Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          UqZLMbWrj/F26yVBHCfdbr5RvC7/37N+/9qsgqmarLo=
Subject key identifier:   2B:4B:86:B5:FB:3E:5B:2C:53:6E:A9:C3:8B:02:61:F5:4F:52:A6:7F
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       0199FC590C756B1A08A2FC3481CFD18DA8A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:58 +0000
Files and hashes:         1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=)
                          2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: REzznwCHShPefaB/kbFJZmwCbzgqBpMwuzUxq7pFijQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:0c:75:6b:1a:08:a2:fc:34:81:cf:d1:8d:a8:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Oct 19 12:01:58 2025 GMT
            Not After : Oct 20 12:01:58 2025 GMT
        Subject: CN=2b4b86b5fb3e5b2c536ea9c38b0261f54f52a67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:61:9e:49:d5:e3:a0:66:09:38:9a:d1:0e:
                    f7:a5:01:17:6d:00:55:d6:19:a3:53:fc:83:07:a5:
                    1b:08:f9:16:09:b4:27:0a:d6:da:01:0c:0e:d1:76:
                    44:fb:63:12:17:bc:44:41:1d:80:34:38:f6:db:b9:
                    19:b5:7b:50:a0:71:75:21:89:b0:4f:73:1a:0c:4c:
                    6c:c5:ad:24:59:0f:91:62:65:12:fb:c6:27:a3:9d:
                    b4:76:08:44:a6:5f:a3:15:ec:58:d8:9c:12:93:6e:
                    36:da:9e:1d:2c:64:89:7a:f3:51:38:bd:32:a1:eb:
                    2c:dd:89:bb:09:c3:37:1d:2f:3b:fe:e1:37:73:bc:
                    eb:f9:b6:04:e2:79:d7:4e:31:ad:1d:d8:41:84:fe:
                    45:18:ea:73:3b:45:07:bf:94:7f:48:63:a0:a9:52:
                    ee:22:33:f3:32:a0:77:29:7c:31:94:5e:52:fa:7c:
                    f2:9f:e2:de:26:2c:30:fa:04:b3:ee:4c:0d:b9:9b:
                    eb:56:d9:7a:3c:0e:57:c3:db:7f:0f:ea:ba:5d:dc:
                    08:28:82:ca:b5:9e:6c:6a:1f:28:3a:b3:72:4d:95:
                    a4:52:73:22:11:57:f3:25:7e:88:89:b5:50:34:5b:
                    27:a9:53:92:e4:e5:66:53:a9:8b:50:17:71:a1:15:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:86:B5:FB:3E:5B:2C:53:6E:A9:C3:8B:02:61:F5:4F:52:A6:7F
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:eb:03:3e:c2:b1:7a:99:da:0c:7d:f7:d6:54:74:de:14:
         97:93:5e:d9:32:48:68:2d:20:b2:64:8d:6f:17:55:da:3e:d7:
         1d:c6:ae:25:46:9a:99:2c:69:b7:36:a7:43:d3:28:51:f5:2f:
         77:6d:63:f6:64:4f:aa:c2:af:71:7b:c1:06:3d:2a:56:78:2d:
         08:44:70:9e:6b:e4:68:28:20:5c:61:be:4c:19:30:6d:27:35:
         d3:dd:37:8e:f2:39:1e:c6:02:9e:df:28:84:24:3e:4a:49:fc:
         5c:e0:2f:93:dc:11:f5:b3:70:b6:d8:85:ce:cb:8f:dc:72:40:
         ba:9d:a2:11:4f:69:f8:97:58:d3:61:06:74:c7:0c:45:0b:c7:
         0e:7e:bb:8e:62:b6:6f:df:d3:fa:93:50:e9:2c:28:72:67:80:
         0f:c6:d1:47:55:25:dd:ea:80:26:18:73:41:f8:4d:8e:18:5f:
         4c:a1:a1:57:19:09:ff:de:a8:2f:67:51:62:6e:94:bf:31:29:
         82:60:67:0d:55:a4:22:a4:d7:90:0b:52:cb:24:21:cc:50:76:
         2e:58:d7:bc:41:1b:49:df:4a:de:13:50:5c:d4:2d:1e:0b:02:
         da:ae:46:35:98:37:69:32:75:18:b0:03:15:0d:df:8e:e7:fe:
         f6:86:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:18 2025 by rpki-client