Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          UmAC5OX+Hkoa9YD1vie7FXW1SEwqIhqJTf9weFgeBfU=
Subject key identifier:   1D:70:D8:96:B8:EC:D9:47:51:5F:10:7B:75:30:6E:78:36:D3:59:61
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       019A0448543640C5FB6A334994DAA7FF7159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          16E9
Signing time:             Tue 21 Oct 2025 01:00:40 +0000
Manifest this update:     Tue 21 Oct 2025 01:00:40 +0000
Manifest next update:     Wed 22 Oct 2025 01:00:40 +0000
Files and hashes:         1: 9pVSMCdjQealzLgQcmqOThUhNyY.roa (hash: Za3wBMJoYZ7WrjJeJ4YGgLkdE+KKnUd40rRwXB4f/WU=)
                          2: C3KznAbVAJ6FSeYBblKCpWkpSLQ.roa (hash: foID9Oziq5oUBAD2IoHxTCUce2E2b18q1C4lqpbtqGQ=)
                          3: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (hash: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=)
                          4: bSRwpXF4daZ64mmbWkichNXlbKQ.roa (hash: UI3xu+IDrHLUWFrOWnEgl/cse2lLBjv83Y/Ok1oQevo=)
                          5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: cafEhxVM1UHdlaf5CnSTXhIRPKKE9CkprZLt/qM6jBY=)
                          6: c7okVFaHlAlUexayvfgBOKFlFAQ.roa (hash: hGEyBzgSKXCjptMSFi5MLoApkRoSwE9UaM8SMZ+2CFo=)
                          7: tj2j33BZ5qBMziKxwEMdoOmheMU.roa (hash: Ls+1dw94wulLbg28FKbSGPsIVW3+yqV/GiJSIU5Zocs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:48:54:36:40:c5:fb:6a:33:49:94:da:a7:ff:71:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Oct 21 01:00:40 2025 GMT
            Not After : Oct 22 01:00:40 2025 GMT
        Subject: CN=1d70d896b8ecd947515f107b75306e7836d35961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:dd:3f:b4:44:6b:b2:fe:53:91:e1:48:50:
                    41:7a:fa:21:af:68:14:fd:c2:ab:b8:63:af:21:42:
                    c3:20:67:e3:57:e2:3c:ec:0c:95:64:05:c9:da:6b:
                    59:67:ee:af:7e:08:6a:b1:d8:e6:08:9b:07:4a:95:
                    96:74:92:bb:4e:51:1a:fb:0f:9a:4c:fa:1e:62:83:
                    4f:0f:8b:f0:15:4f:a4:ea:72:83:53:90:f4:28:71:
                    f8:c0:36:3d:81:46:de:6e:fd:0f:60:46:02:27:9d:
                    aa:9d:88:15:a1:25:1d:7b:9e:ca:2c:ea:94:fa:06:
                    c8:a4:72:a0:ae:26:52:7b:1e:2d:f7:73:92:2e:22:
                    a3:1f:7c:f3:93:47:1f:de:f9:f4:0b:5e:5e:16:19:
                    5d:cd:76:79:4a:d7:7b:d0:d7:c5:2d:b0:55:a7:84:
                    37:aa:71:94:19:58:af:2d:c4:02:4e:cb:7a:79:10:
                    b9:a7:33:27:35:e0:bc:0d:a9:fe:b8:9e:55:8b:cf:
                    e7:c8:46:e9:3f:f8:61:47:39:ab:5e:98:43:2e:1d:
                    05:a7:2a:8a:af:db:bc:69:d8:74:8c:eb:47:42:c8:
                    10:56:f1:d6:b3:2e:d1:4e:86:f4:04:08:4a:04:dc:
                    f7:31:81:f9:4c:fd:4f:ec:dd:01:92:ad:be:c1:ff:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:70:D8:96:B8:EC:D9:47:51:5F:10:7B:75:30:6E:78:36:D3:59:61
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:00:d3:81:63:cf:34:33:05:ee:f3:28:0c:be:2b:c0:db:b2:
         6e:92:af:ab:68:87:e5:ee:9c:ab:e0:5f:e7:85:ea:c8:eb:6b:
         ce:fa:36:a8:b6:48:fa:c4:1d:2f:58:ec:80:3a:26:44:2c:37:
         23:cc:12:be:7d:8b:e9:b9:d7:12:cd:73:44:48:4c:bb:93:a6:
         c2:8f:06:13:3c:d7:b0:21:83:9a:ae:6a:a1:2f:5d:8d:06:97:
         ab:04:6e:6a:ad:65:59:39:f6:d2:ec:ab:38:1b:1f:9a:80:18:
         07:a4:db:fe:f3:6d:ad:14:97:84:8f:5c:50:fb:df:2e:94:77:
         53:1f:3b:58:23:22:88:bc:e4:30:7d:a6:ad:0b:96:5a:81:d8:
         2f:48:d5:f2:11:54:79:11:75:2a:fc:69:4d:81:fa:b2:90:8b:
         75:8b:e0:c0:ef:5c:dd:d9:58:80:4d:a7:9f:77:f7:d7:97:0d:
         0c:00:a1:89:f0:c3:45:97:97:d1:af:35:06:f6:a7:08:ae:75:
         85:c2:ec:b8:85:b3:2e:41:a1:80:8a:71:b4:eb:c3:0c:14:5f:
         2b:b5:1f:0b:c8:36:2a:79:4b:6d:6f:5d:5c:c9:a3:72:36:89:
         80:cb:19:09:81:4f:c7:fa:a0:6d:0c:bf:09:78:4d:b5:63:bf:
         a2:50:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:28:49 2025 by rpki-client