Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
File:                     B2OUhFMlCEu573jU9xf8S1Rfp-0.mft (raw, json)
Hash identifier:          pU3z2FiELg6XmQYXOBVf6jwEc3yakAYw4cPjLlBkTmY=
Subject key identifier:   C8:8F:E6:85:BA:9E:24:1F:E4:A4:32:8B:27:6C:14:95:4A:C3:BE:44
Authority key identifier: 07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED
Certificate issuer:       /CN=076394845325084bb9ef78d4f717fc4b545fa7ed
Certificate serial:       0199FBEB1DD4A98FEE7AC49147A7B8683D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
Manifest number:          0ACF
Signing time:             Sun 19 Oct 2025 10:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:53 +0000
Files and hashes:         1: B2OUhFMlCEu573jU9xf8S1Rfp-0.crl (hash: DFk7ps3w0rJ9hbudO6MpR/lXu19V4Mi333o/pQYGgFM=)
                          2: XpdAC2CuEGkYk1z1zkOTjlju-Rg.roa (hash: 1El56OSjhFHRSJhlBb4c0HE0W+XJGN0QCFbnBM5w1i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:1d:d4:a9:8f:ee:7a:c4:91:47:a7:b8:68:3d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=076394845325084bb9ef78d4f717fc4b545fa7ed
        Validity
            Not Before: Oct 19 10:01:53 2025 GMT
            Not After : Oct 20 10:01:53 2025 GMT
        Subject: CN=c88fe685ba9e241fe4a4328b276c14954ac3be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:69:8b:31:94:f7:0a:c2:52:77:94:02:c8:50:
                    55:3d:36:8f:e8:d6:64:e8:c8:0e:85:aa:1d:10:4d:
                    da:94:8d:6e:5b:f3:f8:fc:69:2f:28:14:ca:b3:9f:
                    07:ca:70:c3:da:87:3e:74:ad:60:3a:f1:ad:ae:d0:
                    63:22:26:ab:44:fc:ee:49:5d:06:30:10:35:58:d8:
                    48:0c:95:a2:ba:0b:87:77:f2:36:fe:d9:7a:d8:69:
                    bf:bd:ee:01:29:67:d4:30:98:e1:22:e4:0f:ef:01:
                    2c:d9:f0:8b:66:64:c8:1c:73:bc:0f:0d:9a:cb:b4:
                    30:75:b0:e2:7f:34:49:20:01:f7:b3:03:3d:d1:01:
                    06:e3:e7:fc:b0:8e:0c:58:a8:3a:88:62:54:70:15:
                    84:cc:ce:ef:0d:b1:88:74:0b:65:d2:85:83:10:c3:
                    a6:f0:49:d9:10:4e:4f:cc:14:cc:5a:d9:2c:bb:a4:
                    b6:1e:79:39:4c:33:83:41:06:fe:1e:fe:4a:ca:e5:
                    fa:93:6f:a4:07:f5:8e:38:3a:6b:4a:5c:8c:3e:e4:
                    46:05:4d:0a:cc:a5:57:df:e1:ee:e2:61:bf:38:20:
                    58:14:a7:0c:c1:0e:4e:05:8b:8a:fb:6b:5a:5c:47:
                    3c:f7:6c:89:89:bf:51:5f:78:4a:ca:4c:bb:ab:1f:
                    94:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:E6:85:BA:9E:24:1F:E4:A4:32:8B:27:6C:14:95:4A:C3:BE:44
            X509v3 Authority Key Identifier:
                keyid:07:63:94:84:53:25:08:4B:B9:EF:78:D4:F7:17:FC:4B:54:5F:A7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2OUhFMlCEu573jU9xf8S1Rfp-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e996aa-2dcb-4c43-93fd-34b7d17ff715/1/B2OUhFMlCEu573jU9xf8S1Rfp-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:12:30:73:e0:6e:44:88:a5:a5:a0:d0:2c:a0:d2:06:99:35:
         df:b7:8b:37:97:28:0c:8f:03:a0:fd:e1:8a:6c:32:f0:a5:6c:
         39:89:28:d2:82:f8:06:d4:8d:06:22:8a:77:3e:ff:74:07:a3:
         51:66:52:ee:34:47:52:15:10:35:25:e5:56:87:9c:3a:98:0f:
         5d:24:71:1b:63:e5:01:0d:41:77:4a:46:e1:f2:66:35:bd:6f:
         9f:38:3e:b3:33:f9:ad:27:9d:36:05:7a:b6:d9:86:35:9d:a4:
         76:f4:6f:b2:91:64:01:fe:a6:a1:6e:7e:6b:01:69:2d:59:f4:
         3e:03:8f:ff:07:97:5d:55:b6:93:8f:91:4d:75:8b:fa:d5:82:
         bb:d8:d1:79:a4:e3:b5:d5:70:84:db:f9:6a:f9:d9:84:c0:39:
         24:86:f1:f7:9f:d5:ab:e5:13:58:78:f4:7f:96:7f:8c:6e:6e:
         ea:97:e5:9e:92:c3:59:03:c8:37:71:03:fb:ff:03:ef:7b:1c:
         40:00:57:17:45:45:d0:21:dc:5b:8a:0e:02:3c:54:02:b9:81:
         66:f8:99:71:70:ae:fc:ca:df:34:b2:55:25:88:55:c3:5e:b6:
         b8:b4:1e:8d:93:dd:3f:71:bc:05:89:5c:15:36:86:51:d5:df:
         30:fc:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:39 2025 by rpki-client