Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File:                     b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier:          twOi8bmHClrJVQiDndVQm5kI1fL98sWUH7uSbKqe9VM=
Subject key identifier:   AD:F8:6D:51:A8:DD:9C:72:8C:7B:74:4E:5D:A8:8E:EF:B8:8A:5D:69
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer:       /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial:       0199FBEB529DEC7D7AE1C251C4F6F637652F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:02:07 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:07 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:07 +0000
Files and hashes:         1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: +WLjZzrOwVZsaT4zkmvcIlC8iNRALEqWI1QXwe6GHmc=)
                          2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:52:9d:ec:7d:7a:e1:c2:51:c4:f6:f6:37:65:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
        Validity
            Not Before: Oct 19 10:02:07 2025 GMT
            Not After : Oct 20 10:02:07 2025 GMT
        Subject: CN=adf86d51a8dd9c728c7b744e5da88eefb88a5d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cb:0d:26:ba:03:08:91:7d:89:4a:3f:aa:dd:
                    31:db:cc:15:b0:55:13:d3:a6:3e:8d:05:76:99:1a:
                    b4:78:dd:a9:40:3f:6a:f7:54:a9:01:e9:7b:72:17:
                    c9:5b:11:8d:23:45:6a:39:e3:bb:b1:f2:15:f1:7c:
                    ad:54:40:09:05:5a:b2:6b:5f:f8:1f:ae:4c:51:c1:
                    b9:6b:0f:94:3b:74:2f:4e:80:75:db:a3:db:63:48:
                    01:44:13:bd:d9:bf:9e:50:ec:47:49:fb:cf:e2:ce:
                    6d:28:76:88:36:46:b8:ee:3d:a0:21:76:67:a1:84:
                    a2:83:62:2f:b4:71:41:63:5a:76:37:fb:35:73:e2:
                    82:b9:48:72:0d:17:20:3e:a9:23:19:06:41:58:25:
                    f4:07:c0:08:8a:66:a7:2b:ea:a7:28:8a:76:e4:9b:
                    a8:16:d3:74:0c:95:3c:05:f8:89:59:cc:36:de:94:
                    1e:24:0f:b8:0e:bb:9c:c7:40:c6:d2:b8:4f:8a:4b:
                    9f:f0:1a:96:66:ac:6f:b7:bf:05:8f:9a:92:ee:ef:
                    d8:05:6d:ec:36:fa:70:e0:b1:a0:20:3a:50:16:09:
                    e6:53:fe:f5:ca:75:e7:04:58:d4:4f:7e:62:ce:6c:
                    5a:8e:2d:a2:21:0f:47:0d:40:a3:4e:73:d5:3c:4a:
                    a4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F8:6D:51:A8:DD:9C:72:8C:7B:74:4E:5D:A8:8E:EF:B8:8A:5D:69
            X509v3 Authority Key Identifier:
                keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:be:f2:c2:0e:d0:ae:b1:1e:8d:09:b8:61:81:78:34:2b:
         43:fd:fa:05:87:a4:e7:fd:bc:a6:d9:1d:17:2a:32:41:de:67:
         fb:e1:e4:2b:5d:cb:09:45:1c:5c:d2:5f:57:ba:b2:a3:5e:93:
         c2:af:3a:63:55:28:da:48:b4:86:1f:f7:3f:de:46:f2:33:25:
         77:15:b7:fe:22:0c:b7:64:39:74:6e:c3:40:00:1b:48:43:05:
         ab:68:6a:24:52:b5:c9:e3:7e:77:93:c1:cd:5c:82:c8:c4:f2:
         5b:4c:90:e3:73:fb:fc:98:9d:18:e0:2a:ac:e5:35:bf:d6:cc:
         42:75:a1:b4:bb:44:94:d0:8d:33:cb:43:13:ac:5f:d7:60:0b:
         49:1b:ca:95:2d:33:bf:33:05:10:c0:c5:e1:20:ad:a9:56:75:
         d5:c3:14:4e:f6:4d:b4:06:f7:93:4b:9e:a2:08:b5:b9:20:e1:
         c0:26:63:8e:4a:9b:22:17:b9:79:48:c2:20:e5:76:38:a3:d3:
         06:46:51:ac:5d:0f:cd:fa:6c:ba:f3:f5:d1:aa:ce:90:84:b9:
         be:b0:25:d2:b0:73:53:e5:7b:2e:75:ba:0c:ed:5d:06:c4:a2:
         4b:2c:40:f6:6d:e2:8f:d3:fe:d6:62:5f:7d:d0:49:2a:aa:38:
         b5:2d:a5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:38 2025 by rpki-client