Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
File:                     B__SkDh900rAeQxrnX7pn-23gUk.mft (raw, json)
Hash identifier:          NybaUkOaDHN6GDKEymu3yeDYgFVYUqzql8d3zSufJSo=
Subject key identifier:   A6:EB:E8:AB:C6:71:39:09:B2:7E:CF:71:04:5B:E0:BC:5D:E5:B3:F3
Authority key identifier: 07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49
Certificate issuer:       /CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
Certificate serial:       0199FCFD379D2CC06A78A0714F2BFC903868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
Manifest number:          053E
Signing time:             Sun 19 Oct 2025 15:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:17 +0000
Files and hashes:         1: B__SkDh900rAeQxrnX7pn-23gUk.crl (hash: BL+oDaiFFkV9M1ocTOrCDNXLp4THtZ+ryLfNx9e9uuE=)
                          2: jvHRud-0bfVZE35uo3ytxWpEsiQ.roa (hash: /JbTDkFvtTl5SlOmgYIpMzTAuGjpF4dmP37OC1pKU5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:37:9d:2c:c0:6a:78:a0:71:4f:2b:fc:90:38:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ffd290387dd34ac0790c6b9d7ee99fedb78149
        Validity
            Not Before: Oct 19 15:01:17 2025 GMT
            Not After : Oct 20 15:01:17 2025 GMT
        Subject: CN=a6ebe8abc6713909b27ecf71045be0bc5de5b3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:8d:3e:fb:d7:2e:0d:4f:8a:be:3c:c1:4f:
                    ac:52:3b:4e:42:8a:9e:ff:f3:5a:01:4a:06:12:91:
                    9e:c8:f3:c6:3a:5b:1f:e7:4d:4a:ce:77:4d:f5:ad:
                    e2:84:1d:21:c1:aa:b2:3a:da:43:dc:32:14:5f:53:
                    7e:62:5f:ce:b1:04:75:d9:30:ad:09:37:98:9d:76:
                    98:30:e9:e9:c4:35:77:7c:77:4c:77:0f:dd:33:3a:
                    74:1d:ea:95:0b:59:55:ec:f0:de:c0:c2:80:40:24:
                    66:05:c4:70:fc:4c:c5:81:c1:e7:a2:c4:bc:0c:20:
                    86:c9:2c:0e:7b:bb:17:30:66:09:75:be:b6:68:d6:
                    27:58:a3:e4:0e:82:fc:fa:e3:5c:e7:f9:60:81:87:
                    a4:e0:3b:23:08:c1:af:f7:f2:3b:94:e2:39:00:fc:
                    2c:67:a7:6d:9e:e3:fe:05:e0:92:bb:40:ba:30:37:
                    73:8a:9e:1d:28:99:d0:56:5f:a6:e7:bc:71:59:48:
                    24:0d:42:3a:48:ca:a0:87:20:9d:33:a8:81:65:d0:
                    c2:95:f8:85:bb:f6:52:ad:1f:d9:04:55:6f:70:54:
                    7b:7d:fc:5f:ce:35:13:62:82:6d:9b:c0:26:93:f3:
                    0e:90:79:cc:35:5f:89:1b:ce:89:3e:89:99:99:3f:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EB:E8:AB:C6:71:39:09:B2:7E:CF:71:04:5B:E0:BC:5D:E5:B3:F3
            X509v3 Authority Key Identifier:
                keyid:07:FF:D2:90:38:7D:D3:4A:C0:79:0C:6B:9D:7E:E9:9F:ED:B7:81:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B__SkDh900rAeQxrnX7pn-23gUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/58538a-24eb-4f9d-9811-525959e6ee22/1/B__SkDh900rAeQxrnX7pn-23gUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:60:82:52:aa:5a:9b:d8:e0:18:11:64:47:7f:f1:b8:f3:4e:
         f8:58:bd:14:8a:d2:ee:cf:a8:2e:43:03:22:54:84:bc:fa:b6:
         62:ef:db:8d:b0:38:45:53:ec:b9:71:de:ea:3c:8a:8e:26:af:
         ba:23:f8:67:3e:63:8e:d0:8a:5a:6b:45:5a:18:cf:6a:74:d4:
         0a:eb:a9:a2:7c:b5:6b:c6:c2:91:3b:bf:e3:8f:14:e3:f6:2d:
         9e:26:7f:14:54:54:9b:31:3b:48:e2:50:e2:70:d8:12:3a:1a:
         32:f2:41:a7:19:07:06:31:23:c8:bc:72:2e:95:d9:c5:2a:5d:
         c8:e2:54:86:0b:90:ac:09:2d:f6:a5:c2:3c:e7:ae:9e:b2:ff:
         68:c5:9b:9f:8e:a0:45:76:5f:98:d4:29:4d:bb:12:0d:48:88:
         78:72:fe:88:f1:3c:41:7b:b0:53:df:1d:31:6b:a9:97:95:8d:
         6d:0d:67:95:88:ec:5a:ff:48:82:e7:38:fd:30:24:71:19:ac:
         b5:6f:85:90:39:66:33:7f:c0:4f:6a:17:1f:4b:c5:85:f8:b1:
         15:da:f7:98:f1:df:f2:0f:f7:2d:f9:46:3a:b2:2a:ed:85:5c:
         49:1e:67:f4:e0:74:09:ba:57:2a:e3:65:bd:06:ef:66:fc:de:
         f2:73:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:51 2025 by rpki-client