Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File:                     b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier:          DRQ2KERQdPylnd751Po2NqWyoZDRqkn4+wcGXeRubiE=
Subject key identifier:   CE:53:ED:63:B1:76:98:D8:AF:07:07:59:FC:3C:F7:7B:78:1A:57:F0
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer:       /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial:       0199FC5885851759428993A75B990B236BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number:          0BC1
Signing time:             Sun 19 Oct 2025 12:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:23 +0000
Files and hashes:         1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
                          2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: sQAudxNvZWhyO9lF4IC+/ULcXXAUHrHUJCKywSjtNAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:85:85:17:59:42:89:93:a7:5b:99:0b:23:6b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
        Validity
            Not Before: Oct 19 12:01:23 2025 GMT
            Not After : Oct 20 12:01:23 2025 GMT
        Subject: CN=ce53ed63b17698d8af070759fc3cf77b781a57f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:ce:bb:00:00:cc:41:5d:56:cd:a0:ae:79:
                    a0:dc:c8:77:08:14:17:3e:44:39:b6:47:91:fb:7a:
                    02:82:f0:e1:07:55:38:e1:04:a2:fd:51:e6:b2:a6:
                    01:9f:54:41:c5:8b:5c:11:fc:a4:dc:bc:8a:6e:d0:
                    35:26:6b:93:9d:e7:be:29:35:f4:fa:16:f6:72:c5:
                    75:51:85:1e:ed:17:68:85:be:ca:79:2d:7d:90:d7:
                    a5:03:20:63:99:30:26:3d:1d:23:aa:33:b6:a6:8d:
                    b7:4e:bf:cc:36:04:83:c2:58:de:96:5f:ba:80:93:
                    58:a9:3f:f4:eb:f7:4f:89:8d:b4:91:76:15:a5:07:
                    cb:22:32:bd:e3:9c:9d:98:c2:fb:f9:7b:90:ce:9d:
                    66:1c:2e:7e:44:46:cf:f8:6e:30:8e:73:ad:a7:72:
                    fb:db:ff:d0:6f:9d:67:5f:df:55:03:ec:59:c3:a1:
                    85:ca:aa:b6:c4:98:40:a1:e6:86:8c:94:2b:05:73:
                    4e:75:11:a5:1a:01:14:ca:2e:d6:b0:47:4a:f3:15:
                    57:66:4c:b5:c6:9f:25:e5:be:e4:ea:a0:bf:e7:cf:
                    d8:d6:08:61:e3:29:d8:ad:0f:3e:c7:bd:2d:75:ac:
                    49:b4:7c:e6:76:0a:d2:22:a6:c7:f9:af:b2:a7:32:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:53:ED:63:B1:76:98:D8:AF:07:07:59:FC:3C:F7:7B:78:1A:57:F0
            X509v3 Authority Key Identifier:
                keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c2:b9:31:38:9c:10:63:52:32:4e:f1:eb:4b:47:5e:7f:38:
         87:90:58:1a:4f:8e:47:e9:59:95:69:af:c5:b2:c2:bb:58:f9:
         0e:4c:84:c3:66:da:c5:79:10:97:ec:b8:e1:ca:60:9a:1c:a0:
         a0:f2:6d:a0:95:39:69:57:4c:fa:26:49:0c:d7:f0:8d:e6:6a:
         62:48:f7:ef:12:c0:c0:4e:58:2b:f5:67:3b:e1:0d:60:ac:81:
         4e:b9:78:e3:72:28:1c:ff:06:cb:7d:26:29:3c:34:d8:ac:d4:
         c2:7c:28:80:5d:53:72:17:a9:41:ae:bc:34:99:20:b7:c5:97:
         a1:18:8a:98:50:50:9e:da:34:9c:42:23:e7:f5:f2:4d:e7:0a:
         40:78:62:fb:e7:de:22:6d:92:dc:f7:40:aa:84:ab:23:d6:33:
         12:cc:7a:cd:71:3a:36:4f:4e:05:cf:9c:17:e2:7f:23:9a:e0:
         9f:1f:51:ab:c1:dd:ad:bd:a3:fc:78:7b:70:11:04:00:7b:5f:
         81:8d:47:7e:45:2c:c2:f2:7b:75:35:41:41:b8:91:cd:6f:81:
         aa:3b:e1:3b:30:80:49:ad:5a:d5:50:c5:4f:10:7d:a7:88:7b:
         ee:07:d7:7f:b0:5b:b1:3a:f1:f9:a6:ca:df:6b:34:89:65:cb:
         06:2b:56:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:21 2025 by rpki-client