Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
File:                     1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft (raw, json)
Hash identifier:          iCOAtjKfxyXLOTQM66OHq6KGSHXwczQ1FB9mnttpOig=
Subject key identifier:   9B:16:5A:C4:61:FD:6C:28:26:46:67:58:F8:76:EA:09:CE:3E:98:86
Authority key identifier: D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71
Certificate issuer:       /CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
Certificate serial:       019A7149C12AE059E52E901886736EBDF3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
Manifest number:          0B6A
Signing time:             Tue 11 Nov 2025 05:00:50 +0000
Manifest this update:     Tue 11 Nov 2025 05:00:50 +0000
Manifest next update:     Wed 12 Nov 2025 05:00:50 +0000
Files and hashes:         1: 1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl (hash: QHc7Lx76tyrGwvY3n2Il3ymhRKw+pWJWjsegy/qn7fw=)
                          2: ysfFdWNe3c5fhmJm7HG2F6bIZWk.roa (hash: kYAKmFDZnKlOhN9pBmJ9NvU/vERSiEHA+J66ixThxDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:49:c1:2a:e0:59:e5:2e:90:18:86:73:6e:bd:f3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41f8efdcf6e266a82c61302526f6bcfc465e571
        Validity
            Not Before: Nov 11 05:00:50 2025 GMT
            Not After : Nov 12 05:00:50 2025 GMT
        Subject: CN=9b165ac461fd6c2826466758f876ea09ce3e9886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:cb:36:09:f7:04:9c:ab:54:14:09:c9:89:
                    99:15:ce:eb:a6:93:31:af:b0:69:9b:6a:0e:8e:23:
                    63:1e:c8:5d:55:f8:ff:22:da:e7:e3:e3:03:42:e7:
                    b0:e7:72:63:a8:ae:4b:37:e0:c3:93:ea:0b:cb:26:
                    1f:c9:75:0f:e9:00:dd:07:8b:05:da:9e:5a:33:25:
                    39:d6:13:d5:24:b5:33:6f:11:36:1b:9d:48:35:95:
                    11:45:f8:53:c9:43:02:1d:bc:56:11:2f:b9:0d:e1:
                    bf:d5:ef:be:19:01:2a:ae:4f:03:bb:bd:43:da:9e:
                    58:42:3b:37:8a:12:e1:e7:bc:46:2b:6c:cb:53:8f:
                    bd:00:01:e4:88:85:a7:29:55:28:ed:07:4b:c5:21:
                    6a:73:e9:c1:6e:14:54:75:c1:89:d8:cd:c2:66:7b:
                    a9:a2:3e:bd:e8:db:0e:c6:8b:e2:5a:cd:e5:36:f0:
                    69:d9:50:96:a8:5d:24:cf:8a:4d:26:6b:00:cc:83:
                    41:8d:c0:de:20:5f:c1:a4:a7:3d:9c:8a:64:8d:2a:
                    08:2d:ef:0c:ec:07:07:69:13:7c:e5:ce:46:91:a2:
                    0d:c8:8b:00:82:4b:42:46:45:ea:49:bd:da:60:6d:
                    2a:7c:ef:f8:b9:36:0b:e0:71:c5:0c:0d:23:89:ca:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:16:5A:C4:61:FD:6C:28:26:46:67:58:F8:76:EA:09:CE:3E:98:86
            X509v3 Authority Key Identifier:
                keyid:D4:1F:8E:FD:CF:6E:26:6A:82:C6:13:02:52:6F:6B:CF:C4:65:E5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/591600-8b26-4286-9ec2-77002f70fb4a/1/1B-O_c9uJmqCxhMCUm9rz8Rl5XE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:b3:eb:f7:57:d4:5e:da:25:8a:a0:d0:86:6f:f3:de:0e:b2:
         24:36:d8:f0:bb:d8:26:ba:ac:5e:54:51:6d:36:d5:6f:8d:75:
         21:9d:3c:19:db:41:fa:4a:6a:a5:3a:57:f8:6f:48:af:e0:26:
         95:49:53:b1:7e:e5:5d:ec:c6:b5:cc:77:83:a2:85:70:78:64:
         a8:b6:bf:53:25:2b:d1:c0:a8:aa:c7:ce:88:13:28:f5:84:96:
         b0:7a:e1:a7:ff:7d:ec:dd:d7:cc:6d:8e:db:87:4e:93:a6:b2:
         fa:84:74:e1:fd:4d:52:7f:75:82:52:09:fc:9c:7a:ef:54:29:
         e4:ac:95:da:d8:fb:f3:9c:e6:d6:f4:1a:a8:95:ec:1e:33:f1:
         5f:dd:e6:a1:2e:75:73:93:ec:29:eb:26:75:71:69:4c:03:25:
         ac:00:38:a8:54:0c:49:b6:bd:e6:ca:1d:d2:fb:8f:e4:54:fd:
         74:c4:a6:4c:3c:36:8a:c3:f7:42:7d:dd:5b:a8:7f:84:49:89:
         b1:35:c6:89:e3:8c:f0:66:05:8b:64:91:88:89:eb:cd:e0:50:
         96:d8:52:cc:6e:62:cf:18:9e:c0:cf:30:97:6a:1c:65:c2:43:
         78:10:9e:db:b3:e6:4f:99:22:3f:29:f3:a0:68:b8:cd:6b:45:
         1c:65:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:19 2025 by rpki-client