b5:db:43:ad:42:71:4b:8c:11:ac:a3:
                    5f:3e:46:e4:a0:e0:46:68:27:5c:47:8f:fb:79:3c:
                    2e:30:8b:4e:b2:cc:28:c9:46:42:da:f5:74:e0:a6:
                    20:b1:ff:6c:7f:85:de:2c:39:92:3d:3f:b5:ea:b4:
                    5e:bd:08:41:4d:f7:f8:77:53:50:16:31:22:a5:7d:
                    db:86:ed:df:99:27:1e:0c:4e:3b:64:6c:b3:f4:e9:
                    18:a3:c3:95:f4:95:4c:61:ef:e2:59:05:ee:69:b0:
                    3e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:DF:20:01:A7:7F:47:15:D8:1D:1B:52:E0:76:D3:85:AF:94:0A
            X509v3 Authority Key Identifier:
                keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2f:c8:49:ca:37:38:44:0c:ed:1a:e2:0e:b0:d9:83:f4:89:
         d9:10:d0:38:2b:ce:73:c9:82:69:45:d4:f8:3f:80:b1:08:8b:
         cf:81:8c:f5:21:b5:47:6c:e1:31:44:5a:7d:3e:6b:42:bf:78:
         7b:b1:79:91:82:9f:23:7c:68:93:34:15:5b:76:6c:c6:1a:7c:
         4c:a5:65:30:b4:69:2e:c5:6c:18:9e:54:ca:2f:ca:25:3a:34:
         7b:99:3e:dc:f4:c3:63:5e:37:2a:55:9d:49:f5:d3:ee:30:0a:
         70:75:b4:ea:5c:04:5c:39:1d:e9:dc:3e:dc:38:64:63:9a:66:
         79:f8:e6:38:3f:d9:ea:fa:4e:3b:24:af:d8:8b:be:4e:5a:7c:
         54:39:27:a9:60:18:18:2e:15:c6:8d:0c:51:fe:a8:59:28:67:
         50:cc:52:86:3a:eb:5b:28:a4:00:b2:73:0e:16:e7:6c:79:23:
         e0:d1:36:c2:28:33:d3:d1:ce:be:be:a6:f9:63:8e:17:64:01:
         a4:95:a9:10:a3:ca:d2:b2:b8:5d:dd:f6:4a:17:8e:42:28:6f:
         57:b5:c5:fe:03:01:80:7d:d6:07:79:1a:b6:1d:f1:72:07:c4:
         b9:c2:10:14:07:e3:49:77:ab:3e:a0:94:d1:33:06:2d:b3:7f:
         47:94:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:14 2025 by rpki-client