Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
File:                     B_Khdb4gEIZBxklVMhPyElEWZ6U.mft (raw, json)
Hash identifier:          VlzKLMmd9vR97C7d/RMn1JZLuTj0aYTo4chxtf/HtbU=
Subject key identifier:   F2:7A:9E:E0:8C:62:18:3D:14:E6:81:93:AB:69:B8:BC:5A:BF:F7:D6
Authority key identifier: 07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5
Certificate issuer:       /CN=07f2a175be20108641c649553213f212511667a5
Certificate serial:       0199F62059E2F397A4359483FF2DE4294193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
Manifest number:          16E0
Signing time:             Sat 18 Oct 2025 07:02:19 +0000
Manifest this update:     Sat 18 Oct 2025 07:02:19 +0000
Manifest next update:     Sun 19 Oct 2025 07:02:19 +0000
Files and hashes:         1: B_Khdb4gEIZBxklVMhPyElEWZ6U.crl (hash: UNaI5NccEa6Q5QsHxlpkmcVNfpsEc+4PCm1O8VTDtCU=)
                          2: CgI8RO9Vbr_Gvqd6nXuf6xUvB3c.roa (hash: Us9A46RLHsNHOICpLUg4c/TsB6QkGJR/YxrWMeUzzMw=)
                          3: f4y74uV6kMhl3FZG7eMTxtB1xcg.roa (hash: xNcDjYfpiNRJh2gGbrd1whQfo3MpBF28ckRw6gIMCZ8=)
                          4: wjAvaGeoZ8bK8sdbDhHPq0cB8fQ.roa (hash: mivAj3GDT4jOPus8xPGZd/X8AcNpsiWRHJ+pMHxOhWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Oct 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:f6:20:59:e2:f3:97:a4:35:94:83:ff:2d:e4:29:41:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f2a175be20108641c649553213f212511667a5
        Validity
            Not Before: Oct 18 07:02:19 2025 GMT
            Not After : Oct 19 07:02:19 2025 GMT
        Subject: CN=f27a9ee08c62183d14e68193ab69b8bc5abff7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:49:5f:fa:9d:b1:07:cb:e2:76:24:d8:30:
                    77:61:de:ee:72:c0:dd:79:9c:3f:b0:39:8c:7e:a8:
                    8c:2f:fd:e2:6b:b2:44:20:b3:b6:e6:ce:b3:c4:69:
                    85:28:31:ed:6b:a6:80:c7:44:d0:ab:22:9b:83:81:
                    5c:c8:79:26:b3:1c:84:8d:ca:c4:4b:cb:d8:f6:9a:
                    29:b8:2d:1d:f1:48:2f:d3:61:9a:bf:96:cb:ec:49:
                    41:1b:ab:3a:70:d0:a3:dc:5b:70:d4:61:0d:c9:b0:
                    55:b1:8f:c6:87:ae:11:43:be:40:98:ce:21:a0:7a:
                    a0:5a:23:a1:f3:0a:22:ca:24:30:a3:9c:fe:f7:3d:
                    02:6f:ae:c6:f3:05:5f:53:ed:dd:aa:3e:52:84:00:
                    08:63:86:00:21:95:6a:97:69:d8:95:0f:6f:f4:ad:
                    d7:42:dc:e0:8a:ac:30:9e:6b:6d:e5:bc:12:4d:65:
                    2f:6b:54:44:34:52:65:0a:f3:5e:39:fb:96:95:d8:
                    49:f8:fe:01:8c:ef:8b:de:02:35:80:9f:a0:ce:32:
                    ab:f4:ec:23:92:53:f4:5d:14:2f:cf:81:73:20:36:
                    7f:8b:46:ac:08:e8:a5:92:8e:cb:1c:1f:c2:76:58:
                    44:3c:bb:82:a5:66:a7:ad:2b:1a:0a:1c:d5:d0:79:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7A:9E:E0:8C:62:18:3D:14:E6:81:93:AB:69:B8:BC:5A:BF:F7:D6
            X509v3 Authority Key Identifier:
                keyid:07:F2:A1:75:BE:20:10:86:41:C6:49:55:32:13:F2:12:51:16:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_Khdb4gEIZBxklVMhPyElEWZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/36b085-1a5b-4af9-878b-376426ffd662/1/B_Khdb4gEIZBxklVMhPyElEWZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e7:92:e4:d2:96:2a:e6:4b:8d:91:45:fc:88:f3:c4:47:da:
         3d:ee:05:4d:17:59:ff:27:28:8e:8e:2d:d0:64:a0:ce:6d:31:
         bc:41:59:92:b3:a0:73:1a:22:24:83:33:c7:8f:36:85:a3:a3:
         64:8c:5b:c8:1e:8d:22:96:0d:eb:db:d4:70:ca:97:86:ce:fd:
         8f:e4:e3:09:99:ec:ff:a5:6a:87:e8:54:e1:22:f4:60:66:1f:
         ab:e1:dc:65:73:6a:4c:af:e5:83:f7:c7:2a:fd:25:44:ba:cd:
         03:18:68:7a:6d:56:91:9d:35:e7:be:ba:29:5d:4f:78:29:7c:
         5d:4f:ed:a1:02:3e:39:41:98:96:29:22:ba:59:97:2b:b3:98:
         50:15:23:cb:60:3a:b3:fe:19:f4:a4:70:d6:c7:45:ea:88:fb:
         0f:b4:08:17:42:87:32:bd:24:7c:8b:8c:af:fc:f8:81:70:99:
         06:db:64:49:25:14:fe:08:a5:b5:b9:c4:eb:34:21:43:e9:8d:
         1f:03:3f:0e:e7:dc:78:13:86:eb:1b:da:d0:da:1e:0d:a4:b4:
         02:d1:09:b3:a0:2e:81:ee:17:c1:c8:77:ac:11:d8:38:da:6b:
         4e:f5:4e:93:d8:7f:87:a3:2d:aa:09:70:df:17:9f:e2:22:49:
         bf:e9:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 11:43:56 2025 by rpki-client