Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
File:                     bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json)
Hash identifier:          kDBzKncL8okvpyC1RY5E5SfPorASZI9Owt6/V3qadkQ=
Subject key identifier:   8F:0C:BD:8E:D6:42:67:E5:DF:BA:47:72:AF:40:1C:88:A0:1E:67:47
Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70
Certificate issuer:       /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
Certificate serial:       0199FC58E7408CE795D2C45F3B1B2E5F3B20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
Manifest number:          0757
Signing time:             Sun 19 Oct 2025 12:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:48 +0000
Files and hashes:         1: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: w3f1APV3TRPXJxzprCn7oj5/8e2dZIPPJaJZazJsvEI=)
                          2: g4EaozYmC9YQ0a7L9CYiQ4ogRAk.roa (hash: xmryesaevMInujVcjkZCiYepzaYX2LiaZCMbhmPgvyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:e7:40:8c:e7:95:d2:c4:5f:3b:1b:2e:5f:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870
        Validity
            Not Before: Oct 19 12:01:48 2025 GMT
            Not After : Oct 20 12:01:48 2025 GMT
        Subject: CN=8f0cbd8ed64267e5dfba4772af401c88a01e6747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:a8:12:1b:dd:b1:e2:6d:c9:b4:9d:92:58:
                    25:17:76:a2:41:7a:c8:4f:ce:0b:44:26:14:ca:b6:
                    32:74:d6:ba:55:16:c4:94:19:3d:74:b8:e8:d3:cb:
                    d5:f7:a6:a7:1c:8f:13:c5:64:8a:56:d8:66:84:25:
                    23:70:99:71:1c:5d:82:d2:43:a2:a4:cb:2c:14:cd:
                    24:04:15:4a:3e:d6:51:30:cc:79:07:77:f7:99:be:
                    65:f3:0a:e5:2c:d3:63:ba:a2:2f:99:8f:9c:25:89:
                    1f:d1:b2:b0:ba:2d:99:07:cb:27:ec:ac:0e:8c:16:
                    dc:e4:6a:13:e7:3f:3a:ec:06:37:2c:09:42:b0:64:
                    94:ed:2f:06:39:8a:de:91:20:30:4f:1a:7b:35:a4:
                    76:b2:31:1d:d9:78:22:2f:dd:93:e7:10:d5:a6:1e:
                    d2:65:95:11:c8:79:3e:06:3c:0f:bc:89:90:ec:e9:
                    7a:3d:5a:56:70:cd:2c:71:77:3a:55:54:ad:6d:c9:
                    27:40:c5:f3:80:ac:ad:f6:2f:8f:44:b6:10:b6:1f:
                    13:38:23:1f:2f:53:76:47:88:bc:c7:bf:71:07:37:
                    26:a3:86:78:3c:bf:c4:da:0d:da:23:ca:05:43:90:
                    23:76:25:13:ee:c5:fb:0c:a6:4a:70:1e:7f:78:ca:
                    d6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:0C:BD:8E:D6:42:67:E5:DF:BA:47:72:AF:40:1C:88:A0:1E:67:47
            X509v3 Authority Key Identifier:
                keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:a5:6a:87:73:c0:0d:15:2e:1e:1a:f0:66:df:2f:52:6b:
         dd:ec:be:e8:83:6e:4f:96:4a:9b:dd:df:bb:72:b8:5e:60:56:
         24:32:d6:d6:d9:26:45:5b:aa:2e:8b:d3:33:5c:da:43:bf:d0:
         3e:e5:8f:9a:0a:d9:56:43:e2:bd:a8:70:dc:fc:9f:0f:d3:1d:
         d0:a3:21:0e:b2:d0:72:9d:a7:6e:2d:e2:da:68:57:de:88:0b:
         85:5a:13:b6:6f:e6:1b:0e:65:7a:7a:8a:56:1f:62:7c:7a:78:
         f2:f7:90:87:d7:71:0c:55:a9:03:7e:17:9b:1b:d1:27:3b:16:
         c1:c6:b4:86:0e:8b:16:e4:ea:27:e9:2a:74:95:2a:ee:36:c6:
         14:95:19:01:9c:8d:fb:3d:c2:3f:2b:be:0e:db:c3:6b:58:c8:
         50:16:96:0e:7f:34:d8:26:12:f6:48:9b:74:6b:f0:e1:58:1e:
         59:5b:85:59:1b:b2:11:cf:4d:4a:d7:24:16:8a:42:25:2f:d6:
         3b:88:fd:d7:ee:3e:7d:fa:bd:0a:de:dd:52:be:b2:be:f3:db:
         bc:79:79:c3:29:8a:33:19:49:44:1d:c3:9d:c2:c0:bc:fb:2c:
         0b:c4:51:b7:b2:17:7d:67:00:d2:49:e8:64:53:18:2f:b7:49:
         a5:3a:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:42 2025 by rpki-client