Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File:                     tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier:          NreGflJZUU35R+/dnZ4lzAiKFwszuswYzoV/qv43hMw=
Subject key identifier:   E6:05:53:1F:12:38:CE:2B:FE:D1:51:77:51:60:64:87:D6:D8:66:C7
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer:       /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial:       019A21E492C47D9CEFB908222AD8F92DED7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number:          16F6
Signing time:             Sun 26 Oct 2025 19:00:19 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:19 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:19 +0000
Files and hashes:         1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
                          2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: s8e5novl09n0yz7ZKGGKiD2SdppQrPaVeBCvcID0vkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e4:92:c4:7d:9c:ef:b9:08:22:2a:d8:f9:2d:ed:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
        Validity
            Not Before: Oct 26 19:00:19 2025 GMT
            Not After : Oct 27 19:00:19 2025 GMT
        Subject: CN=e605531f1238ce2bfed1517751606487d6d866c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:1a:e5:c4:b8:c6:1a:09:85:b5:18:f0:9e:
                    bb:b3:8e:9e:2f:aa:77:1a:84:e9:33:e5:67:b9:f8:
                    21:58:be:05:33:8f:06:c3:e1:2d:2a:49:cd:80:63:
                    47:0f:4a:e7:42:25:96:99:45:51:38:27:b8:38:ba:
                    d8:3b:08:32:f0:a6:8e:4e:4e:e3:88:b3:1a:2f:f2:
                    a9:3b:09:28:f4:33:d9:be:05:12:2d:f5:25:ea:9c:
                    d6:0a:38:53:a1:b1:d7:79:f7:bc:0e:e0:23:8a:b9:
                    7a:15:1f:d5:74:fb:62:69:95:fb:48:54:30:c1:0b:
                    09:f3:20:dc:bb:96:3d:89:50:47:c3:6b:94:73:2f:
                    7b:67:53:b8:e4:dc:d7:c3:cd:b7:e6:f0:cd:89:ee:
                    9e:5d:9f:e8:08:e1:0b:ad:01:5a:01:d1:1f:c1:e2:
                    1a:43:54:f5:56:b7:61:4a:f1:0e:3b:dc:20:a2:04:
                    4d:8e:3f:c8:7a:d8:e4:51:a5:73:d7:c5:37:92:90:
                    60:b9:0c:48:91:78:ff:55:89:95:e7:c1:72:2d:63:
                    5b:ae:91:fa:5a:c0:e2:a0:a0:54:f3:78:74:f3:96:
                    9c:d5:a7:53:61:c1:5e:85:a0:55:74:93:c2:3d:ec:
                    d6:c9:ff:61:96:5e:69:85:d2:41:1b:4c:14:db:38:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:05:53:1F:12:38:CE:2B:FE:D1:51:77:51:60:64:87:D6:D8:66:C7
            X509v3 Authority Key Identifier:
                keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:97:3e:8e:26:1e:0f:f6:28:c2:93:11:f6:21:e8:a0:1e:e0:
         2e:89:71:e3:62:97:55:c1:71:36:c5:73:ee:ad:a3:2b:88:7b:
         6a:03:63:9f:0f:6f:b0:ba:c9:4b:b4:1c:65:e6:3e:d0:f3:29:
         b2:40:2b:53:6c:33:4a:bc:af:d9:bd:04:a7:22:f6:27:bd:a7:
         07:16:4e:7b:ff:19:d3:2f:d8:85:37:3e:01:11:f3:84:02:b9:
         67:7e:a9:76:cc:82:62:c5:6c:fe:f7:73:58:17:d8:8f:7f:74:
         46:c5:db:61:e9:5e:78:ff:7b:4a:5b:8c:82:7e:a7:fd:63:7a:
         6e:7c:9e:3e:0f:37:77:73:c9:63:6d:f0:71:1e:1c:e4:8e:66:
         27:84:f4:a0:d9:1c:4e:a0:af:d8:52:a6:d5:1e:ed:5e:f6:82:
         99:35:49:ec:5a:10:ae:cc:8b:75:53:34:56:ec:7c:38:31:4c:
         d3:10:da:1e:a1:fc:db:b3:c4:43:4f:7e:b8:2b:00:2d:2f:24:
         4a:6c:a6:85:2a:1f:a0:87:93:22:bc:48:75:e6:3e:21:1b:7a:
         34:3a:d6:63:11:ce:19:e2:3a:a8:84:50:a5:37:c5:13:8d:6b:
         20:07:84:6b:3f:75:70:6c:0d:3e:86:3b:23:ad:4e:65:7f:4a:
         e0:a2:9a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:30 2025 by rpki-client