Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
File:                     B-jeamdMH-qtmpzNPOoi3yYXTyI.mft (raw, json)
Hash identifier:          AFyWJr9EhyOkTgPe989ugXxKKeiWsDzWckvCPRd2rGs=
Subject key identifier:   5B:52:7F:63:9E:9C:DC:A1:C7:9C:3D:EA:FE:5B:6F:92:87:E4:79:B4
Authority key identifier: 07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22
Certificate issuer:       /CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
Certificate serial:       0199FD33F6E7B8B65EA1E8CA2369A88F3AF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 16:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:05 +0000
Files and hashes:         1: B-jeamdMH-qtmpzNPOoi3yYXTyI.crl (hash: 8jg70WoE6cZhPOzzQ/ZfPwdulR6CZP0ni+bWLrT2iQY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f6:e7:b8:b6:5e:a1:e8:ca:23:69:a8:8f:3a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e8de6a674c1feaad9a9ccd3cea22df26174f22
        Validity
            Not Before: Oct 19 16:01:05 2025 GMT
            Not After : Oct 20 16:01:05 2025 GMT
        Subject: CN=5b527f639e9cdca1c79c3deafe5b6f9287e479b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6f:81:bb:ee:52:84:1f:e7:54:b7:71:be:b0:
                    8c:e3:e2:e1:0c:d9:8f:d5:b6:3d:82:89:a3:74:0e:
                    f2:1d:8f:59:e9:15:8d:72:f4:61:e8:88:77:89:9f:
                    82:00:f2:e5:cd:06:ba:2d:2d:5a:87:14:2b:d6:11:
                    80:c9:7f:f3:53:2d:76:fd:a0:e0:f4:36:70:a4:11:
                    c4:ac:63:94:06:5e:3e:bd:bb:82:df:52:b0:68:19:
                    41:2d:10:44:ff:98:e2:d8:db:8d:3e:9d:02:87:1f:
                    5d:e2:bc:f0:04:1b:f1:4c:3e:76:5c:86:f3:f7:60:
                    9f:21:1b:e1:24:74:80:96:25:26:61:19:dd:0b:25:
                    84:7a:59:f8:db:f3:62:99:5b:28:7c:2d:88:24:e9:
                    1b:3c:18:3d:3e:46:8e:55:47:a7:e1:91:79:df:64:
                    9e:65:64:99:f8:bf:e0:42:b1:70:3a:77:6f:29:67:
                    17:75:2d:c5:03:02:1f:41:63:cf:b3:77:6f:8b:5f:
                    c3:0a:4f:ea:77:67:9a:cf:d1:54:86:ec:ca:85:4c:
                    56:15:30:d9:d1:cf:86:cd:a1:39:b9:07:20:38:55:
                    19:4b:c5:c5:2a:79:f3:cb:a5:48:07:61:ab:d9:72:
                    90:26:88:7a:6b:51:52:08:35:88:8d:92:22:d4:fd:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:52:7F:63:9E:9C:DC:A1:C7:9C:3D:EA:FE:5B:6F:92:87:E4:79:B4
            X509v3 Authority Key Identifier:
                keyid:07:E8:DE:6A:67:4C:1F:EA:AD:9A:9C:CD:3C:EA:22:DF:26:17:4F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-jeamdMH-qtmpzNPOoi3yYXTyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/50716b-97ec-4436-bddd-9bea7171be8a/1/B-jeamdMH-qtmpzNPOoi3yYXTyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:b6:b8:1a:83:d7:e9:10:28:62:05:00:d0:43:6a:c0:ae:
         fc:da:d5:1a:6d:46:0c:7d:f4:5d:78:d6:d8:fa:34:f8:7d:22:
         d9:9a:07:2a:6b:af:f9:0c:8a:52:1d:c7:0a:51:ec:6c:c4:4f:
         d3:e3:72:99:53:69:3b:8e:e7:f9:2a:30:bb:1a:08:80:fd:0a:
         e8:fc:ef:1b:9a:16:05:f4:fa:56:e8:5a:1d:2f:32:2a:e8:29:
         13:05:1f:3d:5a:fb:7d:fd:20:cd:15:f8:4b:ef:74:7f:0b:21:
         f8:df:b9:4d:55:41:ba:10:af:e1:c9:e2:77:7c:61:8e:46:ce:
         4c:5b:db:4e:b2:1f:82:95:21:3e:f2:bf:42:cc:45:88:e8:b7:
         8e:52:d2:f8:6f:10:27:42:42:1f:f5:14:96:54:53:d9:34:5b:
         f5:a1:2d:0a:88:ab:1c:81:62:ca:a1:6d:88:d5:e3:a3:2b:c7:
         e2:05:20:0f:43:02:b4:8f:36:9b:f8:38:7b:0e:5d:d3:c5:ba:
         19:4d:d9:05:3b:13:47:a8:6b:ef:8a:62:b8:21:85:8c:f9:06:
         cc:e8:e7:bc:f0:b9:b1:84:bf:f1:fc:ef:ee:d7:a4:fc:b7:ec:
         82:f1:27:8b:50:0f:b8:a0:87:f6:7e:20:47:0c:45:bc:73:db:
         0d:a8:55:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9M/bnuLZeoejKI2mojzr4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZThkZTZhNjc0YzFmZWFhZDlhOWNjZDNjZWEyMmRmMjYx
NzRmMjIwHhcNMjUxMDE5MTYwMTA1WhcNMjUxMDIwMTYwMTA1WjAzMTEwLwYDVQQD
Eyg1YjUyN2Y2MzllOWNkY2ExYzc5YzNkZWFmZTViNmY5Mjg3ZTQ3OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm+Bu+5ShB/nVLdxvrCM4+LhDNmP
1bY9gomjdA7yHY9Z6RWNcvRh6Ih3iZ+CAPLlzQa6LS1ahxQr1hGAyX/zUy12/aDg
9DZwpBHErGOUBl4+vbuC31KwaBlBLRBE/5ji2NuNPp0Chx9d4rzwBBvxTD52XIbz
92CfIRvhJHSAliUmYRndCyWEeln42/NimVsofC2IJOkbPBg9PkaOVUen4ZF532Se
ZWSZ+L/gQrFwOndvKWcXdS3FAwIfQWPPs3dvi1/DCk/qd2eaz9FUhuzKhUxWFTDZ
0c+GzaE5uQcgOFUZS8XFKnnzy6VIB2Gr2XKQJoh6a1FSCDWIjZIi1P1sAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtSf2OenNyhx5w96v5bb5KH5Hm0MB8GA1UdIwQY
MBaAFAfo3mpnTB/qrZqczTzqIt8mF08iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQt
OWJlYTcxNzFiZThhLzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS81MDcxNmItOTdlYy00NDM2LWJkZGQtOWJlYTcxNzFiZThh
LzEvQi1qZWFtZE1ILXF0bXB6TlBPb2kzeVlYVHlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVe2uBqD
1+kQKGIFANBDasCu/NrVGm1GDH30XXjW2Po0+H0i2ZoHKmuv+QyKUh3HClHsbMRP
0+NymVNpO47n+SowuxoIgP0K6PzvG5oWBfT6VuhaHS8yKugpEwUfPVr7ff0gzRX4
S+90fwsh+N+5TVVBuhCv4cnid3xhjkbOTFvbTrIfgpUhPvK/QsxFiOi3jlLS+G8Q
J0JCH/UUllRT2TRb9aEtCoirHIFiyqFtiNXjoyvH4gUgD0MCtI82m/g4ew5d08W6
GU3ZBTsTR6hr74piuCGFjPkGzOjnvPC5sYS/8fzv7tek/LfsgvEni1APuKCH9n4g
RwxFvHPbDahV1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:35 2025 by rpki-client