Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
File:                     B1YOPnLGB5oE59H2EDud94l5pSI.mft (raw, json)
Hash identifier:          l8RFdV9HFmqt52A/wLvIE0wfWKw0VwID2xeJ+pKJiKU=
Subject key identifier:   C5:8F:CE:78:18:35:8E:72:6E:69:BC:8E:EA:02:3A:B9:7D:8E:C4:C8
Authority key identifier: 07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22
Certificate issuer:       /CN=07560e3e72c6079a04e7d1f6103b9df78979a522
Certificate serial:       0199FBEC6A4F41377587318CB5E6690C8AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 10:03:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:18 +0000
Files and hashes:         1: B1YOPnLGB5oE59H2EDud94l5pSI.crl (hash: CktS9TXAjbbWvmywXEYFlSu+otdEZAMcr+3KqIzKH70=)
                          2: lW93GA1GW7tkRrvTWbYjnCQPx5E.roa (hash: EIz+VNjlZLw/OZlxy/agv5UkJ/Oxh/UU8FDTP682cjc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:6a:4f:41:37:75:87:31:8c:b5:e6:69:0c:8a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07560e3e72c6079a04e7d1f6103b9df78979a522
        Validity
            Not Before: Oct 19 10:03:18 2025 GMT
            Not After : Oct 20 10:03:18 2025 GMT
        Subject: CN=c58fce7818358e726e69bc8eea023ab97d8ec4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b4:4d:3d:cc:ab:2b:31:0c:5a:a4:10:b2:f7:
                    8b:9c:a5:d3:2a:04:da:53:b1:4f:e6:f2:e6:aa:61:
                    bc:25:ff:0e:b6:a7:d4:d1:2b:2e:d6:17:72:29:3f:
                    a6:23:ac:04:22:3a:9a:c9:4c:2f:d4:ee:e5:02:29:
                    da:99:a6:88:f8:e0:7d:7f:fd:89:70:06:0d:57:71:
                    40:f9:df:85:68:cc:fd:4a:4d:b3:4e:eb:ff:82:5e:
                    4e:c7:f5:1b:c7:61:65:64:6c:f3:26:72:72:1c:bc:
                    48:c4:39:6b:46:3c:5e:fd:a1:75:80:ae:38:9e:27:
                    68:ee:0f:c9:42:5a:c1:7e:3f:55:1c:9a:1e:7d:7f:
                    fe:cf:0f:84:5b:ba:bb:15:4a:31:7b:e5:d2:d0:40:
                    78:23:ca:d3:74:8e:d9:62:84:e1:2e:b8:86:25:eb:
                    15:fb:77:8b:39:7f:0c:41:2d:a9:92:f8:ed:5a:c1:
                    79:e8:dd:6b:d4:b6:16:2c:0d:b4:8f:96:f4:22:53:
                    8f:ce:5e:7b:e4:a6:8f:84:fb:86:bf:bc:fa:73:3b:
                    5c:8a:4a:40:9e:5b:1b:51:24:6a:55:1d:c9:d7:90:
                    c0:8d:fd:38:d0:13:e4:a2:d8:2f:de:33:74:f9:48:
                    11:fa:68:45:c8:05:2e:a4:00:64:66:7d:bd:9e:f7:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8F:CE:78:18:35:8E:72:6E:69:BC:8E:EA:02:3A:B9:7D:8E:C4:C8
            X509v3 Authority Key Identifier:
                keyid:07:56:0E:3E:72:C6:07:9A:04:E7:D1:F6:10:3B:9D:F7:89:79:A5:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1YOPnLGB5oE59H2EDud94l5pSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/06998d-8cd9-4993-9fe7-8221d2143796/1/B1YOPnLGB5oE59H2EDud94l5pSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:4a:4c:92:6b:9c:97:01:f7:2b:4c:8d:65:18:1d:bf:ca:
         43:43:63:2e:17:74:1a:dd:75:0c:eb:18:e7:85:41:74:eb:bc:
         0f:6e:cb:df:09:e8:d6:e8:87:f0:08:31:11:c9:17:9b:f1:e6:
         6d:e5:ec:a5:6f:79:61:c9:41:56:54:18:a7:45:e8:da:b6:ca:
         d0:f6:ab:1d:6b:2f:b7:9d:fb:ae:3d:5f:44:e8:e8:03:2d:39:
         5f:d7:ff:ce:93:ca:66:54:f9:aa:50:dd:1b:f5:f6:9b:8d:62:
         61:9f:2c:d2:3d:a5:c4:02:ce:4e:2a:b6:32:90:2c:07:39:e5:
         03:0a:c0:e5:44:93:7e:36:85:d2:4b:3a:8a:4f:bb:1f:2c:97:
         32:41:7a:21:12:d9:6f:1d:5f:8f:25:10:15:5d:d9:8e:65:dc:
         c1:fa:00:93:e6:55:25:7c:e7:0d:5f:cc:a7:53:49:37:12:e0:
         00:ce:fc:5a:b2:77:36:fe:ec:bd:f9:30:50:47:b0:a0:c4:5e:
         0c:de:44:b7:e3:54:2c:4a:cd:47:6a:72:a0:1a:79:ba:53:76:
         20:77:77:74:5d:d3:1a:56:fc:e4:f4:d1:8c:0a:48:76:5b:b4:
         77:65:cb:78:6f:49:2d:64:13:bf:0f:fa:40:7c:b4:71:95:ab:
         53:bc:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:34 2025 by rpki-client