Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
File:                     E-KBR1t7-ND6H2adWtLeFjXowE8.mft (raw, json)
Hash identifier:          iPlFv73LdKkIIv56d2Ili9U7Ce41r0lC+s2OkclMulI=
Subject key identifier:   D7:A8:52:5D:96:A6:11:C1:0A:FE:53:94:08:2E:3D:93:B5:34:E4:12
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       0199FEEBF37E1E44623950F31CF70C38A691
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
Manifest number:          12B1
Signing time:             Mon 20 Oct 2025 00:01:40 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:40 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:40 +0000
Files and hashes:         1: Cbgx-BQbS0FHwmRsgonuP_y0uIw.roa (hash: LCGI3/5d7XNi/Gu71Peh/rfncJ6J664qZ+UlhSx3wTg=)
                          2: E-KBR1t7-ND6H2adWtLeFjXowE8.crl (hash: VREujmgNakoW5bPRPuCLmzgripfvySVRoDdcI8kJGIs=)
                          3: OJiEpuu19DL0DK8EqfynqGFXkQQ.roa (hash: qdWhWnRWtAIkyoxDYPJOupy3MISxIyqCu/0vET2RQjw=)
                          4: RV4nVFIosillQgPXUi3Rb-YOGqE.roa (hash: 0C9sINAaIPU+479WwDvqzeKATHZb5hKHHasDy8WJ6tA=)
                          5: W5VQv-ze_wds3sZaktK1dB3TlqA.roa (hash: 3Qbtjb177rcscniRobuAC/Kh8GJ/smUC+jFvjdESqGQ=)
                          6: pN5SnkQN19ou2x5UZOfTyn6_Rb0.roa (hash: KbWqEMgAWb6IcUnuvD0+WC5dIqXTlJgmk7uOCLNfK1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:eb:f3:7e:1e:44:62:39:50:f3:1c:f7:0c:38:a6:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Oct 20 00:01:40 2025 GMT
            Not After : Oct 21 00:01:40 2025 GMT
        Subject: CN=d7a8525d96a611c10afe5394082e3d93b534e412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2a:ba:12:13:81:b6:71:2f:b6:8f:18:25:ea:
                    0f:ef:a2:4d:2e:e4:32:51:5c:01:f8:8f:51:21:c0:
                    a6:d7:bb:59:5b:70:6a:6a:5d:5f:8f:27:b4:51:4e:
                    56:e5:2d:7a:f9:80:06:87:81:a4:90:83:c5:e9:f2:
                    ec:57:a5:81:51:5e:f6:d3:81:26:f7:ef:e5:19:30:
                    79:51:23:f9:a8:fb:5c:2e:6b:66:d1:b8:bc:1a:e1:
                    16:77:5e:f0:77:f2:01:09:51:bf:2d:a1:23:85:6a:
                    2a:d6:a1:2f:95:e8:77:f6:42:ce:44:e2:bb:88:c2:
                    97:ca:24:b2:c8:e8:6b:ee:f2:a5:c3:8a:dc:83:3d:
                    98:9b:3c:46:ea:dc:b1:e4:31:01:dd:79:01:e8:3e:
                    9c:24:f2:30:ae:61:d5:c3:f9:13:7c:c1:19:10:4b:
                    7a:50:ae:50:bf:15:a3:0e:5b:a7:e1:0b:27:3c:7d:
                    f2:b4:68:98:4c:c2:06:92:f1:87:77:e9:31:84:76:
                    e3:98:f9:9c:68:47:d9:48:47:3a:53:c0:b2:00:8d:
                    cc:45:55:25:4f:b6:bc:85:a5:da:b8:ae:df:f2:20:
                    a1:95:80:40:e0:c7:54:26:1c:30:12:74:3f:d1:6f:
                    8b:76:31:0a:07:33:d8:f9:c8:27:0a:a3:79:11:d8:
                    b5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A8:52:5D:96:A6:11:C1:0A:FE:53:94:08:2E:3D:93:B5:34:E4:12
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a1:71:3f:9f:7b:5c:85:1d:7b:9b:eb:f8:6f:c3:4a:b3:2b:
         40:dd:09:a8:9f:5b:4b:72:bd:a3:55:fb:11:ba:ec:1f:40:f8:
         ad:5b:f7:ff:76:1f:43:53:29:5e:5e:0f:12:92:53:be:5c:f8:
         ef:32:6c:b0:00:29:f7:81:a3:c8:d8:67:14:61:ed:47:0d:85:
         99:c5:c8:cf:63:26:b2:ba:cb:b7:ae:f6:43:f5:0c:aa:90:56:
         61:ef:5f:d6:9e:1e:8a:dc:be:eb:da:02:bb:c0:60:fe:5d:4b:
         ed:36:55:f2:38:3e:a0:9b:66:9f:60:80:3c:9c:b3:cd:5c:9c:
         ce:9d:60:5d:2c:cc:75:7f:5d:b0:e0:35:1a:65:e1:3a:03:f7:
         41:33:d6:91:d9:00:34:56:3e:2a:b1:77:35:8a:d3:d2:7f:d0:
         e3:d2:9f:d3:84:7b:29:21:d4:45:0a:72:23:ca:42:5e:5a:8f:
         19:f1:19:d7:24:ca:e8:09:fe:75:d2:44:7a:60:7a:e2:49:b4:
         3a:f7:f3:50:79:b7:95:15:c8:8a:15:cd:e3:c0:cb:25:ce:bd:
         1f:56:b4:fb:6f:f4:2e:ee:4d:cf:68:cc:52:1a:e2:91:d1:2b:
         b4:71:ee:ff:9c:69:b5:63:42:99:ce:a5:0b:f2:41:03:0b:92:
         7a:ea:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:53 2025 by rpki-client