Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File:                     27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier:          /Btf/k501E9U4LI10vSY6ptsKGzanjFhmu4z08ulJBc=
Subject key identifier:   B8:CA:19:9E:4B:97:A4:B9:08:BD:35:8D:AF:3C:FE:84:69:09:2C:1A
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer:       /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial:       0199FDD98CA32D0E44DDF3AA839374432692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 19:01:56 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:56 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:56 +0000
Files and hashes:         1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: yfN6P+vePRf6zQT9jJgD/78i2WrxcabnQix3y4Hbt7Q=)
                          2: Kl_sSsnBSJGgCcK7zw2V9NmYKfk.roa (hash: KW6ns1JLYPOvHGE8JNv7Utb34UMVmmzeR921gIwdXX0=)
                          3: MlEemWyYy35iJO6wD7wsZ8DTDWg.roa (hash: Ph9JaIidCgAU3KXkR2aEKEUbBhF5IEXuxEbJMztoM20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:8c:a3:2d:0e:44:dd:f3:aa:83:93:74:43:26:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
        Validity
            Not Before: Oct 19 19:01:56 2025 GMT
            Not After : Oct 20 19:01:56 2025 GMT
        Subject: CN=b8ca199e4b97a4b908bd358daf3cfe8469092c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:48:d1:87:c9:25:4d:83:c7:a9:87:2c:5f:
                    b7:13:1a:86:7e:25:77:97:1b:e2:a3:6a:dc:e4:8e:
                    d9:c6:26:d4:9f:83:44:cd:ac:ac:04:4a:f3:86:78:
                    0b:4f:81:c1:2a:00:7c:89:d1:94:45:1b:c1:df:ce:
                    d9:a3:b4:59:c8:dd:d7:46:d9:65:09:29:2b:69:48:
                    b0:71:76:77:56:01:ed:71:be:d4:ca:c4:54:9d:64:
                    8e:35:c3:14:24:a6:ad:e6:7f:0e:77:02:c1:aa:a0:
                    03:09:ac:18:f2:d5:7b:f7:10:10:81:64:36:eb:2b:
                    d9:be:e9:a0:08:0c:c7:87:96:d9:13:78:a2:ba:f6:
                    da:e5:c7:24:17:71:02:9c:06:21:2c:1a:aa:90:02:
                    5c:42:24:4e:81:73:c7:cc:78:44:3c:9a:de:55:66:
                    ec:8f:44:1e:fc:d0:f1:43:c3:d8:0f:89:b0:e2:57:
                    80:45:f4:c2:8d:f8:b6:d5:b5:5b:49:c6:6c:f6:1e:
                    57:48:2d:01:33:8b:e4:52:aa:a2:32:90:1d:59:5f:
                    ab:49:e5:a1:eb:81:74:b2:2f:87:fc:f7:d9:06:53:
                    3a:32:08:41:49:2c:7d:d0:1c:75:17:d8:aa:eb:6f:
                    f3:4d:e6:ad:0f:44:f2:f6:25:5a:41:03:d5:aa:69:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CA:19:9E:4B:97:A4:B9:08:BD:35:8D:AF:3C:FE:84:69:09:2C:1A
            X509v3 Authority Key Identifier:
                keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b6:83:52:7f:d6:44:72:35:4e:c9:71:9e:40:3d:b0:e8:8e:
         57:8a:08:49:78:82:8e:32:2e:c0:16:ec:ae:1d:4a:1e:e4:33:
         f6:b9:08:c5:50:58:6f:89:40:76:d3:55:f1:8e:6d:06:9d:48:
         c2:d5:2f:bf:62:a6:28:f2:37:06:65:5c:77:5a:b6:42:5c:72:
         a9:4b:de:ba:54:78:0f:56:b7:40:8e:6d:de:02:a0:24:24:ff:
         87:c6:58:ba:79:ce:a5:a2:78:4d:5b:50:22:8a:67:b7:d7:52:
         3d:29:1e:1f:3a:15:0d:da:0d:89:b6:7a:fe:f9:47:47:60:5c:
         a5:82:6b:f1:f6:60:9e:fe:e3:3c:f6:79:1f:0a:fd:71:c6:5f:
         d7:5e:8c:72:21:64:03:af:4e:7c:95:23:a1:ed:e0:e8:f5:fc:
         2a:55:a5:e5:df:1e:4c:d5:41:97:e7:9c:5a:49:23:88:8f:d9:
         89:24:c1:5c:a1:9f:81:8d:a0:cf:a0:23:67:53:20:22:3d:93:
         e8:99:84:e9:d6:63:7b:03:b8:48:a6:ae:60:7e:8c:d8:35:06:
         46:ed:68:7c:35:30:fd:a7:5c:bf:fd:d5:33:fe:bd:80:e2:c6:
         52:bf:13:d7:38:04:65:4c:29:9e:e2:a1:9c:11:42:db:9c:f7:
         e0:b2:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:10 2025 by rpki-client