Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
File:                     Pls0eWfOpnu2K2nSWazeS4-elBc.mft (raw, json)
Hash identifier:          EcQnkmVmZl+yswmLLD0aOZy6CIsSJYuS++3pf8q/XiU=
Subject key identifier:   07:15:98:BE:F6:CA:B5:1B:6A:72:4F:74:C8:C4:92:22:73:10:EA:30
Authority key identifier: 3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17
Certificate issuer:       /CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
Certificate serial:       0199FBEA9E6BDDC28742F54822293450C454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
Manifest number:          0BF9
Signing time:             Sun 19 Oct 2025 10:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:21 +0000
Files and hashes:         1: Pls0eWfOpnu2K2nSWazeS4-elBc.crl (hash: bT1WCZpwyJH3u11EzJeIv5a1i/LfKEfb177LubVxjUw=)
                          2: yeykCTxRfXSLEqjo1MZ7zObmrks.roa (hash: 1vVWF5KJNfMy/yYL5Sp0YWKLB5R7wsPTTiR6VRMJgCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:9e:6b:dd:c2:87:42:f5:48:22:29:34:50:c4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e5b347967cea67bb62b69d259acde4b8f9e9417
        Validity
            Not Before: Oct 19 10:01:21 2025 GMT
            Not After : Oct 20 10:01:21 2025 GMT
        Subject: CN=071598bef6cab51b6a724f74c8c492227310ea30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:59:07:10:81:d1:bc:a1:37:ea:34:b0:78:
                    11:a2:bd:08:5c:19:03:2e:a2:f6:b0:bc:3e:9e:e5:
                    38:72:2c:1d:8f:47:8c:89:4f:fe:0b:6e:7d:3c:ff:
                    b1:a0:ab:cb:57:b1:8c:ab:88:c5:be:35:f9:31:72:
                    44:72:c3:35:ca:a4:82:02:a5:5b:1d:45:38:fa:1e:
                    10:75:29:5b:2c:31:23:49:29:4d:15:2d:41:fe:9d:
                    37:5f:35:1e:f6:5b:77:68:26:22:d7:96:27:fe:35:
                    f1:2f:13:e0:e0:79:f6:40:99:ef:1c:f3:ff:e5:69:
                    8c:1b:ea:39:3c:07:4c:24:60:05:a2:02:14:40:8e:
                    f4:9c:58:b9:7f:6e:b7:6b:e7:46:9a:5e:7b:a7:f8:
                    3d:25:d4:a8:ab:3f:61:51:01:54:a7:86:1e:a1:db:
                    7a:2d:c4:0d:5d:c2:15:f7:9f:0f:86:39:e0:0f:a4:
                    b1:d4:f0:79:fb:25:ec:29:7b:25:fc:36:2a:13:59:
                    4f:7f:07:8a:07:1a:02:fe:07:d6:be:03:99:08:f7:
                    24:23:7c:55:25:2e:7a:a4:28:ee:38:5b:ea:7c:b8:
                    60:93:85:cd:bb:a1:d5:a5:e2:c3:14:b1:c3:b4:95:
                    f1:60:db:49:c2:c1:a5:be:b7:2a:13:a5:b0:48:0a:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:15:98:BE:F6:CA:B5:1B:6A:72:4F:74:C8:C4:92:22:73:10:EA:30
            X509v3 Authority Key Identifier:
                keyid:3E:5B:34:79:67:CE:A6:7B:B6:2B:69:D2:59:AC:DE:4B:8F:9E:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pls0eWfOpnu2K2nSWazeS4-elBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/256da7-19d0-459a-b53e-94e7d07fb31d/1/Pls0eWfOpnu2K2nSWazeS4-elBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:15:91:5b:1a:b0:da:73:2f:7d:71:8c:9d:91:a0:df:17:7e:
         e0:2c:93:ac:22:cd:eb:b0:97:28:c1:86:52:e9:44:ad:97:2f:
         fe:33:6a:1a:1e:8a:67:b8:b5:3c:77:c1:2b:2c:a9:00:75:35:
         90:38:35:2e:f0:2a:8b:2e:4b:c3:41:d5:65:57:17:79:9d:f7:
         15:bf:3c:e7:19:6a:0a:61:7c:9c:ec:de:30:89:11:fa:85:c4:
         03:a6:d1:c5:86:02:42:78:d3:ec:34:f5:9b:b9:3b:3a:97:db:
         7a:03:d9:b5:96:85:69:d6:5f:e5:7b:93:58:b2:9b:ea:3e:fb:
         1d:5b:77:f7:17:58:f1:84:ae:6d:e3:15:5e:bc:e6:53:73:b9:
         1b:3f:cb:37:b5:3a:15:5a:79:88:7b:26:d8:ca:3c:8f:25:a1:
         05:c3:01:f1:ac:0d:42:eb:ac:46:5e:ec:02:4c:89:ba:0b:a9:
         d6:d7:78:ec:ee:b2:ca:53:e7:93:b6:66:36:3c:8f:5c:36:05:
         48:a6:72:71:d1:b7:13:08:c3:40:47:a8:ae:78:40:11:61:c1:
         bf:2f:82:d9:35:e3:09:4a:8c:9e:51:17:41:8c:f0:2f:d1:b0:
         7b:93:04:74:82:f6:cc:16:ca:a0:34:97:41:7f:ca:aa:ca:03:
         23:91:f5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:19 2025 by rpki-client