Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          j+h4iId37O+lXUdbQOC5kxYCHM9YBy0MtdnKUJZjRdw=
Subject key identifier:   57:27:97:27:2D:E6:03:D0:38:1D:1D:35:28:53:35:99:4F:7E:D1:1A
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       0199FD33E2A126AED8A612DE3EEFC9532896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0DC4
Signing time:             Sun 19 Oct 2025 16:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 16:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 16:00:59 +0000
Files and hashes:         1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: cg+vq+NNIu37+uxrpWWdpdzqIBqVivNOyaQ0m8BBo9A=)
                          2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:e2:a1:26:ae:d8:a6:12:de:3e:ef:c9:53:28:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Oct 19 16:00:59 2025 GMT
            Not After : Oct 20 16:00:59 2025 GMT
        Subject: CN=572797272de603d0381d1d35285335994f7ed11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:47:ab:2d:77:2c:f7:7b:46:20:81:25:b8:
                    4c:d5:19:63:6e:cd:c7:49:e4:29:b5:58:77:62:1c:
                    c6:72:13:9a:8b:11:6c:c2:32:9c:53:cd:0e:d9:65:
                    4e:86:a6:be:05:f6:c0:41:40:03:fc:ac:89:6c:db:
                    07:dd:36:6b:16:c5:6a:e1:34:c5:79:59:69:56:81:
                    07:a1:d3:4d:c4:ca:57:df:70:b7:b4:2c:07:37:b5:
                    49:4e:db:cb:25:98:f5:fb:7a:8e:14:f6:5d:56:5c:
                    ee:02:79:73:04:a4:75:e2:a8:38:4c:de:bd:a3:8f:
                    55:81:aa:94:ee:c5:14:0f:17:11:38:c8:48:fa:4c:
                    af:cf:59:06:06:12:5f:36:a7:05:e7:99:ee:3f:1a:
                    68:69:88:03:31:36:51:66:24:af:cb:53:ae:5e:e1:
                    9c:8b:d6:f2:be:f8:16:b0:84:76:18:0a:23:f3:9e:
                    f3:a2:14:b2:cd:56:6c:e1:20:89:cf:3f:9b:28:6a:
                    9f:b4:a9:ef:5e:5f:36:f6:0a:7b:92:7c:ac:06:c3:
                    8a:db:1e:40:8b:53:88:ac:ab:50:19:90:96:c2:74:
                    e6:4e:f4:44:8b:3e:3d:ab:81:01:5e:09:6c:cc:ca:
                    99:fe:86:f8:eb:e9:c6:d9:0c:38:a6:1c:f7:a9:8a:
                    54:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:27:97:27:2D:E6:03:D0:38:1D:1D:35:28:53:35:99:4F:7E:D1:1A
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:50:06:e3:d9:93:e6:aa:d0:bb:09:d2:c4:eb:28:e0:88:fa:
         2e:36:28:fc:57:90:5a:88:ed:80:2d:2d:2e:c1:1c:7b:47:b1:
         13:55:3d:88:fc:e3:65:97:17:fb:d2:b4:21:62:cf:86:96:08:
         0b:6f:62:79:ed:f5:ba:75:91:bd:8c:c8:cc:5d:c9:95:41:43:
         6d:68:02:ba:a8:ac:ec:08:7d:fa:d4:a1:e4:f3:8d:c0:55:13:
         76:72:9d:31:e9:b3:e5:b4:66:ee:6a:b5:e2:41:33:e4:f7:4e:
         3e:20:06:45:2b:ff:3b:4e:78:3e:e0:e0:07:36:0c:ad:c4:e7:
         11:14:50:22:9c:57:07:a8:ad:82:97:3e:a4:6e:a6:1f:d1:09:
         46:20:93:b2:ed:82:1c:11:68:0e:06:3c:df:57:5c:e4:51:b0:
         2f:70:59:6e:ab:5c:19:97:4d:34:a4:f7:b0:d2:01:53:3d:38:
         b3:20:a6:9b:60:1d:07:ae:44:98:65:ca:0c:43:14:3c:f3:78:
         09:e7:06:6a:f7:de:cd:98:7a:b2:05:a6:11:c0:ff:b3:73:e9:
         bc:93:22:ea:fe:18:0a:25:af:78:8d:b5:4b:72:e1:7b:06:38:
         9c:2f:83:bb:49:9d:e6:57:04:2d:0e:29:20:25:aa:7c:57:87:
         97:f0:23:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client