Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
File:                     B_8L7Dwze0fdzzZvQwFQO-eD15g.mft (raw, json)
Hash identifier:          WLZeAc9pqSholSOkfHT3Yy3DQDO5Z2F+eNqPF2N03no=
Subject key identifier:   2F:1E:53:39:2A:16:EE:C6:A3:77:25:BD:CD:21:06:24:BF:1A:14:ED
Authority key identifier: 07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98
Certificate issuer:       /CN=07ff0bec3c337b47ddcf366f4301503be783d798
Certificate serial:       0199FCFD910A03EC764F0986680799C3EED4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
Manifest number:          0D48
Signing time:             Sun 19 Oct 2025 15:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:40 +0000
Files and hashes:         1: B_8L7Dwze0fdzzZvQwFQO-eD15g.crl (hash: si3HDqOTLs1RzoO1+fHBhA+OIzJspUhrfn6YL3dMR7o=)
                          2: CxCDh51hJryNPM51K0PBFglnj6s.roa (hash: NMl10T/JTlSsGDyTehyeNpuYxe8bg8ZQ55g2bqhBosQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:91:0a:03:ec:76:4f:09:86:68:07:99:c3:ee:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ff0bec3c337b47ddcf366f4301503be783d798
        Validity
            Not Before: Oct 19 15:01:40 2025 GMT
            Not After : Oct 20 15:01:40 2025 GMT
        Subject: CN=2f1e53392a16eec6a37725bdcd210624bf1a14ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d6:af:9b:5d:70:d0:f1:79:ce:72:49:a6:47:
                    eb:99:6d:92:ce:e7:78:7d:d4:08:98:e0:30:57:6a:
                    d3:90:52:58:4d:b3:4a:0e:95:d3:16:aa:3d:4a:b5:
                    85:4c:0b:e1:c0:4b:e5:54:8a:8a:79:25:33:17:11:
                    8e:cf:8b:99:d9:56:3f:2f:c3:e7:cb:f6:eb:e3:83:
                    13:be:aa:9c:34:0d:9c:b8:3a:99:c8:49:68:91:96:
                    61:4b:0e:cf:0b:bf:72:81:2c:c0:e4:1c:78:33:91:
                    80:f2:00:e7:ab:cc:d3:a5:ee:3a:5c:6c:9b:a3:1d:
                    9f:8e:a3:a2:ea:b9:75:55:4f:06:5c:40:0f:1d:1f:
                    f8:20:42:1b:63:7b:d9:5d:93:6a:f0:85:d9:23:6f:
                    10:08:a5:8f:d3:95:ab:c2:1a:13:fb:7c:6d:f9:75:
                    60:4f:05:dd:53:4d:22:95:8c:24:3a:5b:aa:8c:17:
                    f3:76:6c:e4:48:32:b1:de:69:66:ac:ff:57:fc:55:
                    9a:84:cd:a2:2b:b0:8b:79:e6:20:ef:74:99:df:a8:
                    ec:df:1b:55:fa:a5:a8:ba:56:3b:85:39:6e:fc:86:
                    23:0d:0e:f2:9a:23:a2:e9:f2:b8:15:e4:23:95:47:
                    d2:99:22:e9:0e:33:7e:36:3d:5f:71:e7:b3:26:37:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1E:53:39:2A:16:EE:C6:A3:77:25:BD:CD:21:06:24:BF:1A:14:ED
            X509v3 Authority Key Identifier:
                keyid:07:FF:0B:EC:3C:33:7B:47:DD:CF:36:6F:43:01:50:3B:E7:83:D7:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_8L7Dwze0fdzzZvQwFQO-eD15g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/705eab-6eac-4ff8-b6c6-70203bf356fd/1/B_8L7Dwze0fdzzZvQwFQO-eD15g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:2d:73:96:e8:83:7c:26:36:c8:d1:45:e9:21:74:1a:0c:
         2b:c5:eb:f0:96:92:c7:18:76:2d:1d:93:20:7f:9b:e0:a7:18:
         0d:a0:50:02:0f:83:c1:17:c6:52:92:50:70:0c:4d:a3:7f:b1:
         e9:bb:2f:1d:49:11:a4:7f:b9:18:ba:54:35:0e:26:2b:f8:89:
         88:71:6c:e5:fb:62:e7:77:3b:34:dc:91:4f:ce:40:8b:87:18:
         24:9f:0f:91:33:07:94:ee:6e:ad:10:7c:fb:03:5c:f3:a2:af:
         e6:08:bd:27:f5:20:80:af:d9:10:d1:4b:09:db:43:7f:3c:88:
         f3:a3:94:e6:9f:03:be:9f:b0:8b:15:7b:3d:5a:09:b3:16:66:
         18:7a:f5:5a:6d:98:79:5a:4f:a7:9f:9a:99:ac:39:f2:50:75:
         e8:6f:00:02:7f:10:3f:07:86:58:a1:c5:50:a1:5a:d6:3e:48:
         6a:a6:88:01:ca:5d:24:67:25:17:06:31:7c:8b:34:e0:3b:6a:
         3d:b2:f6:1e:27:99:df:49:03:52:47:f4:d3:95:e1:63:01:02:
         ab:98:ec:43:71:55:e7:ec:ac:05:23:b6:8c:b0:2f:8b:85:2e:
         21:5b:b9:e3:5c:d8:23:1a:d2:43:ce:18:6f:c3:3d:80:8d:84:
         c8:89:92:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:09 2025 by rpki-client