Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
File:                     B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft (raw, json)
Hash identifier:          C+wvAIpegr+5PyV1y6G+2E/uHMGHs58ZpYnu4IeewIM=
Subject key identifier:   27:3B:A8:59:58:BA:EA:AC:EA:26:A7:AD:14:DB:44:F2:A7:82:B5:77
Authority key identifier: 07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2
Certificate issuer:       /CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
Certificate serial:       0199FC8F4228FF37E54763D2DD3F14E6FFCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
Manifest number:          16EA
Signing time:             Sun 19 Oct 2025 13:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:10 +0000
Files and hashes:         1: B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl (hash: 63Xu61ZoiU/geamgxaKGPZXIW8N3Rh26hM//ax3RvrE=)
                          2: FtJU8J9U2_OLLatx6LfvbHOKR_c.roa (hash: dIJaTNJ0+ASaTltOhTPasps3097ycgeaovaUGMkuSR8=)
                          3: T_7VSYnKOSjvnuTWwmwff3kfcxo.roa (hash: DlCYGU13et9ewOw+1fpUIgR8MXw03I1FUpNIzAaiNtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:42:28:ff:37:e5:47:63:d2:dd:3f:14:e6:ff:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078629f5f61fb25564284fbfeffb93c3ed44bfe2
        Validity
            Not Before: Oct 19 13:01:10 2025 GMT
            Not After : Oct 20 13:01:10 2025 GMT
        Subject: CN=273ba85958baeaacea26a7ad14db44f2a782b577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:d2:26:d4:75:1d:75:08:5f:91:40:13:64:
                    da:fa:bd:06:65:e9:02:76:73:3f:da:ad:61:e6:97:
                    a4:14:a6:7d:95:f9:0a:2f:90:ea:2a:63:13:27:6d:
                    ef:ee:a2:28:82:d5:da:f6:7b:1a:b7:36:04:f4:69:
                    a8:c9:37:a2:cd:1b:71:1f:5f:71:1b:c9:04:f7:87:
                    b6:1f:b3:2e:3d:5a:a6:a0:c9:69:1b:72:34:de:87:
                    09:d9:f1:f0:ac:72:15:88:19:a7:4d:f9:7a:21:dc:
                    f1:e4:83:ba:48:61:a2:86:30:48:0b:61:a0:12:a8:
                    fc:0c:98:23:0f:dd:0c:40:ae:30:81:ed:07:ab:ca:
                    83:9d:fc:ec:60:60:bb:34:64:79:75:59:91:9e:77:
                    6d:2f:cd:ee:0e:59:e9:6b:bb:08:5d:d0:c8:eb:db:
                    38:0c:91:fa:00:08:fa:ac:94:98:fe:fa:49:91:3d:
                    87:53:85:60:1d:30:8e:0d:55:f4:0a:ab:d8:c3:99:
                    ec:91:e3:7f:a2:83:54:b0:09:f3:e3:62:c2:4b:a5:
                    0d:7d:ea:db:26:a9:86:15:e2:50:b4:0a:a4:a8:79:
                    13:d4:62:58:be:3b:75:79:39:6b:b8:ee:50:2d:cf:
                    ca:1a:95:bb:5a:7c:02:6b:42:c6:3c:d3:63:60:f4:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3B:A8:59:58:BA:EA:AC:EA:26:A7:AD:14:DB:44:F2:A7:82:B5:77
            X509v3 Authority Key Identifier:
                keyid:07:86:29:F5:F6:1F:B2:55:64:28:4F:BF:EF:FB:93:C3:ED:44:BF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0618e4-7a64-460c-aaf9-63af2c4f4020/1/B4Yp9fYfslVkKE-_7_uTw-1Ev-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:1a:22:92:b2:22:3a:d7:26:dd:53:08:64:d6:a1:75:49:
         bd:b5:1e:e5:e7:4a:e7:63:02:67:51:e8:df:9d:f4:1c:6b:55:
         78:d8:9b:8f:86:85:81:99:d2:25:f8:f3:a1:c0:b8:c5:7a:f9:
         28:7e:88:41:e7:4d:8d:8d:be:38:82:72:8b:73:43:3d:58:b2:
         28:0d:1f:fe:c8:3b:df:3e:83:34:b0:ca:12:41:59:2f:e1:5b:
         31:ba:ab:2a:37:4c:9b:3b:d7:fe:20:4f:a9:b3:1d:23:bf:75:
         c2:46:68:75:7b:1b:15:62:34:ae:7c:15:a6:da:e1:c0:28:d9:
         7b:c6:e2:41:8b:da:50:a9:e6:2b:fa:66:f1:3d:57:e2:c7:52:
         87:7e:ef:f0:5c:c1:f3:2c:47:cf:3d:a1:c2:fb:68:e8:50:35:
         17:99:42:f6:d6:9e:56:4b:fe:6d:e2:a3:10:24:b8:17:c2:a1:
         43:57:a3:bc:e6:90:e1:44:d8:53:01:d0:b7:6e:9e:c0:f0:32:
         3c:c1:98:56:5b:59:be:bf:88:b2:f7:ea:17:6e:61:93:48:c8:
         0b:a5:7d:82:0b:2a:bb:e3:63:10:75:8c:51:9c:34:47:9c:ec:
         32:f3:4f:72:ad:d3:c3:8b:11:f8:14:aa:c5:e6:fa:52:7a:42:
         cf:70:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:30 2025 by rpki-client