Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          GrL4vU3BChGOJ+04yBOWD1aI66x4J+8YqCRofx1jreY=
Subject key identifier:   DB:55:EB:52:02:40:24:96:EA:B9:01:00:C6:A7:C8:AE:A5:06:63:FC
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       0199FA6A270A80864E0B02E9884BD6E8DEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          0AEF
Signing time:             Sun 19 Oct 2025 03:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:24 +0000
Files and hashes:         1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: uoI0WFfRBubsHprsXQwtMHfVZYZV4KG5be8dz2uZ3BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:27:0a:80:86:4e:0b:02:e9:88:4b:d6:e8:de:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Oct 19 03:01:24 2025 GMT
            Not After : Oct 20 03:01:24 2025 GMT
        Subject: CN=db55eb5202402496eab90100c6a7c8aea50663fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:e3:99:dd:72:92:03:a1:e2:5a:3c:ea:5b:
                    ea:3e:33:8e:68:85:95:41:b6:dc:5c:e9:e7:78:6e:
                    96:d0:2d:02:c4:ed:99:8a:df:6e:dd:20:2d:24:5f:
                    bb:c2:d6:8d:3a:d7:c7:3f:3f:fd:2e:d2:6c:e2:d3:
                    75:ab:7c:a2:26:2b:8c:b5:87:9a:f7:72:9b:d3:9c:
                    65:35:34:d4:8a:c6:d8:c7:4f:bf:57:b0:69:9c:b4:
                    20:e8:25:ad:94:71:dd:8c:f9:7e:22:66:78:9e:82:
                    d5:0e:f4:64:de:93:4d:36:05:60:23:0d:42:e5:58:
                    8c:97:b6:92:11:c9:15:3a:13:ce:83:b9:c2:d4:8e:
                    f3:5c:1c:02:3c:75:0f:d0:f6:50:e4:60:d5:71:27:
                    50:83:53:ed:e3:7e:00:f6:d9:a4:0d:b1:76:0f:04:
                    50:dc:60:8a:c6:3e:05:7b:ba:ec:57:e6:b1:f5:cb:
                    ec:61:ea:f8:28:68:eb:3d:35:fe:75:87:c2:07:e0:
                    7e:f3:61:81:7f:fe:a0:4d:95:18:07:ff:27:df:16:
                    95:33:8c:86:46:44:63:9c:de:b8:cb:93:2f:38:50:
                    03:00:47:cc:05:ce:2c:0e:81:67:ee:7a:13:0f:68:
                    6b:9c:1f:44:8d:13:7c:4f:83:0b:65:93:17:f6:b7:
                    53:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:55:EB:52:02:40:24:96:EA:B9:01:00:C6:A7:C8:AE:A5:06:63:FC
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:0d:d2:14:9e:11:1a:fd:29:79:2f:33:8a:f0:6a:32:a3:
         15:f2:e2:0d:82:56:17:2f:64:ae:d1:84:b0:61:be:02:fd:c2:
         a0:be:52:f9:67:55:16:cc:4e:99:59:c6:b0:c5:ed:ab:3d:41:
         5a:a8:63:e3:65:a1:6c:98:23:1c:7a:28:f8:32:61:9f:07:3e:
         e1:4f:58:cf:b8:b1:7f:da:44:f6:4b:1e:12:4a:34:49:9c:47:
         70:64:e0:a8:98:b9:0d:09:00:6d:38:c4:01:46:24:92:31:b7:
         f0:ab:97:a3:32:4b:0a:f6:ec:d1:18:8c:ea:8d:1d:d1:11:45:
         df:ca:ec:93:4c:7b:f3:40:79:17:4e:0f:b4:fb:d2:f2:50:c8:
         97:11:01:24:17:16:39:6a:26:a9:65:49:35:f6:a4:df:e6:c7:
         12:a5:33:c2:e0:d9:30:66:02:b8:86:d3:ad:ed:bf:5e:5d:12:
         d2:ed:70:05:d5:cf:3c:d3:35:83:30:70:99:e6:6b:33:35:4b:
         44:19:99:34:00:35:ca:b1:57:dd:c7:00:5c:80:04:fc:35:fc:
         04:4c:8e:32:ab:a5:a5:5f:9e:7f:ae:83:98:59:15:8b:42:16:
         f0:75:bb:fc:e1:ae:9b:f6:65:40:f5:64:70:7f:93:60:ef:fc:
         a8:60:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:11 2025 by rpki-client