Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File:                     k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier:          N6raL5Fi9iGOlECNK+VUx2EveZ6BAFs9BgvKBTlYEM4=
Subject key identifier:   75:EE:AB:C1:A2:89:9C:4F:69:34:F2:2A:EC:0B:8A:F8:1A:25:6A:2C
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer:       /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial:       0199FCC67C9CF4627067A325B6AAB0AA5346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number:          0B05
Signing time:             Sun 19 Oct 2025 14:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:30 +0000
Files and hashes:         1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: JdaUEOrKaAP2BZITh9iHkt1IpxWe3immP2wuz26v9As=)
                          2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:7c:9c:f4:62:70:67:a3:25:b6:aa:b0:aa:53:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
        Validity
            Not Before: Oct 19 14:01:30 2025 GMT
            Not After : Oct 20 14:01:30 2025 GMT
        Subject: CN=75eeabc1a2899c4f6934f22aec0b8af81a256a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:5e:1e:7b:eb:54:25:22:71:fd:33:be:6f:
                    a2:ff:36:02:c8:9a:c0:60:e5:8f:35:80:2d:4e:4d:
                    ce:8e:c1:53:16:c8:10:ce:15:8a:f8:a4:22:53:c2:
                    46:95:c5:54:46:0e:e9:0e:ac:a4:95:16:99:71:f3:
                    6a:7d:1c:b1:d0:b6:15:57:81:4b:b3:e8:d3:d0:c6:
                    51:b6:32:1a:22:94:29:7a:b2:32:8c:f7:e7:a4:7e:
                    eb:cc:3e:fe:64:6b:03:6d:da:21:71:aa:68:b1:b3:
                    c7:8d:32:83:b0:ea:ee:1e:c0:2a:f5:cc:59:31:b8:
                    2e:33:63:13:19:0a:e6:ce:bd:6f:37:00:94:c7:79:
                    71:75:3d:b6:e1:56:bf:1b:da:21:d9:e6:0c:53:a5:
                    cb:61:12:4e:82:e7:b8:41:94:89:c9:4e:86:31:f3:
                    01:69:05:96:fc:ff:31:2d:66:f1:6f:61:e5:5b:ac:
                    84:86:d8:23:64:40:dc:8e:a4:05:6e:c9:9e:f8:73:
                    b1:c0:d8:ea:e2:b0:ee:4a:44:9e:a3:92:ef:6f:1a:
                    96:82:a5:d5:6f:e2:1e:5c:e5:d8:0b:52:97:4b:a2:
                    1b:d1:3d:14:24:a0:a2:d5:28:1a:40:99:f0:99:54:
                    7b:eb:0b:4f:92:31:9e:b8:e4:db:14:1d:f5:68:3d:
                    9e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:AB:C1:A2:89:9C:4F:69:34:F2:2A:EC:0B:8A:F8:1A:25:6A:2C
            X509v3 Authority Key Identifier:
                keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:3d:b7:af:9f:4a:1e:2c:ca:57:2e:a2:7a:a3:e9:96:d9:
         33:a5:b5:8c:96:6a:d4:50:ba:2d:81:08:f9:4d:02:44:4d:7e:
         4e:9b:4d:a6:e9:a4:1f:a2:06:65:eb:d6:2b:ac:ba:fe:72:39:
         53:86:a3:cf:a9:d0:92:35:a8:07:23:35:28:94:2f:fa:6f:ed:
         b6:cf:c4:cd:a6:99:f4:99:ff:7d:0e:be:b5:47:f6:a7:7b:a3:
         c5:8a:1c:84:c5:e4:99:63:a7:61:80:51:28:0d:8e:11:bc:98:
         cc:2f:28:ca:7f:f9:17:3d:94:71:a7:90:90:82:dc:ad:ed:b1:
         e5:3b:8f:7b:46:d8:2d:79:1a:00:37:5d:a6:62:0c:64:31:14:
         ef:cd:a2:eb:a4:65:d0:5b:58:73:eb:77:09:e1:c9:af:c4:98:
         7d:2d:51:f2:27:3f:a4:32:e6:7c:04:4e:bd:2d:e7:62:d3:30:
         89:13:97:f5:55:7a:fa:ef:75:41:4a:0e:ba:3a:2d:21:be:46:
         17:5a:ee:1c:ca:fe:3a:a0:f8:f3:64:89:ce:98:ab:3a:bf:84:
         00:b4:97:e4:e5:61:02:91:76:a0:6d:57:96:99:de:30:55:87:
         e9:0d:8c:27:6d:5b:39:a4:c4:e0:1c:42:af:0f:e5:df:ce:c6:
         c2:03:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:15 2025 by rpki-client