Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File:                     bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier:          2iXFuQMqRk30MtcxT8j+Y+qRv5o9ZTcro5KOq/MA3Vg=
Subject key identifier:   04:D9:04:8E:1D:75:48:37:9D:0E:68:AD:AD:F4:BF:15:25:57:1C:C5
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer:       /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial:       019A6057B375367CA1CE58995FB7C27C5AF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number:          1716
Signing time:             Fri 07 Nov 2025 22:02:31 +0000
Manifest this update:     Fri 07 Nov 2025 22:02:31 +0000
Manifest next update:     Sat 08 Nov 2025 22:02:31 +0000
Files and hashes:         1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: BA5wgLdJnaOe6i7YI63bnn0vADiPOzBMu2s25tTLN1k=)
                          2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Nov 2025 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:60:57:b3:75:36:7c:a1:ce:58:99:5f:b7:c2:7c:5a:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
        Validity
            Not Before: Nov  7 22:02:31 2025 GMT
            Not After : Nov  8 22:02:31 2025 GMT
        Subject: CN=04d9048e1d7548379d0e68adadf4bf1525571cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:cf:21:3c:82:f1:f3:78:6d:61:f8:5a:b0:
                    18:11:ea:68:54:20:16:a3:8d:b4:59:5e:ad:9a:02:
                    a2:50:da:b0:d3:28:56:54:bb:0a:c6:14:70:c1:47:
                    e4:86:4b:24:01:d4:8e:08:0d:d1:eb:63:41:ed:86:
                    08:f2:1b:bf:be:ea:97:97:dc:bb:58:b7:1b:f1:ce:
                    17:0e:9f:61:ac:9f:0d:a8:68:ac:b0:62:7c:72:23:
                    18:ab:8b:ea:02:4b:54:c3:67:60:2e:34:b6:b7:bb:
                    53:0b:3d:3b:09:b5:e0:c4:31:1b:1e:e1:91:b6:99:
                    e4:bf:8c:d6:fa:b0:d6:f0:55:92:0c:96:39:e5:3f:
                    2d:e7:29:94:14:d5:73:19:81:38:03:00:92:90:88:
                    17:8e:4e:6b:4a:b6:c0:07:57:15:cd:9a:7c:fd:26:
                    f7:b9:61:6d:bb:4f:97:c6:c6:ac:5d:27:de:d2:db:
                    f4:69:29:ef:b7:57:af:2d:cf:76:42:75:1b:83:47:
                    21:d1:c5:de:68:2c:49:28:fd:19:a4:16:ae:4d:1e:
                    f3:2e:1f:43:f7:36:29:21:64:fe:cf:40:33:d5:aa:
                    80:bd:a7:a6:af:b6:95:ba:92:d5:f6:83:ca:d7:b5:
                    f0:24:7a:07:20:00:6d:8e:0d:a2:a0:4f:59:2c:fa:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D9:04:8E:1D:75:48:37:9D:0E:68:AD:AD:F4:BF:15:25:57:1C:C5
            X509v3 Authority Key Identifier:
                keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:27:4f:17:45:f6:41:a9:e7:16:c2:62:0e:7e:8f:23:1a:bb:
         af:ab:4a:e5:a6:cd:9f:af:ea:cc:a9:42:fe:04:dd:18:3c:f2:
         f8:aa:a7:1f:60:7c:cb:7d:20:ff:13:b1:1a:7a:e2:ff:bc:03:
         34:bc:39:fd:33:96:b0:58:e3:7f:f7:8a:71:9e:37:a4:1c:8d:
         9d:c8:fb:50:6b:96:46:36:2e:20:97:d3:86:aa:0f:92:bd:05:
         e2:23:3f:31:c8:be:55:27:02:fb:c0:5f:28:9c:c5:81:8e:6e:
         45:e6:90:85:f0:23:eb:26:e3:de:21:71:5f:0f:2f:e2:86:01:
         45:21:6a:fa:62:2b:6f:87:da:bc:d2:10:00:f0:5f:d6:7b:12:
         d5:81:88:39:0e:32:16:4f:05:96:b9:da:63:00:32:1e:d4:83:
         5d:a3:54:23:24:9b:a7:c8:7f:0a:d9:6c:1f:ba:00:7a:54:01:
         f1:c1:b8:b1:2b:e2:7e:23:ad:ff:73:32:6b:a3:94:a4:5b:62:
         01:5d:b8:22:da:91:0e:48:8d:ae:0c:ec:fd:f9:28:30:58:1a:
         d3:33:7b:21:bb:14:9b:13:3a:5f:46:95:a3:cc:d3:ed:55:79:
         10:bf:b9:ca:82:bc:bd:34:71:2a:c6:dc:cf:60:eb:db:5e:3a:
         30:24:ab:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 23:48:37 2025 by rpki-client