Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
File:                     Br0wrDVhod9_xrKWv50p3VWB8e4.mft (raw, json)
Hash identifier:          PQImD+Eo5NAnw7P9OVvneZWp1j9X6DWulbXxfuy90cw=
Subject key identifier:   31:13:13:2A:99:82:B2:B4:3B:D2:01:5F:1C:64:A3:29:FD:3A:F3:26
Authority key identifier: 06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE
Certificate issuer:       /CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
Certificate serial:       019A01B6203DE7DF9D37F9F3EE34315AE54C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
Manifest number:          16E6
Signing time:             Mon 20 Oct 2025 13:01:44 +0000
Manifest this update:     Mon 20 Oct 2025 13:01:44 +0000
Manifest next update:     Tue 21 Oct 2025 13:01:44 +0000
Files and hashes:         1: Br0wrDVhod9_xrKWv50p3VWB8e4.crl (hash: ZW7F5H5TUnofXWdUSL9j0lqq9olpKvbeqVlpgkk6xEQ=)
                          2: K95dcowoWM46l25G6cg3BOInICc.roa (hash: FwJQGFHNrTbaA2c6WdNnVmYiKoiWwAn5MfYOiuC/b0Y=)
                          3: f6JSHXR5IJWIrISIaHnp-KNuzWU.roa (hash: s/mEZEFFKWN/UlAEF3Xf3k+mfTd0XXLmhrPGmyFlvdo=)
                          4: opQioO2TMpOVmwJxveNLyzGKMSk.roa (hash: LF0O0/hHq3oUtM2QfXi8MqhqWH70VnU6W/imjpc7JeE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b6:20:3d:e7:df:9d:37:f9:f3:ee:34:31:5a:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06bd30ac3561a1df7fc6b296bf9d29dd5581f1ee
        Validity
            Not Before: Oct 20 13:01:44 2025 GMT
            Not After : Oct 21 13:01:44 2025 GMT
        Subject: CN=3113132a9982b2b43bd2015f1c64a329fd3af326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:08:81:a6:64:ac:09:e2:58:47:72:b2:b7:
                    37:59:ad:33:3c:e4:7d:25:9d:32:6d:6b:10:e2:3a:
                    07:94:ce:a8:64:c3:83:3f:47:32:55:7c:fd:c3:7e:
                    33:b3:fd:5f:aa:8f:82:b0:ab:42:55:35:f2:c3:dd:
                    b1:6b:fc:04:f3:7d:74:eb:ca:9b:0f:51:45:d2:89:
                    cc:f3:41:d9:b0:7c:34:88:94:4d:b9:64:50:15:29:
                    29:a0:09:32:c0:66:4a:2e:ba:34:a2:99:65:d4:ac:
                    e9:21:26:cb:a6:c4:0f:64:1f:3e:2d:10:bb:2c:9d:
                    99:bc:c6:5f:a4:96:dc:b6:78:f0:cf:f0:de:95:5e:
                    61:27:de:ea:49:f5:dc:74:b0:5d:4a:b7:e7:e2:30:
                    d7:1c:a1:bb:ee:b6:0c:9e:37:77:92:d5:c9:ab:ce:
                    d3:d5:66:d2:80:5e:95:a6:d8:1e:24:45:c3:d9:fa:
                    bb:1c:6b:e8:47:ab:57:24:29:b9:0c:88:ee:99:6b:
                    d4:91:18:00:fb:c1:3c:09:77:c1:62:62:20:8f:77:
                    9d:90:d8:79:3c:74:cb:71:de:c3:d1:f7:a0:a0:83:
                    14:f5:6f:08:31:11:5e:a7:03:71:1a:0e:e8:81:2a:
                    a3:0e:6e:2a:14:17:d0:2a:c9:55:40:bf:ed:fe:5c:
                    46:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:13:2A:99:82:B2:B4:3B:D2:01:5F:1C:64:A3:29:FD:3A:F3:26
            X509v3 Authority Key Identifier:
                keyid:06:BD:30:AC:35:61:A1:DF:7F:C6:B2:96:BF:9D:29:DD:55:81:F1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Br0wrDVhod9_xrKWv50p3VWB8e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a01ab5-83c0-4e19-9093-79175b151a52/1/Br0wrDVhod9_xrKWv50p3VWB8e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4d:a7:bd:8c:07:fe:31:28:1e:a8:50:da:98:dc:d0:f8:38:
         95:99:2f:a0:db:7d:ba:49:e1:11:c6:08:74:33:9d:3d:1f:31:
         60:28:20:62:82:a7:bc:28:59:fe:1f:8f:90:64:05:71:01:ce:
         d9:36:c8:87:e8:95:5e:d0:2c:7f:08:b1:60:8e:60:84:2c:2f:
         ef:7d:ab:7e:25:bd:47:79:9b:d1:54:2b:a5:31:d1:99:ee:78:
         32:f0:cf:dc:45:9d:30:6e:5a:a3:c0:9d:06:99:e7:4e:4b:47:
         d2:d9:2e:75:94:3c:9d:be:da:bc:38:4f:b0:da:c5:f9:ff:57:
         1b:12:fe:6f:96:0f:29:43:43:d4:19:46:1f:cf:78:ce:ca:49:
         d4:cd:f5:19:ba:ea:f0:84:d7:ae:5e:3c:ec:da:07:1f:64:ca:
         a3:d7:4a:4c:aa:d8:10:37:71:29:c2:99:2e:c5:92:aa:ef:78:
         0d:16:37:c7:36:77:93:77:99:bf:82:91:87:5f:ae:2f:c9:9e:
         0b:4c:42:cb:26:78:27:21:51:a4:a6:1b:94:de:e6:fa:b8:22:
         da:5b:6b:6f:62:a5:cc:45:ff:88:96:5f:56:e2:2b:dc:3b:3f:
         fc:e4:83:bd:66:bb:0e:b8:ca:a6:da:1d:f4:69:60:53:48:85:
         07:bf:4a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:07 2025 by rpki-client