Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File:                     r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier:          8b9AfgNM2+UJ1o9ya+MbvlckeBa0cinwxmP2XZs9Pj8=
Subject key identifier:   CB:7B:26:12:F1:31:61:F2:DC:7D:1F:B5:07:3E:FD:9D:6A:99:6C:93
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer:       /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial:       0199FB7C8F50071C18AF8FFC410DDB143924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 08:01:08 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:08 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:08 +0000
Files and hashes:         1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
                          2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: cTGb0HWp55WpAwd2WqxxDzelOBQX1X75Gixn+ULDo7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:8f:50:07:1c:18:af:8f:fc:41:0d:db:14:39:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
        Validity
            Not Before: Oct 19 08:01:08 2025 GMT
            Not After : Oct 20 08:01:08 2025 GMT
        Subject: CN=cb7b2612f13161f2dc7d1fb5073efd9d6a996c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:4d:b3:7f:44:7b:19:3b:f6:b1:ab:60:73:
                    dd:e3:9a:56:7c:79:3f:0a:d1:f0:29:9b:cf:41:06:
                    27:d4:08:f1:61:39:40:57:d7:b4:16:a4:a6:41:18:
                    fd:28:cb:10:c3:63:a6:67:64:fe:a9:09:50:c6:06:
                    d4:42:19:c5:99:27:48:1b:be:5e:77:22:66:1d:2f:
                    6c:ab:da:0e:02:84:66:f0:25:e5:d0:73:27:4d:14:
                    4d:09:71:0d:40:13:bc:52:c6:ec:9b:60:57:47:b9:
                    c2:a9:85:a2:c8:7d:c8:1c:30:db:09:37:e2:45:aa:
                    ed:29:31:db:c7:a6:20:18:8b:9f:be:91:5a:4a:38:
                    05:b8:a9:ec:1f:4c:20:34:7b:06:33:a3:41:a7:e7:
                    fd:92:3e:9d:3b:55:c8:1e:9e:b7:d7:28:c7:7f:9b:
                    67:cd:7a:bb:cd:4a:cc:4d:77:4a:6c:5a:d7:87:99:
                    7c:22:61:f0:d3:ee:2b:dd:59:77:d1:af:96:ca:34:
                    9b:c3:4a:7b:78:db:24:66:62:09:39:ee:52:87:1c:
                    fa:76:98:7b:8c:8e:77:7a:aa:2b:ce:d9:ce:8c:04:
                    68:ec:7b:46:48:73:15:1f:cc:58:7c:1c:fd:0c:14:
                    37:bb:81:93:8e:7f:6b:92:93:c0:cd:42:35:ae:da:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7B:26:12:F1:31:61:F2:DC:7D:1F:B5:07:3E:FD:9D:6A:99:6C:93
            X509v3 Authority Key Identifier:
                keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cd:ed:dc:67:2a:b0:3d:0e:0b:93:c4:e9:59:79:93:09:f4:
         ea:2f:d3:57:fe:07:ee:1a:fc:f1:8e:c9:9b:b6:69:ff:93:5d:
         93:79:6f:08:1e:1c:7b:8e:85:1c:54:4c:f1:0b:a7:b7:21:08:
         20:09:31:65:e2:29:c7:c5:ae:71:5a:0d:31:b3:c9:67:9e:d1:
         0a:13:97:bf:8b:83:ea:47:fe:2e:88:4a:c1:6c:08:53:41:fd:
         99:3c:77:aa:ce:1f:23:18:33:f2:ad:ec:69:bb:3d:4b:2a:22:
         f2:7c:f5:bf:33:2e:df:bf:e6:22:74:12:47:0e:fc:c3:ba:62:
         9c:e1:6a:50:3f:9c:8d:25:ae:cf:82:9b:19:79:e6:3f:fd:c1:
         9b:50:5f:14:87:bd:0f:49:c1:50:b8:64:cb:62:6f:ea:7b:65:
         18:3b:00:e6:c2:9f:d3:4a:54:93:a4:bf:e9:c4:b1:e4:f1:eb:
         74:df:fc:30:09:eb:5b:6a:92:ac:e6:e6:af:ab:ff:1a:73:2b:
         9a:88:a9:46:8f:cf:a1:d9:d4:5b:86:47:ce:51:a9:71:81:a1:
         e9:4d:26:81:a1:70:bd:46:52:40:38:a0:92:62:fa:6a:a8:5f:
         6b:ad:ae:a7:b0:04:a5:3e:f9:f8:2a:bc:52:ce:3f:4b:e6:2b:
         aa:05:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:44 2025 by rpki-client