Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
File:                     Blyf7bW1RPaW7U2vE1sC3ubZevY.mft (raw, json)
Hash identifier:          G6C5YK2ZtXOmnkqQU92QdGaix7eQsTR8bNiJIbUhgXM=
Subject key identifier:   C1:AC:5B:8E:9B:B2:E2:6C:A3:E6:B0:DE:AC:1B:A3:E2:A4:67:48:19
Authority key identifier: 06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6
Certificate issuer:       /CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
Certificate serial:       019A221B72BB756B9B8149C7DD13A256FD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
Manifest number:          16F6
Signing time:             Sun 26 Oct 2025 20:00:15 +0000
Manifest this update:     Sun 26 Oct 2025 20:00:15 +0000
Manifest next update:     Mon 27 Oct 2025 20:00:15 +0000
Files and hashes:         1: Blyf7bW1RPaW7U2vE1sC3ubZevY.crl (hash: r+oeNIpUNxy35MFA0x1pftyXJTxb5RYdiYch1Cbfmec=)
                          2: UVnhMz4Jh2elkuvmMPm7Jt9svi8.roa (hash: he6S2b9IPHmcJG3wUgyxY2EilJ7c6oeB4o0eAPgBdLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:1b:72:bb:75:6b:9b:81:49:c7:dd:13:a2:56:fd:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065c9fedb5b544f696ed4daf135b02dee6d97af6
        Validity
            Not Before: Oct 26 20:00:15 2025 GMT
            Not After : Oct 27 20:00:15 2025 GMT
        Subject: CN=c1ac5b8e9bb2e26ca3e6b0deac1ba3e2a4674819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:92:5a:a8:fb:da:d7:c2:9f:90:82:f0:b0:
                    79:dd:7d:f2:d3:ca:62:f3:8b:d2:f6:14:b9:01:61:
                    e0:8f:fc:2f:ae:59:eb:48:7c:95:33:6d:1b:ff:35:
                    ba:78:3f:ab:9d:32:cb:26:ad:1d:0e:6d:6d:91:7c:
                    94:89:a8:df:75:5f:f6:db:ff:5c:78:de:9f:2d:70:
                    c5:d2:2a:4d:34:ee:69:c2:a9:8f:35:7e:1e:bd:3e:
                    fe:31:8a:df:b0:e6:da:6d:97:83:67:a9:69:af:43:
                    43:ca:39:2c:8e:9f:33:84:df:44:4b:18:ba:62:d2:
                    1b:21:47:8b:a1:95:8f:5a:e4:ad:9d:f6:1b:d3:a7:
                    d1:01:85:e8:32:1d:bd:f8:ac:e3:44:6e:ce:af:f2:
                    9a:1f:aa:9c:d4:9d:68:3d:8e:e1:9e:17:ea:3b:54:
                    83:f5:15:44:7d:cb:30:97:c8:41:65:94:1c:8d:f9:
                    a1:9b:24:15:68:16:23:04:7c:14:49:8f:02:d3:ac:
                    fd:20:6b:c2:ae:6f:91:68:1a:bf:b9:90:af:9f:86:
                    a9:76:56:d6:35:b4:c8:a1:e8:b7:9c:17:08:95:8b:
                    69:82:1d:c6:97:0e:45:85:0f:3b:ed:e6:19:07:8e:
                    ac:36:53:45:b9:93:bd:e9:cf:13:a6:51:2b:ca:8f:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AC:5B:8E:9B:B2:E2:6C:A3:E6:B0:DE:AC:1B:A3:E2:A4:67:48:19
            X509v3 Authority Key Identifier:
                keyid:06:5C:9F:ED:B5:B5:44:F6:96:ED:4D:AF:13:5B:02:DE:E6:D9:7A:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Blyf7bW1RPaW7U2vE1sC3ubZevY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/81b276-e736-4172-80a9-18d69036753b/1/Blyf7bW1RPaW7U2vE1sC3ubZevY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:98:42:cf:ab:70:31:da:67:9f:52:ea:f3:e2:42:07:de:
         d8:4e:d5:b6:a6:db:eb:e2:d4:c7:83:42:c0:53:32:1e:0b:87:
         88:5b:e6:3b:3b:05:63:fc:94:0e:83:41:82:1f:c4:7f:e2:09:
         df:06:98:9d:85:ff:ac:7f:2c:66:df:2a:96:81:86:da:75:4d:
         48:5f:5d:66:49:92:58:0e:56:70:03:4b:47:3f:47:7e:7e:d5:
         35:74:a8:03:fb:a1:00:84:5a:3e:03:c3:e0:a5:98:cb:9d:de:
         dd:18:5f:b4:ea:85:d5:90:3a:5b:3e:54:68:eb:2a:40:28:36:
         61:92:10:9d:2a:a0:cb:55:e6:d9:9c:e5:da:5f:15:c2:f4:77:
         48:ba:a3:34:1d:f3:d2:a7:00:36:3c:6a:bb:51:12:0b:76:99:
         da:7c:ad:c1:9a:23:e6:6e:a6:28:08:5b:a1:f3:32:03:4f:1b:
         ab:5f:58:b4:5e:3f:22:7a:db:4e:ba:15:e3:92:45:03:c4:81:
         b3:5c:1b:64:3a:c2:8f:88:25:28:70:67:88:48:cc:af:48:4b:
         47:8b:59:e9:47:0a:ac:09:85:74:77:48:8c:ab:8c:8d:2e:e0:
         a9:cb:c8:68:8f:c6:60:0e:2d:70:94:82:9e:1c:f5:7d:76:de:
         10:89:0a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:04:00 2025 by rpki-client