Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File:                     B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier:          MYAg93xLuc/s69IV2Lj+rsXOCDIx8QEPKHk7BhJeO/Y=
Subject key identifier:   85:92:DC:AE:FD:D8:5C:6E:29:14:CA:10:AE:A7:96:1E:9E:F1:F4:50
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer:       /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial:       0199FB7C6D87905643E5546D8876043FC89C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 08:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 08:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 08:00:59 +0000
Files and hashes:         1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: HMZCqFMkW3JK9Ovk/PwE9M4ApSiDkRd1HlNW+9pvpIQ=)
                          2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:6d:87:90:56:43:e5:54:6d:88:76:04:3f:c8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
        Validity
            Not Before: Oct 19 08:00:59 2025 GMT
            Not After : Oct 20 08:00:59 2025 GMT
        Subject: CN=8592dcaefdd85c6e2914ca10aea7961e9ef1f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2f:3e:c3:e1:17:0e:ea:1b:97:39:f5:d6:4b:
                    38:33:ce:49:3f:76:24:9f:9c:8a:53:8b:99:7f:6a:
                    b6:a8:ec:9b:40:17:d3:26:f0:8a:5a:9b:92:31:27:
                    9e:91:d1:02:72:ee:94:4e:02:01:7e:42:e8:d2:77:
                    06:16:f3:60:0d:37:76:c3:28:79:24:3b:55:b3:dc:
                    cf:72:e4:8c:1a:66:e5:82:09:ce:f2:34:2f:5d:e8:
                    3d:15:49:bd:bd:aa:88:73:9d:e1:ec:0b:7e:15:ed:
                    30:94:81:c9:76:d6:e4:d8:0c:d6:b0:dc:89:4f:87:
                    b1:1b:f3:a1:1e:8c:68:cf:33:7d:fa:f9:a1:86:fd:
                    5e:be:50:07:cb:37:db:46:70:25:90:71:e5:12:c6:
                    bf:d7:da:8c:18:9b:69:89:04:b9:3e:b4:43:c2:58:
                    c8:d5:92:8e:18:d5:72:b1:d4:30:b0:2d:52:24:2a:
                    be:4a:09:83:0b:20:ef:2c:f7:12:64:e6:f0:a2:9a:
                    46:01:29:ce:75:31:62:b0:b6:59:16:46:56:15:7f:
                    3b:4d:7e:3a:f6:48:8c:93:fe:46:55:b3:b9:cc:31:
                    a1:69:df:41:3b:f5:ec:75:ed:fa:f3:5a:48:55:62:
                    3c:f8:50:73:26:43:9e:f0:ff:88:be:57:f5:a2:78:
                    37:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:92:DC:AE:FD:D8:5C:6E:29:14:CA:10:AE:A7:96:1E:9E:F1:F4:50
            X509v3 Authority Key Identifier:
                keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5e:f0:55:f9:45:03:0f:84:62:40:38:28:eb:9a:ef:57:4e:
         96:44:0f:93:18:41:41:17:c1:83:8d:07:3b:40:0c:80:f3:9d:
         78:39:ed:40:b6:00:48:92:eb:95:c7:e1:b8:a0:f0:bb:2f:50:
         d0:cf:b9:07:27:f9:63:74:20:73:74:dd:0d:c3:59:c5:59:54:
         f2:95:b6:ef:8a:bb:9a:05:86:45:34:b9:d0:2d:a3:9e:02:c3:
         fb:04:b2:2c:11:1c:cd:d8:f2:17:01:0b:ce:73:88:d3:d5:1c:
         5e:9a:3a:fb:f0:bc:9b:d1:ba:cc:f6:c1:0e:00:dc:ca:57:91:
         bb:35:61:6b:92:30:43:63:ae:e5:b4:c0:67:6c:43:c9:09:d0:
         8a:e6:12:51:ef:b5:2b:9e:4c:e8:ff:cd:2f:2f:3e:1f:98:29:
         e2:61:d7:c2:6c:18:3f:da:d9:d2:56:90:ec:20:ce:32:85:e1:
         0e:7c:9a:11:4e:17:5f:ac:df:99:e9:b8:50:9e:10:62:0a:8b:
         85:e0:32:e4:e0:b7:e7:93:41:42:c7:00:9f:f9:e3:07:d5:a5:
         ff:00:f5:a9:17:7a:53:bf:72:52:71:db:bb:4b:35:1f:35:44:
         0c:16:94:06:5c:85:2f:c4:e2:dd:a5:3f:3d:25:f9:3d:0d:93:
         ad:1e:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:47 2025 by rpki-client