Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
File:                     kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json)
Hash identifier:          ZXwbjY3UqdOMWQB7vBXHybR1hzyQO8cClcSURXkFJq4=
Subject key identifier:   27:87:6F:AE:8B:B3:37:8C:7C:D8:3A:54:0E:09:01:FD:20:1C:2A:F5
Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7
Certificate issuer:       /CN=901f843ac9448cb07791917b90354015ffe23db7
Certificate serial:       0199FE103A4CBF1A3F72945150E89166A7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 20:01:40 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:40 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:40 +0000
Files and hashes:         1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: YNr3xsOGGYt3cbHTaHUewKsC290wXho/ETH3v+BB+58=)
                          2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:3a:4c:bf:1a:3f:72:94:51:50:e8:91:66:a7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7
        Validity
            Not Before: Oct 19 20:01:40 2025 GMT
            Not After : Oct 20 20:01:40 2025 GMT
        Subject: CN=27876fae8bb3378c7cd83a540e0901fd201c2af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7c:2d:46:23:89:89:31:3c:e6:58:fc:60:bc:
                    5e:f6:70:0f:6b:a1:0b:8b:ab:05:34:48:70:a5:52:
                    7c:aa:ad:f4:59:3f:72:12:bf:61:3a:b4:f1:a0:78:
                    6d:c2:9c:54:e4:34:ae:46:f6:68:6c:fb:c0:db:bf:
                    38:cb:e6:02:d0:14:e5:f4:ff:31:9c:5a:5d:f4:05:
                    d1:dd:40:c3:5a:73:9c:ba:b1:cf:9f:24:d9:7b:44:
                    d9:42:c7:37:71:d5:d7:ed:9e:4f:46:7f:a9:b4:b8:
                    1b:48:4f:70:09:ac:9d:b7:cf:ac:f0:70:d9:8e:94:
                    a4:f6:de:d6:8a:43:64:e6:b1:28:7f:13:7a:70:d1:
                    87:12:b8:d4:ce:d0:ac:55:f6:c9:fc:0a:00:fe:f9:
                    5a:22:d9:7b:7d:e6:76:9c:7f:4e:6a:e5:46:0e:3e:
                    9c:7f:a2:81:7a:75:57:c1:d7:32:e8:55:33:3e:c3:
                    47:f2:b5:db:36:c7:b9:89:2b:b7:32:c6:77:79:1d:
                    0a:ef:2f:d6:d3:e2:84:02:dd:6c:79:6f:fe:fc:58:
                    d7:f2:51:45:7f:82:41:27:dd:05:7d:39:9a:ff:b0:
                    d3:68:f7:c1:39:45:bb:c0:bb:78:b3:b1:38:67:b0:
                    32:88:5f:6a:f9:10:53:cd:5c:c7:ca:4a:be:4e:05:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:6F:AE:8B:B3:37:8C:7C:D8:3A:54:0E:09:01:FD:20:1C:2A:F5
            X509v3 Authority Key Identifier:
                keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:90:d8:c5:7c:8a:55:74:e9:fa:a4:20:a5:59:3c:8f:5c:
         96:59:62:5b:8b:b3:ae:93:04:27:87:9e:49:2a:f6:4c:ef:96:
         73:e1:39:3e:f7:6f:9e:63:7e:c0:29:e0:89:79:8f:e9:15:ad:
         65:1f:b7:19:45:a8:86:16:8e:a9:0d:5f:fb:a8:41:2f:c1:6c:
         e5:a4:2d:a4:16:6a:06:8c:07:f1:2a:4a:1a:56:4e:c5:43:49:
         7c:c2:28:17:d0:00:9a:45:e8:ae:58:df:f2:1e:84:8f:d0:62:
         ab:88:67:d4:3d:59:b9:c0:3a:53:46:94:df:fd:23:73:d1:b0:
         04:3c:ea:aa:3a:f8:99:a3:94:eb:63:07:51:c9:9c:3f:9d:56:
         a7:21:13:89:d6:90:83:dd:be:63:9a:03:ea:d1:89:fe:87:82:
         54:fa:da:7b:fd:db:65:12:ff:b6:20:34:99:6b:f4:98:28:9b:
         de:c3:5d:26:70:c5:46:f4:7f:a1:ca:fc:a0:a4:91:71:bb:8a:
         2e:f2:11:aa:05:b0:c0:51:87:cc:db:32:4e:65:0a:07:ba:ea:
         e6:1b:27:f0:2e:c0:b9:6b:b9:a2:7a:eb:68:a4:c1:ef:11:d1:
         89:79:47:cc:96:6c:34:33:9d:85:50:06:65:3c:2f:19:3e:70:
         ef:0d:4d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:35 2025 by rpki-client