Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
File:                     B6zZpp4bhJhwhFisUiB8-sHyw8s.mft (raw, json)
Hash identifier:          6f4ZzvFGVQJF9a/ufTkqNU0DKXdlqrjrwx3vVxaqBrE=
Subject key identifier:   62:CD:3E:41:1C:E7:C0:B7:2E:DF:BC:63:CF:90:7D:FD:71:E0:44:04
Authority key identifier: 07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB
Certificate issuer:       /CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
Certificate serial:       019A00A319EAA0FEEE624CFBC8BB6BB3FB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
Manifest number:          0D64
Signing time:             Mon 20 Oct 2025 08:01:20 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:20 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:20 +0000
Files and hashes:         1: B6zZpp4bhJhwhFisUiB8-sHyw8s.crl (hash: fDGjGQ3+1Z61ufh1ZNnEpowqaLlE0Zx0ZVYsFy4ROaA=)
                          2: lFbceLcRDwmhBa1zgOvzTV71-HE.roa (hash: mrrcAYvrU89Mw/RDvXkAWlxbSPvtKYbzm6HV1Q42sLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:19:ea:a0:fe:ee:62:4c:fb:c8:bb:6b:b3:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07acd9a69e1b8498708458ac52207cfac1f2c3cb
        Validity
            Not Before: Oct 20 08:01:20 2025 GMT
            Not After : Oct 21 08:01:20 2025 GMT
        Subject: CN=62cd3e411ce7c0b72edfbc63cf907dfd71e04404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:ba:5c:48:28:0f:78:79:8d:67:be:e7:0e:
                    9e:26:05:8c:f2:07:3c:bc:5d:aa:34:3b:ea:be:51:
                    ad:cc:8f:62:67:30:a9:7c:26:d4:29:1d:3d:38:b3:
                    a7:ae:cd:49:03:c2:59:5c:25:83:d5:0f:47:6a:5f:
                    6a:a5:cf:b6:a4:67:99:3e:f4:a3:9a:23:04:2c:5b:
                    5d:b8:d9:ad:db:68:f0:4f:26:ad:39:7c:58:bc:ad:
                    1f:a8:4e:48:1a:99:a3:a0:00:2f:9b:6c:b5:8e:40:
                    37:8a:f9:5b:aa:b0:2b:c3:c3:79:f5:60:f8:23:1e:
                    c4:b1:f9:b7:87:1e:35:93:b8:89:5e:93:54:69:a6:
                    de:b5:78:60:17:31:9a:66:52:37:4b:ce:30:1d:c5:
                    37:15:88:f0:3f:7c:f2:20:5f:5c:01:04:ab:06:1f:
                    72:27:1c:3c:c8:af:cc:19:ee:4d:0e:e2:0d:f6:b0:
                    df:36:a7:31:9f:1e:ea:29:b6:a6:be:f5:09:5b:95:
                    b3:7b:0c:ac:11:7c:8c:e7:90:7b:df:1e:11:f8:0c:
                    fa:4e:6b:bc:fe:b9:d9:7f:30:3c:20:08:8d:16:88:
                    22:0b:39:0f:fd:d6:6f:71:e7:8a:b4:f0:3d:62:c0:
                    55:38:42:f0:1e:f9:12:51:81:56:09:7a:a6:35:cb:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CD:3E:41:1C:E7:C0:B7:2E:DF:BC:63:CF:90:7D:FD:71:E0:44:04
            X509v3 Authority Key Identifier:
                keyid:07:AC:D9:A6:9E:1B:84:98:70:84:58:AC:52:20:7C:FA:C1:F2:C3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6zZpp4bhJhwhFisUiB8-sHyw8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/cc8bc8-2440-499d-9d97-ba849778ff58/1/B6zZpp4bhJhwhFisUiB8-sHyw8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:21:80:91:87:2f:d4:9e:d0:9a:d4:dd:b2:6e:76:72:70:b0:
         b7:e2:3e:07:92:43:1d:c2:85:2b:88:f2:66:9b:fd:fe:69:f2:
         e1:84:21:54:b6:25:c0:25:dd:3a:27:1b:7e:8f:f3:99:58:34:
         ea:39:b4:85:ce:1a:97:12:77:15:43:9c:d6:54:e3:3c:18:e8:
         d0:3c:23:da:42:b6:bc:c5:c9:5a:93:56:73:bf:dc:76:63:3c:
         7a:b5:b0:77:d0:22:e0:9f:b9:e8:34:4e:ea:f4:db:f3:5e:83:
         3a:e2:8b:51:d0:86:65:62:3f:72:18:c3:5a:34:32:7f:42:ef:
         90:fe:a5:27:f2:a8:6c:06:a5:9a:87:ef:d2:c4:db:09:e5:d7:
         e0:f8:ca:80:80:07:35:59:93:82:b3:ea:9f:c6:2e:04:b0:f8:
         c3:96:94:1e:ff:93:25:ca:12:fc:ca:ee:1d:79:5e:ac:50:7a:
         07:ce:95:15:5f:1f:d0:72:61:58:69:af:fc:24:c4:a7:88:fa:
         0f:1a:23:3e:5a:dd:7b:8e:6c:31:99:f8:8f:49:55:0a:4e:36:
         ff:94:96:f9:0b:5b:69:df:e1:5a:14:ab:88:97:d7:43:eb:51:
         1d:6f:be:e1:ed:d2:24:f5:ea:33:18:a7:eb:e5:d6:21:48:56:
         d0:95:d0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:51:01 2025 by rpki-client