Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          Ie1j/r3grqVH2iNvD8uRCTFpQIQ5C3RKEB/UVXEbe+k=
Subject key identifier:   C9:6F:D7:49:47:FC:85:B6:04:FC:B7:DC:4D:0D:D8:0F:7B:E3:6E:FD
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       0199FBEB9FFEFACF8CBCD14201063CCD57B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:27 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:27 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:27 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: 2aY1/3viJQVu74XHvMEN+8KFwLxe74skVFUyD4nEYSU=)
                          2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9f:fe:fa:cf:8c:bc:d1:42:01:06:3c:cd:57:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Oct 19 10:02:27 2025 GMT
            Not After : Oct 20 10:02:27 2025 GMT
        Subject: CN=c96fd74947fc85b604fcb7dc4d0dd80f7be36efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:64:5f:da:dd:67:34:4e:a1:02:99:46:3a:
                    8b:66:e2:a0:6d:a4:4d:53:20:96:03:5c:db:7c:54:
                    7d:55:49:f6:7a:15:59:ec:e8:62:6d:8a:66:35:8c:
                    df:2c:71:97:8b:29:9d:b5:45:7d:f5:04:d3:1c:c4:
                    97:37:ba:52:ea:76:73:71:4d:ca:38:4a:13:38:82:
                    cc:dc:6f:c1:1d:e5:c2:c8:e1:ed:4e:5f:67:d3:27:
                    fe:da:b6:74:97:aa:e0:11:0d:e5:73:15:d3:e4:35:
                    53:7f:05:ff:47:78:8d:cb:44:dc:53:8e:83:06:3f:
                    82:26:75:29:7d:80:00:4f:d7:99:21:e8:c6:d8:31:
                    49:50:72:f4:64:0a:b4:30:ea:7b:e7:69:86:ec:4a:
                    29:a4:2f:bc:49:bd:66:64:76:34:1a:69:0f:ed:f8:
                    80:bc:05:44:7b:d6:8e:e8:a3:ed:4f:51:39:db:35:
                    14:2c:d7:61:8e:24:59:33:24:9a:21:da:04:da:cd:
                    ed:55:be:d2:7f:f2:19:57:e5:1f:2b:a5:09:6b:bd:
                    78:fb:63:07:ff:87:99:db:7b:3c:ea:9f:60:b5:2e:
                    6f:3d:2a:73:97:c0:9d:4f:c7:66:7d:19:b7:e3:37:
                    ec:0a:71:c0:e9:62:6d:e5:ca:e7:f8:e7:c7:d6:ee:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6F:D7:49:47:FC:85:B6:04:FC:B7:DC:4D:0D:D8:0F:7B:E3:6E:FD
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:12:bb:99:a6:6f:e5:52:29:21:98:b6:a8:6f:bf:43:cb:11:
         5b:82:d4:ce:f1:88:36:c1:6a:ef:3a:34:2f:06:36:71:17:5e:
         6e:31:0b:e8:7c:36:82:e1:3a:c7:6b:bf:bf:ce:a5:72:cb:f5:
         50:51:66:02:8e:7b:85:6e:5d:58:1d:14:b3:c8:2f:81:2c:cf:
         12:51:43:24:4e:35:b9:5d:3f:1c:d4:6b:43:12:4c:9c:cf:33:
         be:a7:1b:62:90:d7:71:4e:62:04:84:2b:cf:1a:ba:eb:03:92:
         17:fc:8f:d7:09:f5:15:16:98:50:dc:b2:43:8d:e6:ee:b4:a3:
         75:49:83:20:4c:79:28:d5:55:c7:45:9f:29:56:da:99:1b:b9:
         63:92:77:d3:f3:d9:be:26:78:54:6a:dd:2a:76:6e:4f:40:6b:
         2a:4a:96:b4:72:06:17:ee:c6:71:4a:45:bd:b3:fc:c1:72:09:
         ba:c0:6f:f4:72:bd:a4:c0:20:2a:7c:a4:fb:a6:d7:41:93:49:
         83:b3:79:68:29:6d:3b:46:1d:76:6a:47:d2:d3:b6:e4:d1:e2:
         6f:79:59:a5:e9:97:d5:19:94:6f:fe:14:14:76:9f:83:3e:04:
         6b:7c:00:34:f6:b4:71:9f:e2:61:6d:f5:74:e5:a3:7a:9f:10:
         f6:b1:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:21 2025 by rpki-client