Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          kCYKFFk5kN3AURAd8I8D9H7wRSuYUMnO37oWBAZG+FA=
Subject key identifier:   70:D1:EB:55:2D:28:11:33:70:E8:4D:66:8B:58:C6:9A:31:FE:95:52
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       019A006C2F9E14426BC8A88B2D439FCE33C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          1677
Signing time:             Mon 20 Oct 2025 07:01:21 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:21 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:21 +0000
Files and hashes:         1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: r7LfCkzcCanLuci+cczfuf3a3SyFeohfAx2JJYfBmaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:2f:9e:14:42:6b:c8:a8:8b:2d:43:9f:ce:33:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Oct 20 07:01:21 2025 GMT
            Not After : Oct 21 07:01:21 2025 GMT
        Subject: CN=70d1eb552d28113370e84d668b58c69a31fe9552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:67:f0:d9:cc:77:e2:30:80:ce:ff:91:26:
                    ec:93:4d:5c:d7:f1:5d:fe:91:94:bf:8d:e6:aa:94:
                    5c:36:e5:44:c2:ef:96:04:18:e0:65:8c:4a:94:c7:
                    cd:4c:32:c5:44:63:09:9b:8e:bc:7f:b7:e2:88:dc:
                    e4:ae:b6:c3:f9:1a:e7:ea:26:f1:24:71:c6:77:a1:
                    c1:75:cb:cd:4a:70:63:b9:99:70:9c:6c:6d:48:30:
                    51:14:d2:f1:cb:43:68:fa:7a:a6:8e:cb:eb:2d:83:
                    b3:af:e6:96:21:2c:bc:ff:1d:c7:f3:8f:05:22:ea:
                    71:a9:96:3c:01:8c:ba:6d:28:10:27:7b:a2:9a:a0:
                    6e:99:ea:6e:72:1c:86:f8:f1:26:e7:ec:08:89:2e:
                    00:fc:b1:41:04:1e:f6:7a:f4:cb:db:8f:a2:81:a8:
                    89:d4:f0:01:07:c8:85:79:ff:3d:c6:19:ac:89:b1:
                    67:32:b2:b6:81:6c:0f:42:61:ed:20:72:82:43:a6:
                    31:ac:3b:ae:ef:cd:a7:66:b5:48:de:5c:92:e6:09:
                    24:75:ae:cd:d8:b4:6c:98:19:85:19:90:0f:d8:6b:
                    bf:b3:c7:e9:ba:de:d6:52:f6:f8:2c:ed:0a:d5:2a:
                    0c:05:bd:07:aa:97:cc:90:27:64:ac:b7:df:f5:fa:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D1:EB:55:2D:28:11:33:70:E8:4D:66:8B:58:C6:9A:31:FE:95:52
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e2:81:76:35:d2:d5:b8:e7:37:77:1c:8f:70:24:48:ed:e4:
         ae:21:34:90:dc:73:30:40:24:9f:c1:6e:eb:32:4f:5f:f1:68:
         3b:89:e9:fd:fc:58:21:31:c2:b8:09:8f:fd:31:c7:78:be:f2:
         52:49:49:77:50:5d:91:d1:1b:a7:f8:a3:d7:93:65:90:33:2b:
         b4:9d:e4:c8:56:6c:e4:27:c0:9f:f3:e4:ac:a2:9c:2d:1d:66:
         a6:da:19:d0:33:4b:a2:7e:2c:5b:28:2b:8b:e3:0e:eb:15:40:
         9f:23:b3:6a:48:f1:17:b2:7b:8f:1a:8f:56:db:71:b9:74:19:
         20:1b:a4:c2:7f:af:5a:9f:ae:fe:3f:e7:28:07:2a:56:8d:89:
         19:a7:75:b8:3e:65:4e:1d:06:90:bd:6e:d5:f6:1c:0d:7a:e9:
         af:5d:ef:93:43:3c:c8:f8:80:7f:55:e8:aa:15:b9:7f:d2:68:
         b8:da:84:99:80:45:4d:d9:9c:e4:d4:12:08:a2:5a:c9:ad:0a:
         81:ee:99:57:a0:e8:4b:fe:d6:dc:ec:2d:49:62:cd:c0:5b:b9:
         7d:75:5a:b4:6e:d1:da:61:f1:a4:7e:fb:0e:28:89:5a:49:b5:
         d7:e5:8d:52:e1:43:5e:e0:07:f3:4e:06:08:28:e3:5e:00:38:
         3a:06:ef:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:20 2025 by rpki-client