Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
File:                     ur1G6GLeAxkf8xMazHjhlwlZahw.mft (raw, json)
Hash identifier:          LlCpCtJ5XvDILxUJ5szfmRa9E25l1tHzYDwXJ+tWlb8=
Subject key identifier:   D0:BF:E6:93:EE:D9:58:2C:13:A8:7A:02:B2:5B:D9:78:A6:90:EB:82
Authority key identifier: BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C
Certificate issuer:       /CN=babd46e862de03191ff3131acc78e19709596a1c
Certificate serial:       0199FE46B41233FC874EAD735D555F7410F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
Manifest number:          BA
Signing time:             Sun 19 Oct 2025 21:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:10 +0000
Files and hashes:         1: ur1G6GLeAxkf8xMazHjhlwlZahw.crl (hash: Yx34kT7OoebuIpYBCKnaeluPtBpXRdfRJ+1ff6Xt6KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:b4:12:33:fc:87:4e:ad:73:5d:55:5f:74:10:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=babd46e862de03191ff3131acc78e19709596a1c
        Validity
            Not Before: Oct 19 21:01:10 2025 GMT
            Not After : Oct 20 21:01:10 2025 GMT
        Subject: CN=d0bfe693eed9582c13a87a02b25bd978a690eb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3c:93:90:4d:f6:c5:86:6e:24:bd:2a:d1:95:
                    ec:ef:07:bb:a9:b3:2a:ad:3b:0e:0d:7e:8c:ef:6f:
                    a9:20:f4:44:6b:84:c6:2b:fb:d8:29:60:85:43:0c:
                    b1:fa:bc:ed:9e:6e:de:e9:60:01:ce:73:f3:6c:01:
                    0e:1b:c4:88:10:f5:fd:7b:42:0c:3d:01:a6:8a:60:
                    7f:d8:3f:03:42:45:96:94:69:42:e5:ad:c7:00:92:
                    2f:a0:d7:b8:4d:dd:ba:d9:f5:cf:5d:f5:b0:71:60:
                    8e:53:d3:43:cd:1e:8a:a6:86:1b:95:c1:1d:71:b7:
                    71:07:27:d3:94:31:fd:f4:10:63:3d:23:00:b7:7b:
                    2f:d0:f7:fc:f2:66:47:a9:e1:36:ae:b7:53:67:e6:
                    29:4e:51:c1:4d:b4:84:2a:f7:99:34:85:a8:4e:8a:
                    c7:9c:1b:6d:1e:ab:70:ed:d0:37:12:26:25:48:4e:
                    12:8e:c2:fe:9a:cd:13:2c:cd:32:3d:4a:74:96:23:
                    21:ba:a4:9e:7b:8d:e5:10:20:64:d4:e1:6d:0d:be:
                    16:c5:e7:da:52:a4:0a:9f:14:6f:ed:63:78:c7:d1:
                    77:af:da:92:0a:e1:cb:7e:13:e9:bd:03:a1:72:76:
                    ed:72:4b:8b:4a:75:10:89:9d:f0:a2:4a:b7:a5:4f:
                    1c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BF:E6:93:EE:D9:58:2C:13:A8:7A:02:B2:5B:D9:78:A6:90:EB:82
            X509v3 Authority Key Identifier:
                keyid:BA:BD:46:E8:62:DE:03:19:1F:F3:13:1A:CC:78:E1:97:09:59:6A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ur1G6GLeAxkf8xMazHjhlwlZahw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3f5e66-eccc-437c-89f5-26fa6aee8fe5/1/ur1G6GLeAxkf8xMazHjhlwlZahw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:0b:97:8a:1b:2e:b7:37:51:2c:39:20:d7:4f:d9:4e:6e:7e:
         bd:d7:c9:5d:bc:40:47:f9:6e:4f:5b:07:f6:0b:09:66:2c:1d:
         55:c1:e2:d8:45:0f:89:15:a8:31:9a:c5:70:8b:da:a5:7e:15:
         f9:3a:46:fc:fa:c4:44:eb:ea:bd:05:4e:69:ef:94:2b:de:47:
         a1:ea:58:0f:ff:ca:dc:28:96:f7:a9:b6:39:9d:04:1c:38:29:
         6f:9b:1d:33:23:b1:31:f1:8f:aa:9c:94:d7:5a:7d:e0:a2:42:
         37:bc:4c:62:5d:18:db:87:ab:02:6d:0e:04:a4:e0:d6:dc:7c:
         80:6b:5c:b6:88:89:ed:e8:91:81:ed:5c:d0:59:b9:19:f8:da:
         63:ec:a4:7a:95:1b:0c:9c:c9:51:5d:1d:a2:12:f6:97:18:fe:
         cf:b9:0b:15:dc:54:23:23:c6:db:be:bd:8b:94:3d:3b:d1:8d:
         b7:3b:a8:05:b2:79:33:ae:39:34:3c:9b:e1:86:d4:22:e7:f1:
         8b:79:91:55:21:f2:8c:2e:30:73:78:57:2a:60:8d:ba:0f:b0:
         d9:2b:e1:a5:ec:8f:34:74:90:d6:56:6f:49:38:b8:fa:c6:e7:
         5c:7e:d4:cc:3c:70:41:f7:cf:be:a1:ba:80:7e:ee:c4:ba:0c:
         44:0a:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:49 2025 by rpki-client