Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File:                     beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier:          MPkyQcLtPycHJfWAvotjOmDxHTeh7eovnEOGQFbyOtg=
Subject key identifier:   0B:B3:B6:6D:8A:5A:8B:34:74:CE:F7:6D:F0:62:F8:61:D8:79:A1:7F
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer:       /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial:       019A1EAD32D9582B6158BCBB94CB9DD9383B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number:          16F4
Signing time:             Sun 26 Oct 2025 04:00:58 +0000
Manifest this update:     Sun 26 Oct 2025 04:00:58 +0000
Manifest next update:     Mon 27 Oct 2025 04:00:58 +0000
Files and hashes:         1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=)
                          2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: CE4A3o4RLN442i3YOljbWP/gcprcXFtjXlb3YNw9bHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ad:32:d9:58:2b:61:58:bc:bb:94:cb:9d:d9:38:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
        Validity
            Not Before: Oct 26 04:00:58 2025 GMT
            Not After : Oct 27 04:00:58 2025 GMT
        Subject: CN=0bb3b66d8a5a8b3474cef76df062f861d879a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ac:81:62:fe:4c:78:ca:57:7b:5b:0d:45:c0:
                    55:27:b4:21:c7:22:40:e4:b8:98:fd:7f:03:12:63:
                    37:39:f8:a7:59:20:5b:36:78:17:00:84:6b:04:13:
                    fc:9d:7a:69:9b:8d:bf:6d:d6:88:c0:05:fe:5f:63:
                    70:f6:6f:1f:18:5b:e7:53:59:21:bc:2d:63:23:64:
                    1f:85:fe:b4:7d:54:6f:21:66:3e:ed:4a:61:a3:6f:
                    39:4c:a7:17:f1:ce:9e:28:14:57:bc:b7:fe:9b:fb:
                    7e:f9:f5:e0:e3:29:dc:09:32:66:80:8e:b4:93:22:
                    a4:8f:d1:12:58:80:8f:0b:1f:d8:4d:ea:62:a6:90:
                    71:17:e6:71:d1:e7:70:63:03:d6:6c:06:0e:1d:de:
                    49:90:09:d1:d0:10:4b:dc:8d:92:22:2b:6f:a5:60:
                    80:90:9b:22:dd:bd:46:05:a7:d4:ac:79:9b:da:b1:
                    b8:4c:f0:a6:5c:39:cc:2a:3b:81:4b:5f:2d:b5:75:
                    a6:1a:a6:ef:11:90:14:c7:1e:42:75:77:7d:6f:39:
                    65:d5:c9:7f:83:0f:4b:33:f4:dd:aa:2c:f5:3c:2d:
                    5e:7d:61:fd:80:88:cd:3f:61:5d:40:ae:a9:fc:b9:
                    f9:5a:a4:98:2a:e9:4a:34:1e:d9:3c:77:98:ff:57:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B3:B6:6D:8A:5A:8B:34:74:CE:F7:6D:F0:62:F8:61:D8:79:A1:7F
            X509v3 Authority Key Identifier:
                keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7b:39:a8:86:08:2c:ca:25:82:8d:5c:4e:c5:6d:0d:d7:54:
         53:7d:dd:26:f6:14:37:9e:7c:03:94:b6:9d:7e:e1:5c:03:70:
         62:d6:37:00:20:77:7d:28:30:b8:0c:9e:e9:59:f6:76:42:ff:
         e2:1f:72:56:b6:17:1a:9a:3f:8a:d5:12:c8:a9:73:5f:ff:ac:
         2b:57:26:c8:03:4f:22:90:f5:21:83:f8:cf:dd:81:2a:f8:c8:
         77:49:b3:fe:d3:3c:57:0e:42:b8:4e:f7:ea:5a:47:db:d6:64:
         0f:53:84:59:02:11:43:3b:2b:07:41:0a:1d:66:22:12:77:38:
         cb:08:ce:96:69:8f:b3:bc:cf:fe:85:9e:b0:23:1b:18:e2:80:
         2e:ae:f9:52:ec:37:10:75:89:6c:e6:00:81:e3:0d:2d:20:f5:
         27:ef:c3:bc:4a:46:08:02:aa:7b:31:fc:a7:67:f6:f7:a1:f2:
         5f:91:71:d3:22:47:5d:a9:b5:21:d3:f0:af:09:19:0c:1c:40:
         93:10:e6:db:78:0d:5c:1c:e0:29:d7:d5:39:8e:d3:34:7b:c8:
         45:74:de:4c:f0:ce:3c:83:41:19:6e:af:a8:8a:23:01:8e:83:
         d4:01:59:7d:1c:42:39:4c:54:6b:c4:9b:45:f0:a4:0f:13:9f:
         ad:d5:53:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:07:36 2025 by rpki-client