Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
File:                     cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft (raw, json)
Hash identifier:          IscFnljHsjCt3cB5WGuCwkYBc05BoXDbgu7HFxYWpe0=
Subject key identifier:   6E:9F:BD:47:64:95:DF:57:0B:41:D2:03:20:FD:1F:6C:EE:6E:88:CA
Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24
Certificate issuer:       /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
Certificate serial:       019A72259DBAB37CE14AD1448D3206EB062A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
Manifest number:          1720
Signing time:             Tue 11 Nov 2025 09:00:59 +0000
Manifest this update:     Tue 11 Nov 2025 09:00:59 +0000
Manifest next update:     Wed 12 Nov 2025 09:00:59 +0000
Files and hashes:         1: 3vU9lDg123BQs9bja01AubVJ0Og.roa (hash: yP+f81+TFRbJ5t0yOxIDgQtB0tKvBjQ2pf/wHd/Zu40=)
                          2: cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl (hash: 9GpfPHrx74qF0BL870FoGu9xgzGWPTcn0Vg6/9lBkMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:9d:ba:b3:7c:e1:4a:d1:44:8d:32:06:eb:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24
        Validity
            Not Before: Nov 11 09:00:59 2025 GMT
            Not After : Nov 12 09:00:59 2025 GMT
        Subject: CN=6e9fbd476495df570b41d20320fd1f6cee6e88ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:ec:2f:e2:00:ab:d4:e9:35:7f:62:bd:6c:
                    df:c6:fa:eb:74:78:dd:18:22:eb:c1:84:13:56:4d:
                    53:d1:da:75:e5:04:e3:42:8f:b6:dd:40:81:7a:6b:
                    3c:09:7d:95:5f:e8:11:6c:ad:3c:07:34:33:2d:db:
                    1d:25:48:de:12:75:69:ac:75:c5:e4:6d:26:84:30:
                    0a:7c:ad:21:18:ff:9c:a3:2e:49:a4:19:ac:32:47:
                    c7:e3:4f:24:bf:b4:8b:a6:85:ac:73:11:4d:81:f7:
                    09:54:d7:f5:2e:20:23:5d:35:91:a3:7b:10:bc:3e:
                    fa:4c:07:6d:1d:de:d2:57:de:07:db:2b:b1:a1:91:
                    2a:d3:78:0c:e3:c5:5d:40:c0:ba:6e:c1:c3:9b:6f:
                    3e:bc:59:c6:a1:b3:14:cd:d6:4c:b9:21:ed:6c:79:
                    61:3d:0e:93:2b:c5:c0:d9:fe:2e:91:fe:c4:36:c3:
                    12:d1:fc:95:c2:a3:0f:4a:53:19:9b:3e:97:6e:a3:
                    77:9e:94:88:6a:f4:aa:da:ef:1d:0a:7a:94:19:33:
                    cb:4c:fd:d1:c7:6e:a3:89:ba:65:9b:9b:a7:8c:d7:
                    e6:19:6f:a7:5f:80:f9:ff:e4:72:45:ab:83:81:e9:
                    4d:50:eb:ae:69:7c:bd:2a:9c:60:0a:69:f9:a8:57:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:BD:47:64:95:DF:57:0B:41:D2:03:20:FD:1F:6C:EE:6E:88:CA
            X509v3 Authority Key Identifier:
                keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:e2:61:46:d3:00:ed:c8:fa:72:1b:0f:f3:7b:bc:3a:20:6f:
         20:d6:da:22:4e:dc:c0:1d:23:49:dc:71:05:de:7d:a3:28:0a:
         09:66:44:58:df:9e:eb:c0:98:9e:f3:30:e2:15:f8:e9:1c:9f:
         91:53:54:52:e1:f1:b4:f1:e4:16:b6:da:2c:7c:7e:5a:ac:40:
         30:0e:d7:91:78:74:63:3a:aa:62:dc:5d:98:ea:44:16:ae:47:
         b8:1a:69:1f:81:f6:a1:50:de:0b:ed:a8:bb:0a:2c:58:c7:8b:
         fe:f8:f1:e5:49:c3:03:19:3b:26:6a:6a:5b:84:48:88:84:33:
         f4:35:d1:a8:6a:da:3f:1b:cf:d1:ba:b1:6c:76:8b:fc:26:ab:
         e1:83:86:42:fa:8e:5a:78:a6:f8:3f:94:f8:a3:26:31:e4:af:
         d2:8d:b1:64:f2:28:aa:8d:c9:3c:4a:02:0e:4f:32:22:be:27:
         6d:be:7f:eb:ca:da:5a:43:ed:62:bf:40:5c:5f:8a:bf:e2:9a:
         7b:7e:26:2b:e7:b3:dd:ac:2e:95:82:5b:bd:95:db:7c:4c:df:
         47:a5:3d:2a:6f:05:b5:81:ef:96:3d:94:fd:5f:22:38:3b:0c:
         85:b0:89:a2:c6:00:83:82:02:28:01:f4:6e:28:5d:68:7e:1c:
         99:0d:7b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:39 2025 by rpki-client