Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
File:                     B6alie6EioBSI4GRuYA153USJyU.mft (raw, json)
Hash identifier:          8AUSYtssz/3TAW+6pxdz/E3RyFN7Eq1lLDAIxeyXwJ8=
Subject key identifier:   91:83:39:13:DF:C8:3F:27:C0:1E:1D:9D:27:71:7F:83:21:E3:58:3F
Authority key identifier: 07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25
Certificate issuer:       /CN=07a6a589ee848a8052238191b98035e775122725
Certificate serial:       0199FCFD1E4CAE401F815D95DAB4B64DA301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
Manifest number:          0D68
Signing time:             Sun 19 Oct 2025 15:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:10 +0000
Files and hashes:         1: 9HLS_NA10pMknjQ7wU49q_gjn1M.roa (hash: GSeJidvs+nbJKlNoZl5WB6JbvmgER8mg4y2DPiPnwI0=)
                          2: B6alie6EioBSI4GRuYA153USJyU.crl (hash: rPFeyasdeE52Oj3syH7HUc+ow8f6Uok/DC0Ai5baINM=)
                          3: HKdVcnfVobsdIXBp0QDt_Z0qTCg.roa (hash: HCRvOv3w8ga9OyNraAL7FomJBvkDq6oZ4SO2+hazIX0=)
                          4: bJ3Yt6dDHk8Pm8b3mw9JOEx9PEM.roa (hash: Q+f3a2oxT0KKWV1uGYhiJcbNDy66Hv8e1IwzRSkuGAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:1e:4c:ae:40:1f:81:5d:95:da:b4:b6:4d:a3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a6a589ee848a8052238191b98035e775122725
        Validity
            Not Before: Oct 19 15:01:10 2025 GMT
            Not After : Oct 20 15:01:10 2025 GMT
        Subject: CN=91833913dfc83f27c01e1d9d27717f8321e3583f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:62:7e:81:07:50:b4:7a:a4:d6:1a:15:5a:
                    78:01:a3:b7:0c:83:c6:d9:df:cd:c6:e8:77:db:06:
                    35:24:c5:d1:a1:e6:e4:7d:05:25:bc:89:2a:fc:9a:
                    5d:64:f5:13:cc:9e:90:03:5d:e1:80:e6:6c:0c:57:
                    24:77:a2:bc:fe:36:31:a9:01:24:65:2c:7f:0d:12:
                    f0:05:30:1e:fb:ae:71:ea:6e:f4:01:d7:5d:68:b1:
                    4d:e5:f4:08:81:04:79:62:13:90:4a:75:42:2e:15:
                    56:cc:f6:5e:59:db:75:b9:b2:16:17:14:47:db:ba:
                    bc:e6:d9:23:45:27:4a:ed:89:8f:05:bc:6b:ff:7b:
                    65:09:f7:7f:ef:1b:28:5b:3c:e0:2a:3f:12:8b:7e:
                    3b:af:d6:9e:15:bc:07:54:32:73:20:44:a2:b7:94:
                    2e:00:c2:89:8e:91:7e:b9:f6:bb:c4:cf:aa:40:bd:
                    5b:7c:64:69:bc:d0:02:27:58:b5:ce:27:8c:2c:ce:
                    8d:ad:77:d9:9f:8c:20:ad:a0:ff:6c:52:6f:e1:d6:
                    e7:65:d8:bc:7e:74:5a:f6:86:55:c2:14:1c:e3:5a:
                    c1:00:09:09:a8:b0:13:36:2f:ca:2d:42:99:5d:8f:
                    e7:26:76:60:4d:cb:6f:c3:90:ad:13:bb:22:9f:20:
                    1b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:39:13:DF:C8:3F:27:C0:1E:1D:9D:27:71:7F:83:21:E3:58:3F
            X509v3 Authority Key Identifier:
                keyid:07:A6:A5:89:EE:84:8A:80:52:23:81:91:B9:80:35:E7:75:12:27:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6alie6EioBSI4GRuYA153USJyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/7faf5e-7435-49fe-acd7-20fbc906494b/1/B6alie6EioBSI4GRuYA153USJyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:27:33:60:7f:2c:82:f0:80:c9:5d:f8:fc:2c:40:9e:51:c3:
         d0:a5:59:36:0b:ee:db:9a:8e:29:1e:e1:d5:d1:5a:3d:52:8b:
         27:e6:74:d9:20:09:7d:e0:67:e7:fe:0f:7c:97:21:c8:3a:d9:
         c6:6b:c9:e2:20:96:ad:e2:57:f3:7c:cb:c6:12:68:fa:cf:1a:
         d3:7b:5d:63:86:82:c9:40:1b:3d:33:a4:30:ab:97:67:a2:26:
         a8:eb:58:b5:10:b0:5e:a1:ab:28:ee:7d:08:0c:e5:ee:0e:87:
         5f:9a:c5:dd:d2:53:88:1c:42:74:b4:78:a8:3a:b2:ee:1a:b7:
         2f:5c:9f:f2:8d:0d:a5:0d:4a:66:ca:11:ac:1f:60:cd:aa:21:
         7e:42:be:5d:d9:3a:8e:13:2a:20:76:50:77:f6:75:ff:91:8e:
         11:c6:de:71:f8:4a:d8:14:9e:4b:be:69:ef:24:38:b6:9a:71:
         38:1e:e6:c3:17:5e:39:a5:54:0a:60:b0:ca:72:18:0d:c4:3e:
         e8:e3:ca:3b:e7:6e:92:d5:7d:d5:be:05:fc:2b:63:ac:3a:45:
         95:c3:7a:3c:e1:0f:11:60:29:d2:8d:fb:11:67:c0:6b:9e:ef:
         d3:1a:4e:47:b7:2b:84:7a:2d:9a:de:8f:be:f1:3c:d5:7c:f5:
         06:fa:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:47 2025 by rpki-client