Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File:                     b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier:          /p75hm7O5lfyg2NRHoykyos8ckTJOKI0F+C6f75jvmQ=
Subject key identifier:   3E:19:3E:D4:E5:FA:73:97:36:9A:96:55:BD:54:B1:60:FE:8A:D2:F2
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer:       /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial:       019A1E07B9E595C44720E83A182BA41A1337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number:          0DD5
Signing time:             Sun 26 Oct 2025 01:00:14 +0000
Manifest this update:     Sun 26 Oct 2025 01:00:14 +0000
Manifest next update:     Mon 27 Oct 2025 01:00:14 +0000
Files and hashes:         1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: SOp7G+m4ttfWavlFuFQmhbV5ZEG9Ux+QHkbqC76aa38=)
                          2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:07:b9:e5:95:c4:47:20:e8:3a:18:2b:a4:1a:13:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
        Validity
            Not Before: Oct 26 01:00:14 2025 GMT
            Not After : Oct 27 01:00:14 2025 GMT
        Subject: CN=3e193ed4e5fa7397369a9655bd54b160fe8ad2f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:16:06:32:a8:45:51:42:b8:c0:37:27:07:
                    98:9e:12:97:68:79:d8:e5:70:eb:c4:45:04:da:30:
                    92:be:c1:48:d4:f6:54:90:9c:38:dd:5a:af:2d:a9:
                    f0:f9:61:07:68:45:0d:aa:41:0d:6c:75:9d:3c:da:
                    62:b0:32:b6:2c:c5:75:0e:a7:04:dd:e1:d5:34:3b:
                    be:db:95:fa:f0:18:da:26:8b:8a:5d:e8:0b:7f:e4:
                    b8:e5:a6:bc:17:d8:7d:f8:a7:2f:9b:05:55:25:1d:
                    4e:ea:42:36:d9:d9:1c:3e:58:6c:15:48:bc:06:e0:
                    48:aa:a6:a9:17:3d:ee:66:d3:6e:47:d4:ad:0a:61:
                    91:38:c2:3e:2c:f9:92:65:8a:b0:97:1e:45:9f:b3:
                    6d:91:20:8f:f8:13:de:88:4b:ef:f6:cb:84:b8:f5:
                    a9:d5:e9:0a:a9:02:0e:f0:f7:e7:61:59:92:c0:27:
                    53:87:e2:0a:31:85:f3:98:bf:51:2a:c7:a9:fa:18:
                    42:22:cb:cc:8e:15:e5:fc:a6:ac:d1:fa:de:b5:bb:
                    3f:9f:e4:f2:34:ed:37:fe:ca:27:79:c6:0d:a9:fc:
                    85:4f:53:50:cc:56:f0:e9:4c:98:53:02:ff:7c:5c:
                    51:59:d4:88:f4:4d:7c:6b:df:6a:da:5d:37:f3:f0:
                    0b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:3E:D4:E5:FA:73:97:36:9A:96:55:BD:54:B1:60:FE:8A:D2:F2
            X509v3 Authority Key Identifier:
                keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:70:67:eb:7d:dd:69:e0:37:f6:f6:cc:b9:41:79:8a:cb:a1:
         c7:20:f2:67:35:9a:c2:00:86:39:5a:ef:de:7a:e2:47:63:82:
         8a:8c:3c:0f:46:f9:36:dc:ed:73:d0:c6:01:ae:4e:f4:5c:c9:
         dc:1a:14:28:14:22:9c:50:10:cd:ae:88:b2:61:01:da:52:37:
         21:54:db:1a:7f:be:58:8a:78:53:ac:0a:32:1c:e3:6f:0a:24:
         93:10:6f:77:82:4e:bf:5f:3f:19:b5:54:67:62:7d:aa:52:ac:
         a4:9b:a0:42:e0:41:42:b0:c7:79:b3:40:6c:48:01:4e:4f:7f:
         01:25:7d:ac:67:08:f1:2b:dd:b2:2b:b2:28:3d:9f:c4:99:a0:
         7c:26:d2:b2:cf:4a:a1:0f:2a:57:10:4d:cc:91:0e:5d:58:b3:
         bf:c0:03:83:df:23:3f:d0:e6:73:78:72:c6:ac:77:1a:a8:36:
         2e:05:1f:04:6d:43:c9:76:7a:0d:0e:e7:bb:b3:13:17:85:80:
         86:4c:5f:e4:4d:c7:41:e6:0a:43:ea:4b:df:de:41:ad:b1:53:
         ba:3a:30:6d:2b:d7:52:60:e1:55:22:b8:e5:a9:0f:7a:1d:3e:
         b2:0b:3e:7d:aa:02:7c:71:e4:69:19:ff:28:93:7c:8f:71:0c:
         fc:fd:82:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:15 2025 by rpki-client