Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          GJyRrDZK1W5CM4/EHItWwaxXsvLp8HS356A0ZRciTeE=
Subject key identifier:   3F:2A:16:9F:53:A5:7C:99:65:F4:30:84:D2:7B:2B:34:8A:46:8F:82
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       0199FDDA036DD8D975232AB98CDC11E9D299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 19:02:27 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:27 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:27 +0000
Files and hashes:         1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: nbb7GzZjCW4iB/rcin6tD5+aOPcSFKUogWPYBbUD3ng=)
                          2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:03:6d:d8:d9:75:23:2a:b9:8c:dc:11:e9:d2:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Oct 19 19:02:27 2025 GMT
            Not After : Oct 20 19:02:27 2025 GMT
        Subject: CN=3f2a169f53a57c9965f43084d27b2b348a468f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:76:58:bb:b4:73:eb:bd:20:e3:f3:25:9f:91:
                    c0:6b:e0:68:65:0a:08:3f:c4:34:0e:17:ae:ca:7a:
                    64:b6:af:fb:37:ba:6b:a0:eb:82:aa:2d:93:73:01:
                    80:5a:3c:7d:fb:ca:37:73:26:89:d2:ce:05:45:b2:
                    e5:13:75:9f:66:f2:db:83:1b:64:61:3a:e7:13:a0:
                    06:68:13:b0:9a:d8:e2:5f:d6:b6:d8:aa:d2:34:1a:
                    1e:ff:e3:6c:db:2c:b0:4c:d0:82:80:3f:24:9f:88:
                    d2:73:a8:63:2b:a5:18:1c:60:98:f1:e9:d0:36:eb:
                    74:22:94:2d:14:5e:45:3b:45:29:a0:00:6e:b6:2f:
                    5c:2e:6d:a2:22:e1:4b:19:2f:e0:b5:9a:0d:71:7f:
                    16:37:e4:b8:ff:06:6c:e8:51:13:4e:c0:83:38:ad:
                    8f:b5:e0:d0:3d:d8:9b:e2:1f:ba:7e:7e:15:41:05:
                    34:50:0b:3f:7c:c9:60:b0:cb:5f:7d:e5:48:7d:2b:
                    cd:87:0b:a3:cc:ae:00:e0:e3:18:08:b8:08:42:1a:
                    ca:0a:9e:c9:3e:98:7f:40:ef:63:a5:be:55:2f:ec:
                    7f:d2:6a:b9:c1:8b:5d:0d:4f:9a:ea:2a:1d:47:c3:
                    15:c7:a4:9d:d0:a7:de:ad:bf:75:22:23:28:ae:4f:
                    34:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2A:16:9F:53:A5:7C:99:65:F4:30:84:D2:7B:2B:34:8A:46:8F:82
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:75:18:e4:68:ef:62:d6:b1:65:84:cb:7b:39:90:5b:d1:3c:
         16:99:d6:c6:48:25:3c:f8:5b:5a:6b:2f:7c:32:89:fe:cd:f1:
         f3:c9:f0:9b:ee:42:95:ec:30:84:3f:32:e4:3a:ff:3a:c2:73:
         fe:11:d6:fc:b5:12:a6:e3:aa:c1:ba:7b:b9:58:7e:30:9e:b5:
         94:ac:25:da:48:a8:52:ae:75:74:f3:49:68:eb:12:fe:05:6b:
         2b:d1:cd:5c:67:f4:50:8b:55:fb:75:87:4f:45:03:a2:fd:c1:
         1b:eb:dd:e2:5a:fd:2e:f0:dd:1e:50:a9:6d:2c:01:6f:45:96:
         af:db:91:a4:6f:6b:ce:0d:b2:2a:f7:66:b9:d4:d8:8a:8a:42:
         d0:6c:04:2e:82:27:78:d3:06:a5:d7:98:3f:1a:c4:a7:42:3b:
         ea:e2:3c:e7:bc:28:ed:51:48:1d:e0:4c:23:99:d3:8f:9f:93:
         59:02:b5:5c:e5:d0:09:25:1a:02:b8:14:89:7a:9f:a2:64:14:
         56:20:53:57:50:c1:ba:47:fb:ca:19:46:de:cb:06:ae:97:91:
         d2:1f:2f:1b:0b:e0:d6:63:9c:90:99:45:d5:9a:6e:02:c8:cd:
         27:c1:d8:e5:34:7c:13:30:9e:a9:74:02:20:fa:89:91:03:d2:
         64:29:08:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:55 2025 by rpki-client