Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
File:                     bLJy2h2BJrUXGeWjRWiArfqInKM.mft (raw, json)
Hash identifier:          oeWIXvfiUmR3CVCTaJIYMcAlFk135/45aZ4KPwFLyMk=
Subject key identifier:   8D:3A:6F:87:C9:A7:06:06:2E:E2:BD:B3:28:B8:77:32:A2:70:3F:38
Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3
Certificate issuer:       /CN=6cb272da1d8126b51719e5a3456880adfa889ca3
Certificate serial:       0199FB7CC2129F29EBBDF2DE822257EBB972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 08:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:21 +0000
Files and hashes:         1: bLJy2h2BJrUXGeWjRWiArfqInKM.crl (hash: ybRwM/M/uggM5RXGCOsirRpWz5j03U4J26h6cL0Oo1M=)
                          2: uOnSDaCjeMs1-L4eA8Ozs6UPSSA.roa (hash: qYSuZ8A4rf2Pqbl96n2xsZCX23fJfZc0cHfaDMSlIAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c2:12:9f:29:eb:bd:f2:de:82:22:57:eb:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3
        Validity
            Not Before: Oct 19 08:01:21 2025 GMT
            Not After : Oct 20 08:01:21 2025 GMT
        Subject: CN=8d3a6f87c9a706062ee2bdb328b87732a2703f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:0f:cb:a6:e8:24:31:f5:63:26:fc:0b:36:
                    d7:2d:c1:de:85:21:10:05:60:26:34:16:9d:29:1c:
                    e3:5f:88:94:9f:46:e8:92:cc:e9:b2:6f:a6:75:ff:
                    0d:c4:79:c2:a3:37:dc:1a:02:d1:bf:8e:5c:b4:91:
                    9d:95:f0:aa:93:32:16:d6:74:4d:e5:e8:89:d0:b7:
                    da:0f:10:b1:41:40:09:42:be:d2:52:69:60:59:44:
                    63:7b:ad:a0:1a:ff:89:42:76:89:50:75:8f:e8:cc:
                    99:77:76:1d:bd:99:41:51:69:d9:f5:a3:71:45:55:
                    cd:b7:93:3a:ef:74:7e:06:66:ab:cb:a5:1d:fd:dd:
                    2a:31:06:df:65:e3:b8:bb:18:2f:65:8e:99:22:88:
                    10:1d:f7:a9:68:85:77:3b:e4:4d:c1:3d:7e:ac:7c:
                    7e:b8:14:5d:e2:b5:46:5e:20:ca:ce:94:58:8c:f3:
                    17:62:d4:f7:e2:13:12:ac:85:cd:d8:a7:6f:51:99:
                    8a:a7:0e:a1:d0:16:bc:43:e4:43:cb:8b:06:14:12:
                    8f:9b:58:15:d7:b5:bf:50:5b:41:e8:80:be:7f:54:
                    95:fb:24:98:50:9b:9f:11:5d:81:51:9a:85:a6:33:
                    71:2a:fb:38:c1:02:b2:c2:1d:ad:0e:39:32:f3:8b:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3A:6F:87:C9:A7:06:06:2E:E2:BD:B3:28:B8:77:32:A2:70:3F:38
            X509v3 Authority Key Identifier:
                keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:29:c7:ec:2e:18:5d:86:4e:68:a7:9c:97:64:5c:65:54:52:
         a7:7f:63:2e:3a:32:53:12:ee:c4:59:e5:94:91:f5:fe:e1:fa:
         4d:28:26:e4:2a:36:1e:b1:4f:9e:df:86:de:b0:a0:74:1e:ee:
         8c:ec:3f:68:63:1f:f6:5d:9f:44:6a:26:d2:b1:bc:57:c7:7a:
         c7:5f:41:16:93:c8:6e:36:a6:61:91:7b:45:fa:49:88:83:5c:
         0d:65:75:6c:e8:d2:be:7c:22:95:f7:97:cf:d4:50:db:19:99:
         43:5e:95:f4:c5:59:f0:63:97:0e:10:a2:95:cd:21:f1:e3:fe:
         19:be:b8:9a:2a:d0:82:f2:3e:a1:b1:3b:c4:0f:d5:c7:64:85:
         6a:10:19:55:98:ac:b3:44:6c:f0:b9:40:93:2f:1a:06:57:7e:
         85:1d:ce:2a:62:c6:d1:26:a0:d7:e8:d8:0d:6f:2d:bd:76:6f:
         9c:d4:75:34:f8:5b:cb:9d:17:4f:35:ba:a9:46:67:0f:d4:36:
         8c:a0:bb:c4:72:9b:68:b3:e3:2c:2f:a1:32:51:5f:92:3a:af:
         aa:20:7a:f8:ba:a6:7d:b0:9b:50:93:f2:08:8a:a8:81:a5:a4:
         68:2c:0b:f9:cf:88:8d:6b:e2:3a:63:b8:80:06:4a:60:df:d5:
         d5:f2:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:58 2025 by rpki-client