Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File:                     bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier:          WhHWMuf77EoUAtY+vJp1v4SS7e67JKG5P2c2NU1PWj4=
Subject key identifier:   2E:D5:10:15:AA:B9:09:A5:66:26:FF:52:B1:BB:D2:F0:CD:D7:28:2B
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer:       /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial:       0199FF2289DBC4C131D2DF448E0D8A2E8FB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number:          13DD
Signing time:             Mon 20 Oct 2025 01:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:17 +0000
Files and hashes:         1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
                          2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: fvciwmR2zRmKd7Czke1eTN+W3st7AZUvjltvFBQoU5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:89:db:c4:c1:31:d2:df:44:8e:0d:8a:2e:8f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
        Validity
            Not Before: Oct 20 01:01:17 2025 GMT
            Not After : Oct 21 01:01:17 2025 GMT
        Subject: CN=2ed51015aab909a56626ff52b1bbd2f0cdd7282b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:2a:2c:1a:60:82:2a:51:00:6e:6a:5f:be:
                    66:89:37:05:93:86:76:ae:db:3e:d7:24:b0:f4:1a:
                    64:72:3c:bf:e5:27:a4:c7:dd:66:fb:18:18:bb:27:
                    78:12:8d:2c:a5:45:8b:fe:ac:5a:44:e9:59:41:04:
                    d1:f0:65:d4:ec:44:ae:b9:84:30:0b:95:42:6f:fd:
                    7d:71:be:a2:9f:2b:58:38:d3:02:ab:85:60:52:ff:
                    23:b0:54:25:f4:89:f5:a9:f0:ea:0a:41:4e:fe:43:
                    bc:e7:00:97:d5:9b:31:58:54:76:3f:30:b6:9d:84:
                    1d:9d:10:8d:f4:ea:38:3d:f6:91:b5:9d:21:29:6f:
                    67:85:20:d9:fa:cc:03:ea:1c:bc:c6:0d:d1:30:18:
                    aa:90:81:10:c1:d1:1b:26:0e:78:33:a6:84:f6:ac:
                    b5:64:b9:33:64:85:e7:f6:b2:6e:cd:33:b8:9b:d5:
                    14:ac:34:b7:7b:d9:e8:6f:c1:b9:30:4b:a0:18:9c:
                    75:f8:52:e9:03:68:12:c3:19:97:13:b6:e2:cc:3c:
                    df:a5:1b:13:79:67:de:1c:6e:63:7e:e9:2b:58:ac:
                    5b:d9:38:29:7c:c2:fb:e8:1a:3d:a4:ee:91:2e:d5:
                    ab:6b:25:e8:2d:e5:57:ed:5b:90:1e:46:5c:fc:46:
                    f8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:10:15:AA:B9:09:A5:66:26:FF:52:B1:BB:D2:F0:CD:D7:28:2B
            X509v3 Authority Key Identifier:
                keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:f3:d0:72:f8:a4:a4:b8:a7:af:6e:d0:4c:62:7e:e1:57:
         bf:de:fe:08:d8:42:e1:19:af:08:bd:a1:f7:d8:4b:52:a9:c0:
         58:5f:10:55:7b:7b:38:99:d2:fa:06:67:2f:f7:bd:ab:dc:0f:
         6e:54:57:27:f7:34:4f:a4:36:90:36:e7:36:af:a8:cd:aa:22:
         96:66:5b:83:dd:a4:e6:40:1f:ff:f8:31:38:ae:63:40:51:a9:
         52:7f:ca:ba:b1:58:89:92:d8:67:23:0f:56:6a:7e:ae:a5:08:
         42:76:8c:97:a0:9f:68:32:97:a9:82:bb:d8:46:74:43:39:68:
         f4:ec:7d:b8:d3:96:f0:04:c3:87:2f:c3:bb:6c:b5:32:d4:66:
         88:be:7e:94:20:69:51:f1:9d:3c:88:d6:e2:fc:51:1e:9e:17:
         b5:2b:2b:ce:f1:1f:d4:66:9e:d9:2e:49:ef:4f:56:0b:94:a0:
         ff:c0:5a:eb:da:f4:88:2c:a4:7f:61:4a:3b:4e:ce:cb:09:5e:
         0d:45:e5:d1:69:88:94:17:2b:1d:a9:50:e3:d3:6a:ea:52:a2:
         e5:2f:79:2f:da:7f:62:a7:9d:e2:17:ff:a2:67:2f:9c:84:03:
         8c:75:ad:da:c3:dd:af:3f:5d:0b:10:ee:c0:cd:65:91:a8:fb:
         1c:90:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:23 2025 by rpki-client