Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
File:                     B94YU-WWYfkI4iaVDL3FK5f2IRM.mft (raw, json)
Hash identifier:          dvEQnL/aI3DAQMd1D2SH7jNH3TsF8eeAEdmbTZs7Res=
Subject key identifier:   E8:87:F9:27:64:FD:BC:81:71:56:29:88:2B:BF:18:27:6F:1F:04:2F
Authority key identifier: 07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13
Certificate issuer:       /CN=07de1853e59661f908e226950cbdc52b97f62113
Certificate serial:       0199FCC67C9C1633A189C780360A275A99A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
Manifest number:          039B
Signing time:             Sun 19 Oct 2025 14:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:30 +0000
Files and hashes:         1: 8z166PmMluGUtq4LMYoCmQWbrpw.roa (hash: WKHp+ZRmqGcWYXHDT5E01IWMi/o9ZxBUSy9tRRWhgjA=)
                          2: B94YU-WWYfkI4iaVDL3FK5f2IRM.crl (hash: f7ZR0Sfp3IaPnWef9RsTVkP2RqVUlDoGz/oQWNPP/YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:7c:9c:16:33:a1:89:c7:80:36:0a:27:5a:99:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07de1853e59661f908e226950cbdc52b97f62113
        Validity
            Not Before: Oct 19 14:01:30 2025 GMT
            Not After : Oct 20 14:01:30 2025 GMT
        Subject: CN=e887f92764fdbc81715629882bbf18276f1f042f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:81:37:2a:15:cf:7f:da:f4:24:fa:12:b9:
                    61:3d:17:5e:f7:41:49:15:78:ad:34:60:a6:31:8b:
                    60:9a:4a:04:cb:08:22:a4:5b:39:c5:0a:3d:87:64:
                    3a:fc:fd:10:75:38:79:23:38:96:1b:0b:3f:18:7d:
                    d9:3d:ac:03:aa:8e:a0:31:f0:09:95:30:ae:71:03:
                    22:2e:b7:bf:f9:0e:af:5b:b7:82:09:98:74:78:13:
                    d8:29:a9:36:13:a6:96:57:52:d6:3e:41:88:2b:6e:
                    80:94:e4:bd:e0:4d:e5:88:74:94:d8:1c:8a:1a:18:
                    ac:16:66:09:2a:06:18:56:d0:60:43:56:eb:f7:d5:
                    9f:5d:99:02:db:6f:35:e6:21:b0:e9:c9:75:c8:a9:
                    64:8e:85:3d:64:f5:b8:18:d1:b9:98:4b:75:86:a8:
                    47:f7:b1:83:7a:6d:c2:ee:02:e8:72:5e:c1:9c:9e:
                    7f:5b:28:10:8f:8b:b7:26:5e:25:d0:bb:aa:8f:06:
                    b0:7d:49:e6:0e:d9:15:d2:99:cf:39:ee:e7:d8:4d:
                    82:44:d9:39:4d:ea:42:d9:52:ce:2b:66:5f:b0:a7:
                    d8:ce:0e:dc:02:26:40:7f:1d:81:7b:2f:04:ce:5a:
                    da:6b:a7:77:46:00:10:8d:04:ab:6d:21:8b:65:5b:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:87:F9:27:64:FD:BC:81:71:56:29:88:2B:BF:18:27:6F:1F:04:2F
            X509v3 Authority Key Identifier:
                keyid:07:DE:18:53:E5:96:61:F9:08:E2:26:95:0C:BD:C5:2B:97:F6:21:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B94YU-WWYfkI4iaVDL3FK5f2IRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/8bc7e6-1980-4e85-b29a-e30dd661ed20/1/B94YU-WWYfkI4iaVDL3FK5f2IRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:77:0e:61:9b:f3:bd:50:5f:ca:5b:5a:58:75:b0:26:e4:
         75:65:0f:5a:a9:00:00:ca:17:dc:8e:9f:6f:a1:66:cf:be:60:
         42:32:2b:e9:2b:8a:36:80:19:9e:be:78:7d:dc:b0:d8:6b:32:
         a6:f7:c5:a6:f4:f6:e7:c7:9e:b1:a4:0e:1e:55:18:46:c7:55:
         5e:9b:fc:6a:f9:eb:8c:f7:81:00:e9:dc:4d:1b:d8:83:ec:9a:
         19:7f:81:be:39:7f:0b:9d:72:62:ab:ef:29:81:7a:66:d7:86:
         74:2a:a8:c6:c2:77:22:27:14:7e:b3:e3:0f:56:b0:1a:9a:c4:
         9a:f9:56:5b:45:31:c9:2b:96:82:7e:a3:14:41:62:36:9a:de:
         62:b7:ef:16:00:80:da:4a:ee:67:40:2b:38:a0:0a:aa:c0:51:
         e7:ee:30:bc:f8:51:a2:56:d9:e3:4d:32:4f:de:b2:ec:1b:3b:
         6a:7d:7b:41:06:8a:7d:4d:34:bc:69:f5:45:7a:41:eb:04:37:
         e2:4c:4c:c0:a9:75:05:4c:56:01:e6:6a:0b:96:33:b0:85:59:
         60:52:f0:3a:47:c1:d0:94:4f:ca:c9:f2:3a:0a:cf:6c:62:ee:
         b4:96:40:5c:7d:29:0b:6d:d4:58:81:db:29:de:99:dc:bd:74:
         ac:f8:af:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client