Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
File:                     biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json)
Hash identifier:          w1auZixY5B10M++rE7o2vsE4L+APSOO00DOavsAcA+g=
Subject key identifier:   59:1C:40:E0:84:B1:50:B0:48:CB:EB:AE:B7:D6:3A:14:C0:9E:5C:83
Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9
Certificate issuer:       /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
Certificate serial:       0199FAD7B81F4018C400134FC8EDCFD55F36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
Manifest number:          7F
Signing time:             Sun 19 Oct 2025 05:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:05 +0000
Files and hashes:         1: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: 1z8ibhF0yqgG+tHt3fbrVB4CTLMlEDjvGcKiL3MizjM=)
                          2: dO5qe6cxV0dMzJ8102AvpINSdMo.roa (hash: C4Rut7Vvkpw4iE7xeScMUUVHRIaOgC0yzl/9M7TJh5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:b8:1f:40:18:c4:00:13:4f:c8:ed:cf:d5:5f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9
        Validity
            Not Before: Oct 19 05:01:05 2025 GMT
            Not After : Oct 20 05:01:05 2025 GMT
        Subject: CN=591c40e084b150b048cbebaeb7d63a14c09e5c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e2:21:be:21:94:cc:4c:f2:96:f5:f1:e9:b3:
                    19:c2:70:a5:3f:9d:9d:fa:a6:1e:aa:3b:06:6f:56:
                    8f:b3:54:f2:16:57:9f:61:f5:3c:26:1e:49:96:5b:
                    35:1d:2c:33:fa:61:7b:39:a6:0a:fd:69:47:b9:9e:
                    9e:b5:5c:35:24:95:dd:17:61:43:73:77:f3:ed:65:
                    e6:54:01:93:3e:bb:40:62:6f:19:31:fe:d6:f3:27:
                    ad:02:c2:4c:3a:2b:60:c3:d4:68:1f:c4:85:69:7d:
                    90:a7:af:5f:35:1f:89:fc:0f:fe:46:26:8d:e9:cf:
                    52:85:86:20:0b:e1:fa:8c:9a:ed:f0:fe:db:f6:16:
                    7f:ef:07:45:73:f8:d0:d6:05:d3:8c:37:6a:d4:4d:
                    6a:af:c6:3c:f4:79:04:35:6e:8a:58:6d:34:e6:a5:
                    41:7f:67:73:be:75:dd:c1:7a:b5:fd:26:ac:3d:27:
                    1a:9c:3b:d8:16:b1:ce:9a:ea:48:d6:bd:19:54:01:
                    89:d5:5b:ba:f6:45:d5:69:04:02:ab:f1:68:21:92:
                    84:67:8e:1a:08:40:41:55:8e:23:14:29:87:6b:39:
                    1b:7d:f5:61:c0:2d:07:62:bb:b8:73:0b:dd:bd:f2:
                    55:43:85:ed:3e:2b:52:ac:76:ef:b9:70:ea:7f:3f:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:40:E0:84:B1:50:B0:48:CB:EB:AE:B7:D6:3A:14:C0:9E:5C:83
            X509v3 Authority Key Identifier:
                keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:6d:68:9d:0e:f2:17:a4:43:bd:ce:74:a6:20:ed:16:df:
         a0:1d:31:03:35:48:ef:77:af:65:d0:50:e6:f0:58:7f:32:05:
         02:d3:e3:ae:55:74:e2:e2:0c:78:7d:54:66:57:5b:f3:de:11:
         91:e3:73:a9:42:82:6b:7e:d4:d8:e9:37:e2:f8:03:02:17:cd:
         0c:44:96:d5:73:b5:5d:db:f3:74:a8:ec:60:05:e0:62:ee:71:
         bb:e4:36:ba:50:72:99:42:fc:a1:9d:9c:15:6b:bd:06:5c:84:
         5f:8c:06:62:ce:b6:dd:32:03:4c:35:de:94:66:d2:6f:02:bc:
         b1:cf:ab:ce:2e:19:fa:f0:ea:7b:51:6e:d0:2a:1c:4f:3d:41:
         1f:85:b1:8d:b6:2e:6b:53:8a:7e:9d:02:ed:44:68:4a:25:d5:
         f1:58:11:3e:2a:02:fb:cb:e9:4f:20:f8:b4:01:6b:83:b2:02:
         b3:0a:40:22:da:5c:89:f2:7d:49:55:3e:1c:32:ea:60:9c:34:
         00:df:43:02:96:51:02:c0:60:34:3b:6a:95:1f:a7:f6:3e:22:
         23:53:71:ed:af:a2:40:38:4e:9a:f9:c8:9b:82:ce:93:9d:81:
         6d:1a:8c:75:8c:1f:95:24:4c:47:10:18:09:5c:35:67:35:66:
         d1:6c:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:29 2025 by rpki-client