Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File:                     b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier:          i+i7IPfYAE823AHU3w8DrxlvH6flV0rjC4HlTZ7LEz0=
Subject key identifier:   CA:33:79:04:7A:B7:DE:6B:2C:55:FF:B7:A4:A6:4A:8F:BE:3F:4B:AC
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer:       /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial:       0199FDD9B32E3F1DB280A00EBA2F861D437F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number:          0EAA
Signing time:             Sun 19 Oct 2025 19:02:06 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:06 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:06 +0000
Files and hashes:         1: ZIja49CzE0s2C9AlBaxxTa5EnBc.roa (hash: Mwwwh5zbLqqLKLq4mDwCxjzrltfztiX/y2yTkp5xrGs=)
                          2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: pYAp630L4HFJTdSDb9FRI6MFquPmXfhFiXNIARoQcBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:b3:2e:3f:1d:b2:80:a0:0e:ba:2f:86:1d:43:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
        Validity
            Not Before: Oct 19 19:02:06 2025 GMT
            Not After : Oct 20 19:02:06 2025 GMT
        Subject: CN=ca3379047ab7de6b2c55ffb7a4a64a8fbe3f4bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:58:9f:87:4a:4a:31:5c:a0:5e:1a:f4:ab:
                    16:8d:58:af:fd:ec:6e:96:b5:9c:b3:4a:94:d1:fa:
                    2e:f6:90:0f:1f:50:db:14:94:98:c9:61:01:fd:8e:
                    ee:cd:b4:e3:b9:c1:61:13:41:3a:0f:a6:3c:d8:61:
                    d0:d9:33:14:6b:2a:77:80:c0:bd:d9:6d:bc:80:cf:
                    73:fe:8e:77:21:5d:30:ed:3d:30:90:9c:7a:a1:10:
                    9b:4d:67:46:ca:45:75:ba:83:5c:ba:64:53:cc:8a:
                    2a:f9:e3:90:88:84:2b:5d:32:20:3f:ee:b5:2a:45:
                    38:21:80:5b:54:a8:e3:f3:1e:f0:d6:cd:8d:59:c2:
                    0b:50:fc:dc:e6:97:42:81:c0:67:eb:bc:75:3a:cd:
                    8d:33:80:50:ab:c4:f7:0e:7f:2d:78:55:c1:13:04:
                    fc:7e:41:1d:58:de:88:32:cb:69:9d:79:00:21:f1:
                    16:08:22:ed:46:8d:2f:a4:2c:6f:80:0b:9e:67:c8:
                    3c:ad:79:0f:82:b9:1e:49:bc:19:57:37:1b:95:8a:
                    93:51:1b:32:61:fc:a8:95:81:8b:02:58:63:a9:6e:
                    b3:c8:89:9a:4c:52:78:86:ab:48:18:2c:29:32:aa:
                    90:b4:bd:59:23:eb:f2:f8:bd:81:b2:2c:5d:08:2d:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:33:79:04:7A:B7:DE:6B:2C:55:FF:B7:A4:A6:4A:8F:BE:3F:4B:AC
            X509v3 Authority Key Identifier:
                keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:6e:50:06:7a:d2:cd:0b:ec:55:ff:d6:dc:09:9c:61:cb:
         b2:c1:c7:9a:88:e2:e7:e1:7d:2f:d6:cc:e6:bb:ef:27:76:ee:
         35:ec:a2:fa:d2:99:3d:a7:84:8e:6c:2c:d5:a6:40:9e:0c:c7:
         c2:71:5a:6e:8e:3c:bd:f8:e6:44:a3:68:bc:ea:d3:ec:74:04:
         07:03:46:10:38:30:b9:96:a3:a6:2c:0d:50:a2:87:9a:d9:3f:
         79:75:74:dd:c9:2c:14:bc:4c:5c:ce:d4:27:9f:b1:7c:96:d2:
         b5:40:84:2b:77:3a:10:72:0b:9c:c1:30:ef:13:26:63:e3:cd:
         fc:c4:16:04:3c:a1:a0:e0:00:07:41:70:eb:79:ab:cc:1d:51:
         69:84:d0:b5:99:a3:39:2d:c3:c9:9c:21:f8:3c:ca:91:5d:04:
         0c:2c:fb:70:3f:59:bc:a0:03:9c:ff:b7:77:ab:1d:11:f2:eb:
         ca:a1:d0:e2:3b:32:38:8d:3d:40:82:0a:33:46:5b:3f:a2:5d:
         4e:6f:5d:af:be:61:81:1c:2f:d1:bb:5c:ee:b8:4a:3b:02:1a:
         70:24:e6:b0:fa:9b:58:be:82:54:a3:b8:5b:2e:4b:ac:13:7f:
         29:1d:01:c4:6c:5d:42:1a:64:25:83:8f:5c:f6:50:f2:0c:fa:
         26:96:68:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:01 2025 by rpki-client