Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
File:                     B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft (raw, json)
Hash identifier:          H01C8+LgkuZ7TQlsyPV57U2I6Fdml6p93aeDlg0qK8E=
Subject key identifier:   B4:96:47:AC:44:03:9A:C0:62:2A:8F:90:58:A4:C4:FB:9E:33:BD:B5
Authority key identifier: 07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15
Certificate issuer:       /CN=07ac64191435789995bc5a67f5b51d9685002815
Certificate serial:       019A24E63BD242624EC47A25B5C64D74D50C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
Manifest number:          16F9
Signing time:             Mon 27 Oct 2025 09:00:59 +0000
Manifest this update:     Mon 27 Oct 2025 09:00:59 +0000
Manifest next update:     Tue 28 Oct 2025 09:00:59 +0000
Files and hashes:         1: 1SBGl6Dsc-NanmKmDFRCZHTHXUE.roa (hash: RQb0cT5Ld94CC4E9QaW/599ZeClVgEWvUpN7FpldNG0=)
                          2: B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl (hash: uCQD8pnjibDVfSNcsz38mL22LnGZs7CaKU71wf4s9GQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:e6:3b:d2:42:62:4e:c4:7a:25:b5:c6:4d:74:d5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ac64191435789995bc5a67f5b51d9685002815
        Validity
            Not Before: Oct 27 09:00:59 2025 GMT
            Not After : Oct 28 09:00:59 2025 GMT
        Subject: CN=b49647ac44039ac0622a8f9058a4c4fb9e33bdb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:e1:44:ed:01:1c:41:e7:ca:a6:33:ca:a5:
                    6b:21:f3:c0:a3:c0:a0:2e:67:3a:ed:b9:ed:23:d4:
                    47:d7:74:c8:4a:be:fb:5a:fa:7c:49:cf:75:40:b3:
                    3b:a6:ae:5e:c7:c3:93:ac:32:d0:25:14:82:6d:f5:
                    13:b2:28:a8:79:a2:15:b7:49:7b:bf:f7:61:76:0a:
                    53:92:87:5f:3f:d8:af:d9:10:7c:e2:5f:0a:3b:f6:
                    f4:73:eb:18:7a:44:6d:f6:6b:ef:fa:9f:4e:50:de:
                    a9:e7:a9:a1:3d:2d:39:dd:b9:f1:3e:11:51:54:c6:
                    fd:d4:d3:24:0d:10:74:6a:6d:e8:4d:53:d4:5f:fe:
                    5b:0b:c2:ab:e3:ab:84:8a:0a:9e:ff:05:10:6d:2e:
                    99:43:46:fc:5b:a3:79:2c:2b:8e:7c:57:fc:45:11:
                    c5:8f:13:ec:05:08:72:6b:98:09:9e:32:1c:2b:93:
                    47:c5:1d:e2:70:44:be:ef:b3:a6:58:4f:f7:61:ec:
                    19:9c:53:ff:db:1a:85:08:eb:c6:5e:f4:76:79:2c:
                    a6:70:4a:46:0b:72:87:c6:9c:bf:a9:8d:a8:86:9a:
                    a8:7c:76:c0:6e:4d:c3:05:4c:56:f5:6b:23:79:3f:
                    35:f7:52:3b:26:2f:00:5d:f7:92:cf:42:14:27:ab:
                    cb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:96:47:AC:44:03:9A:C0:62:2A:8F:90:58:A4:C4:FB:9E:33:BD:B5
            X509v3 Authority Key Identifier:
                keyid:07:AC:64:19:14:35:78:99:95:BC:5A:67:F5:B5:1D:96:85:00:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6xkGRQ1eJmVvFpn9bUdloUAKBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7c2e07-6cf2-4122-99f4-9c6bea4cd5b5/1/B6xkGRQ1eJmVvFpn9bUdloUAKBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:49:b8:72:a0:22:70:41:8d:4c:84:81:9b:24:24:56:ae:
         35:cd:d1:33:3a:f1:48:79:9d:4a:3a:7e:1e:bf:87:ba:97:0f:
         0d:ba:cf:ca:65:58:42:eb:0f:82:45:a5:e4:d7:aa:d3:d4:42:
         06:2f:22:e9:03:bd:57:3d:12:26:22:b5:ae:45:67:7c:69:d7:
         b0:6a:33:00:55:47:19:6a:41:20:86:c2:31:26:03:a1:fc:eb:
         18:59:16:2c:54:6a:0c:72:4d:3c:d8:17:f6:08:ac:85:0c:f8:
         0b:7a:20:f0:9b:05:fb:61:76:9d:f6:a6:d4:21:2a:d1:91:26:
         60:63:84:19:21:10:f3:cf:f7:7d:1e:77:e5:8b:14:ad:4b:85:
         cf:35:41:07:f7:1e:36:d7:5c:87:14:6d:e9:ca:a8:fa:89:10:
         76:e0:33:2d:97:9f:d7:5b:f7:08:b7:ba:e4:77:21:f1:37:ce:
         39:1d:4f:68:59:de:15:20:ee:a7:46:03:01:6a:6f:ce:f9:68:
         17:18:e3:b2:ed:c9:2a:e6:09:3f:83:3d:77:a3:f9:31:0e:4c:
         fc:d5:fe:3c:50:6c:25:bb:51:a1:36:bf:48:4f:b9:69:3f:e0:
         e3:ed:83:ee:5e:dc:99:3a:7c:db:47:8e:6e:d6:9a:76:c2:83:
         ff:db:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:05:14 2025 by rpki-client