Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
File:                     6BOTvf9gFGKlVZHSass9jJI_8m0.mft (raw, json)
Hash identifier:          CnIVenehIBNH5pbjfjA/LjQ3jIuZXQ1UjBgebMFEMPg=
Subject key identifier:   0F:96:3B:3E:45:38:06:A1:9E:62:B6:2B:4E:F3:21:74:28:A0:DE:6F
Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D
Certificate issuer:       /CN=e81393bdff601462a55591d26acb3d8c923ff26d
Certificate serial:       0199FBEB58FEAEC2048A3C568461438B1BB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
Manifest number:          157F
Signing time:             Sun 19 Oct 2025 10:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:08 +0000
Files and hashes:         1: 6BOTvf9gFGKlVZHSass9jJI_8m0.crl (hash: a8VzUc2EJ8oRLcKbkKBM/0gbcx0VwfsZIl1URXe8U/M=)
                          2: RwWHoWi8bvEcrn91U7_cQg2FozE.roa (hash: HQDbKoqS2BbhQGyXNSljHl9fABiKNRyJ1D+l6ixZKCE=)
                          3: vvQy0Yj8i6h1g42ZTAwhRIXBuw8.roa (hash: T8KzIT3w14qu1ZHhgwVuDOIW10SZ/SXhFvfY0nRS5nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:58:fe:ae:c2:04:8a:3c:56:84:61:43:8b:1b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d
        Validity
            Not Before: Oct 19 10:02:08 2025 GMT
            Not After : Oct 20 10:02:08 2025 GMT
        Subject: CN=0f963b3e453806a19e62b62b4ef3217428a0de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:a2:09:9e:17:72:c7:53:bf:cd:12:c2:9a:
                    f3:c0:26:87:9b:06:61:85:6c:40:71:52:6e:ec:84:
                    cc:b3:b1:e3:98:27:a4:f2:ff:63:91:07:55:38:f0:
                    f2:d9:86:b7:20:38:84:91:88:c2:88:83:72:d6:7b:
                    08:1a:a2:ce:50:ef:8c:9a:7d:9c:41:c1:82:ac:4a:
                    1b:93:4e:44:09:87:88:d7:04:80:ab:04:11:3c:80:
                    af:c4:30:a1:df:31:04:11:fe:af:fc:1a:cc:3b:35:
                    f2:22:9c:ed:c2:c7:b9:4c:83:93:60:9d:28:0a:6d:
                    2e:c6:de:2b:e3:cd:c2:50:ea:0b:73:bd:95:68:1b:
                    8c:45:4d:e4:31:c0:9f:76:f0:08:01:e5:de:f2:ac:
                    24:99:4b:78:d3:be:83:69:e4:26:2c:1f:e2:1b:00:
                    67:e6:82:5e:e8:93:90:28:68:50:01:61:d0:95:09:
                    e1:60:de:0c:a0:44:56:73:73:c7:13:db:67:61:01:
                    de:44:7e:6e:52:03:78:97:45:3f:8b:b2:b0:e1:1f:
                    9e:b0:d4:a2:2f:a3:46:a6:4f:ed:11:f7:31:fd:64:
                    9c:8c:b8:d9:6e:70:67:41:62:16:eb:68:51:2b:a5:
                    bc:69:fc:38:4d:65:17:da:b2:8f:e7:c2:c3:24:10:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:96:3B:3E:45:38:06:A1:9E:62:B6:2B:4E:F3:21:74:28:A0:DE:6F
            X509v3 Authority Key Identifier:
                keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:58:59:74:f1:0e:ac:3d:ef:23:2a:82:be:88:fa:2a:10:91:
         37:69:d3:90:a3:bc:4c:4d:3f:58:1d:4f:fa:96:6c:36:29:75:
         c9:0c:0f:ff:6b:c0:82:60:69:93:04:68:b5:1c:0e:57:ef:53:
         da:9e:98:fc:c7:bc:a1:d0:5a:fe:f7:80:61:80:e7:c4:7c:a1:
         46:c4:0b:71:36:f6:78:e2:51:3c:ae:11:bc:d8:93:92:20:e3:
         f4:ce:0a:30:16:0a:88:b9:27:81:54:c2:89:9f:2a:42:d8:f8:
         21:60:7e:14:41:eb:ba:62:47:a1:6a:49:c4:b1:29:63:63:c1:
         92:98:c9:eb:c9:65:e2:db:56:e9:b2:49:d9:02:4c:9d:33:00:
         72:48:53:43:ea:dd:a1:ea:a6:3f:d5:5a:49:ee:98:1c:13:07:
         71:ef:d3:d1:23:9b:cc:8b:61:bd:13:de:f4:96:3c:b1:bd:d8:
         d0:3c:cc:2f:b5:8f:f3:27:e3:40:9f:fe:6a:fd:e9:15:2e:af:
         05:46:ba:d0:60:0f:db:92:c4:1d:88:04:da:0b:c9:65:87:dd:
         97:66:c8:37:fd:88:10:b4:f1:cb:9b:b7:07:91:5a:af:b2:c4:
         5f:8a:9a:9a:51:bf:35:1a:4d:bf:11:ee:02:4c:38:40:67:67:
         dd:3e:e6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:04 2025 by rpki-client