Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File:                     B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier:          SyBS1UFEIY1wp2cD6vrtrvtGHkNuwoVZBSl2W7p/DJA=
Subject key identifier:   D6:B7:EC:A3:51:5D:46:B2:C1:3F:5D:05:E6:93:1A:99:2E:50:93:E3
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer:       /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial:       019930B57F0B3712374FCB300DDD440F7A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number:          1679
Signing time:             Tue 09 Sep 2025 23:00:24 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:24 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:24 +0000
Files and hashes:         1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: 7hVd7ppGwlA2p7fvF6uQ4AKXAt5Cltb7niZqoVjhyZ4=)
                          2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:7f:0b:37:12:37:4f:cb:30:0d:dd:44:0f:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
        Validity
            Not Before: Sep  9 23:00:24 2025 GMT
            Not After : Sep 10 23:00:24 2025 GMT
        Subject: CN=d6b7eca3515d46b2c13f5d05e6931a992e5093e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:d3:cd:0e:7f:aa:7c:45:03:7e:b9:62:f8:
                    2e:f0:6d:3c:53:23:71:38:bd:6c:4a:9e:8a:c8:20:
                    0f:ff:df:6e:7e:03:0b:5e:a8:a5:fe:ca:a9:bf:15:
                    b0:b5:5f:f2:ac:77:73:fb:ad:1c:63:96:2b:b5:f1:
                    ba:cf:e8:f3:00:32:01:0d:30:9c:02:53:5c:4e:2c:
                    64:98:9c:fa:e5:64:ab:c3:7a:37:18:2d:b4:9e:bd:
                    38:50:43:78:ca:05:8b:b8:9d:3f:78:88:d3:ac:6a:
                    f4:5d:c3:b6:9e:c1:05:63:5d:95:40:01:df:37:ae:
                    3e:c7:28:b5:e8:4a:20:cc:16:44:88:b2:9f:de:c5:
                    fe:6e:dc:61:67:c2:de:2f:95:c7:4e:6a:90:f1:de:
                    b1:eb:5d:90:e1:73:73:b2:d3:08:95:76:9f:f9:6f:
                    51:f3:75:cf:f8:06:75:e7:e7:2e:e7:e9:66:32:9b:
                    b4:0e:83:f6:fa:9d:79:11:b1:14:51:ff:4d:04:a6:
                    72:8f:a4:99:ee:84:94:ac:5d:81:60:84:d9:d7:9d:
                    c6:9c:50:4b:b1:2f:9c:91:38:7f:2b:e2:fe:12:80:
                    f4:12:f4:df:7f:1c:ea:f9:f3:0f:c5:a0:e2:98:b3:
                    42:3c:ec:8c:b6:7c:31:bb:b6:b8:2b:c5:75:20:47:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B7:EC:A3:51:5D:46:B2:C1:3F:5D:05:E6:93:1A:99:2E:50:93:E3
            X509v3 Authority Key Identifier:
                keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:d1:4d:58:9a:a8:18:d6:81:32:9a:46:7b:0b:af:32:2b:
         42:82:c4:34:54:a1:25:1d:1d:20:f5:f8:99:d7:90:67:eb:d9:
         0a:72:74:73:5d:a0:e9:96:bc:ad:21:8c:bb:25:ae:98:b5:91:
         85:6c:f6:b6:5b:b6:28:97:df:1b:32:37:7c:10:97:80:1e:1a:
         99:64:3c:7a:4b:3b:f9:39:42:f2:1f:d0:84:94:99:39:37:ac:
         80:cd:e8:b8:56:f3:e3:ac:6f:64:78:09:5e:62:6b:37:01:57:
         a1:74:79:97:79:4b:20:a5:55:4d:2c:89:21:fe:a0:51:23:a3:
         6e:c7:1e:c0:6b:d7:cf:5c:a1:97:ec:25:ce:ae:08:b4:e9:1b:
         93:9e:dc:be:e6:49:5f:90:1e:3c:f9:ee:30:2e:38:2b:68:49:
         da:09:8f:49:03:08:78:c5:68:ed:bd:b8:7c:27:f2:32:ac:b4:
         34:b2:0b:0b:5e:df:81:84:b6:09:ef:c3:88:2c:04:d7:77:0e:
         2c:00:2f:a0:be:c3:17:0d:91:f9:8d:cf:c8:7c:28:59:93:df:
         78:76:4a:14:f3:06:b9:a6:a2:8d:5d:cf:83:40:3a:a6:20:9c:
         a0:61:1a:f2:04:d6:10:10:6a:b9:13:d0:57:7f:9c:d3:43:b0:
         4f:0d:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:55:18 2025 by rpki-client