Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
File:                     RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json)
Hash identifier:          V4VgfPT2/f61jgBFADiImyuLL8+n1Loz+9a4ocu/8Ig=
Subject key identifier:   2B:48:87:91:A8:65:2E:90:A4:8F:26:5B:FB:F8:C2:B9:6C:85:DB:E6
Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8
Certificate issuer:       /CN=4516e53b32caa761906f0fcdea275b720e1742c8
Certificate serial:       0199FB45FF980FD12BF14F49A4B5DF21BF57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
Manifest number:          1677
Signing time:             Sun 19 Oct 2025 07:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:32 +0000
Files and hashes:         1: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: wpx6PN4B+mff+8D6vMcZdbyafdGBKuQA5pqlEZXjCuo=)
                          2: pi-26F4PeqiMAjfpczMwVUa13T4.roa (hash: Vruq+xuvPpEjrPLqBdBog4T5WQxUoJKp5FP5nL6SSoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:ff:98:0f:d1:2b:f1:4f:49:a4:b5:df:21:bf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8
        Validity
            Not Before: Oct 19 07:01:32 2025 GMT
            Not After : Oct 20 07:01:32 2025 GMT
        Subject: CN=2b488791a8652e90a48f265bfbf8c2b96c85dbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:2b:ce:24:a5:df:dc:15:54:d9:c2:17:24:
                    72:2e:4a:e4:06:1e:d8:3c:7c:fb:40:45:a2:17:db:
                    ce:4a:e4:7b:8c:ec:1d:aa:77:a1:a7:2e:fa:1c:76:
                    29:2c:5c:9c:8c:c9:eb:90:f7:3a:df:6b:2c:d3:22:
                    d1:ef:f2:a8:fb:74:53:b5:05:52:a3:06:89:d2:d5:
                    f1:38:79:a4:e6:45:07:de:b6:52:d3:e0:0d:05:fe:
                    57:94:4d:91:a3:1c:d0:68:76:1b:7f:ff:55:0e:19:
                    18:f8:c4:86:e3:c2:76:2a:73:c7:1f:c5:de:93:42:
                    ea:a4:95:c1:cc:01:5c:94:7f:db:5c:55:dd:e0:fc:
                    60:2c:b6:7d:d0:3d:03:8e:2a:95:4f:02:c0:c1:62:
                    84:c9:27:7d:1f:e2:1c:34:b3:f6:ab:a8:34:e6:44:
                    9d:11:75:71:6f:18:9a:a5:fb:6f:c9:e2:1a:7e:aa:
                    74:71:08:35:f5:fe:96:f6:b6:7d:8c:f2:5c:81:bd:
                    87:8f:08:49:de:90:28:cf:07:81:9e:05:01:30:13:
                    a2:28:2c:cc:27:da:5b:c1:f8:53:44:3b:d1:c7:7e:
                    48:6b:6d:2e:b9:0d:4e:79:e9:56:27:dc:b2:50:02:
                    c0:26:78:8d:2e:7d:7b:57:49:1f:36:18:e8:a2:ff:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:87:91:A8:65:2E:90:A4:8F:26:5B:FB:F8:C2:B9:6C:85:DB:E6
            X509v3 Authority Key Identifier:
                keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:49:21:bf:e9:38:d0:51:a4:d0:cf:c9:9e:84:0a:3c:76:
         28:cf:ce:ff:d8:5f:c1:53:15:0d:7f:56:34:03:65:3d:b6:c8:
         96:a7:1d:03:08:38:13:c5:46:0a:8a:29:9c:dd:45:23:18:5d:
         a1:47:e2:50:c8:a2:a1:c1:56:09:c9:74:36:99:75:83:e2:1b:
         17:94:60:b4:b9:e4:f6:14:7d:0c:84:42:99:d7:0a:35:47:7a:
         f2:3e:3f:b9:8b:65:7b:0a:38:96:22:5b:68:4a:93:bd:66:88:
         31:6d:32:a1:2f:3f:66:06:39:08:1c:a6:32:68:23:35:c0:5d:
         88:69:02:2b:c6:d4:13:8f:22:d9:33:21:b8:10:31:83:23:55:
         00:e7:60:09:91:4a:1d:b9:43:ce:38:0e:ef:97:bf:1f:41:04:
         2d:43:d3:62:71:8c:4f:d3:53:a6:22:6e:d9:7b:81:df:21:aa:
         ec:b0:8e:b2:bc:c0:0c:f1:ce:60:1a:46:39:04:02:c4:49:02:
         07:28:8f:5c:cd:80:79:96:be:7c:8b:51:1b:0f:0a:c3:7e:71:
         b7:2e:03:c9:56:22:1e:c4:2b:6b:28:53:a9:64:6c:a7:92:8a:
         b7:05:db:58:08:1c:df:f5:1d:91:35:8c:8d:28:c1:33:a5:f8:
         4e:48:7d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:34 2025 by rpki-client